Privacy

What Readum keeps

About the adult: a sign-in identity, a verified email, family members and their roles, and the family’s time zone.

About each child, typed by a parent: first name and an optional nickname, grade, school and teacher, quiz results, goals, Book Queue, reading status and Library Trips.

Readum does not keep birthdays, photos, addresses or free-text notes about a child.

Photos of quiz results

Photos are read on the device and then deleted. They are never uploaded. Only the facts read from them (title, author, score, points, date) are saved.

Test builds: Library Scan Mode

Some test builds of Readum, given through TestFlight, include Library Scan Mode. Only adults the owner adds to a tester list can open it. When a tester uses it, photos of a book’s front cover, back cover and copyright page are uploaded to Readum’s storage, with the book’s barcode and whether the app matched it correctly. Photos are made smaller and have their location and other details removed before upload. They are kept under a code name, not the tester’s name or email, and are not linked to any child or family. They are kept until the tester deletes the scan in the app. Deleting an account does not remove them. Readum’s App Store version does not include this mode.

Forwarded quiz emails

If a parent turns on Email Import, quiz emails sent to the child’s Import Email address are received by Postmark and kept by Readum until they are processed. The address can include the child’s first name.

Notifications

If a parent allows notifications, Readum keeps the phone’s notification address and the four notification choices. A notification’s text can include the child’s first name and a book title. Readum deletes each one seven days after it is sent. Notifications go through Expo and Apple.

Book searches and counts

A barcode or a typed search that the app can’t answer on the phone is sent to Readum’s server. A typed search is kept, with no account attached, only if it is seen on at least three days and five times, for up to 12 months. Readum counts how many families find a book with one-way codes that hold no names (pseudonymous, not anonymous).

What Readum does not collect

Location, contacts, microphone, Face ID data or advertising identifiers. Readum has no tracking and no advertising or analytics tools.

Services that help run Readum

Supabase (storage, in the United States), Clerk (sign-in), Postmark (quiz emails), Apple (sign-in, iCloud Backup, purchases, notifications), Google (sign-in), Sentry (error reports, with no user and no location), RevenueCat (purchase status), Cloudflare (invitation links) and Expo (app updates and notifications). Book details and covers come from Open Library.

How long Readum keeps things

A deleted child is hidden at once and erased after 30 days. During those 30 days the Family Organizer can restore the child from Recently Deleted. Invitations and transfer codes last seven days. Readum blanks the content of a forwarded quiz email seven days after it is processed. Postmark, the service that receives forwarded quiz emails, keeps its own copies for 45 days, and those copies are not encrypted at rest.

Deleting your account

Open Account, then Delete Account. Readum erases the adult’s email and name, removes access, and erases a family left empty, with its children. Copies in backups expire on their own schedule.

Questions

Write to support@readum.app.