# Privacy Policy for Reedy

**Effective Date:** August 19, 2025
**Last Updated:** August 19, 2025

## Introduction

Reedy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Reedy (the "App"). Please read this Privacy Policy carefully.

## 1. Information We Collect

### 1.1 Account Information
- **Apple Sign-In Data**: When you sign in with Apple, we receive your Apple ID email (or relay email) and may receive your name if you choose to share it
- **Profile Information**: Username, display name, and profile preferences you provide
- **Authentication Data**: Secure tokens and identifiers necessary for account management

### 1.2 Reading and Usage Data
- **Reading Progress**: Chapter progress, bookmarks, reading history, and completion status
- **Reading Analytics**: Reading speed, time spent reading, session duration, and reading patterns
- **Milestones and Achievements**: Progress toward reading goals and completed achievements
- **App Preferences**: Font size, reading themes, language selection, and accessibility settings

### 1.3 Purchase Information
- **Payment Data**: Payment information is processed securely through Stripe and Apple's payment systems. We do not store your complete credit card information
- **Purchase History**: Records of books purchased and subscription status
- **Transaction Data**: Payment confirmations and receipt information

### 1.4 Technical Information
- **Device Data**: Device type, operating system version, app version, and device identifiers
- **Usage Analytics**: App crashes, performance data, and feature usage statistics
- **Network Information**: IP address and network connectivity status

### 1.5 Camera and Attention Detection Data (Optional Feature)
When you enable the optional Attention Detection feature:
- **ARKit and TrueDepth Data**: On supported devices, we use ARKit and TrueDepth APIs for enhanced face and eye tracking
- **Face Tracking Information**: Real-time facial tracking data including head position, orientation, and eye movement patterns
- **Gaze Detection**: Eye tracking data to determine reading focus and attention levels
- **Facial Analysis**: Detection of reading fatigue through advanced facial analysis (blink patterns, head movements)

**Important Privacy Notes for Camera Features:**
- This feature is completely opt-in and disabled by default
- All facial and eye tracking data is processed locally on your device in real-time
- No facial recognition, biometric identification, or user identification occurs
- No camera data, facial images, or biometric information is stored on your device
- No facial or biometric data is transmitted to our servers or any external services
- TrueDepth and camera data is discarded immediately after processing
- You can disable this feature at any time in Settings > Reading > Attention Detection

### 1.6 Communications
- **Support Requests**: When you contact us for support, we collect your email address and the content of your communications

## 2. How We Use Your Information

We use the collected information for the following purposes:

### 2.1 Core App Functionality
- Provide and maintain reading services
- Sync your reading progress across devices
- Personalize your reading experience
- Track reading achievements and milestones

### 2.2 Account Management
- Create and manage your user account
- Authenticate your identity
- Provide customer support
- Process payments and purchases

### 2.3 App Improvement
- Analyze usage patterns to improve app performance
- Develop new features and content
- Fix bugs and technical issues
- Conduct research and analytics

### 2.4 Camera and Attention Detection (When Enabled)
When you opt-in to use the Attention Detection feature:
- Provide reading wellness and accessibility assistance
- Detect when you look away from reading content to automatically pause/resume
- Monitor reading focus and attention levels for improved reading experience
- Assist users with attention difficulties (ADHD, etc.) through intelligent pause/resume functionality
- Use precise eye tracking and facial analysis to detect reading fatigue
- Enhance reading accessibility through advanced gaze detection

**Technical Implementation:**
- ARFaceTrackingConfiguration: Utilizes TrueDepth camera system for precise face tracking
- ARFaceAnchor.BlendShapeLocation: Accesses facial blend shape data for detailed eye movement analysis
- Eye tracking blend shapes: Uses .eyeBlinkLeft, .eyeBlinkRight, .eyeLookInLeft, .eyeLookOutRight, .eyeLookOutLeft, and .eyeLookInRight
- Face orientation tracking: Determines head position and orientation relative to the screen
- Automatic fallback to Vision framework on non-TrueDepth devices

### 2.5 Communications
- Send important updates about the app
- Respond to your support requests
- Notify you about new features or content

## 3. Information Sharing and Disclosure

### 3.1 Third-Party Service Providers
We share information with trusted third-party service providers who assist us in operating our app:

- **Supabase**: Cloud database and authentication services
- **Stripe**: Payment processing services
- **Apple**: App Store services and Apple Sign-In authentication

**Important Note:** Camera data, facial tracking information, ARKit data, and TrueDepth data from the Attention Detection feature are NEVER shared with any third-party service providers. This data is processed exclusively on your device.

### 3.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal requests, such as:
- Court orders or subpoenas
- Government investigations
- Protection of our rights or property
- Emergency situations involving personal safety

### 3.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

### 3.4 No Sale of Personal Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

## 4. Data Storage and Security

### 4.1 Data Storage
- **Local Storage**: Some data is stored locally on your device using secure iOS storage mechanisms
- **Cloud Storage**: Reading progress and account data are securely stored using Supabase cloud services
- **Data Location**: Your data may be stored on servers located in various countries

### 4.2 Security Measures
We implement appropriate technical and organizational security measures:
- Encryption of data in transit using HTTPS/TLS
- Secure authentication using industry-standard protocols
- Regular security assessments and updates
- Access controls and monitoring systems

### 4.3 Data Retention
We retain your information for as long as necessary to provide our services and comply with legal obligations. You may request deletion of your account and associated data at any time.

## 5. Your Rights and Choices

### 5.1 Access and Control
You have the following rights regarding your personal information:
- **Access**: Request a copy of your personal data
- **Correction**: Update or correct inaccurate information
- **Deletion**: Request deletion of your account and data
- **Portability**: Request your data in a portable format

### 5.2 Communication Preferences
You can control communications from us through:
- App notification settings
- Email unsubscribe links
- Contacting our support team

### 5.3 Account Deletion
To delete your account and associated data:
1. Go to Settings > Profile > Delete Account in the app, or
2. Contact us at contact@reedy.me

## 6. Children's Privacy

Reedy is designed for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.

## 7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers.

## 8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights

## 9. European Privacy Rights (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent

To exercise these rights, please contact us using the information below.

## 10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy in the app
- Sending an email notification (if applicable)
- Displaying a prominent notice

Your continued use of the app after changes become effective constitutes acceptance of the updated Privacy Policy.

## 11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

**Email:** contact@reedy.me
**Website:** www.reedy.me
**Mailing Address:**
Endless Y
Rua José Mendes dos Santos 342
Campinas, São Paulo 13070-050
Brazil