Reading Pal — Privacy Policy

Effective date: 2026-05-23

1. Introduction

Reading Pal is a reading tracker and pomodoro timer app operated by Darren Lin (solo developer, Taiwan). This Policy explains what personal data we collect when you use Reading Pal on Android or iOS, why we collect it, who we share it with, and the rights you can exercise over it.

This Policy applies to the Reading Pal mobile application and the backend API that supports it. It does not apply to third-party services you may link (e.g., Google) — those are governed by their own privacy policies.

2. Data We Collect

(a) Account Data

(b) Authentication Tokens

• Google OAuth: we store Google's user ID (sub), email, email_verified flag, and the raw id_token payload for verification audit. Retained at most until account deletion.
• Refresh token hashes: we store only a bcrypt hash of the refresh token on the server. The raw token lives exclusively in your device's SecureStore.

(c) Reading Activity

• Books on your shelf: book ID (linked to a public catalog), your reading status (reading / finished / want to read / etc.), your progress (page number or percentage)
• Reading session timestamps and duration (when you start, pause, and end a pomodoro session)
• Free-text notes you attach to books
• Status-change history (an audit trail used to compute reading statistics)

(d) Device Data

(e) Server Logs

Each request to our backend logs:

• IP address (used for rate-limiting, security, and abuse detection — rotated automatically after 30 days)
• HTTP method, URL path, response status code, response latency, request ID

We do not log request bodies in production.

(f) Audit Logs

We maintain an audit log for four event types only: deletion_requested, deletion_cancelled, deletion_executed, and export_requested. For each event we record:

• Timestamp
• Event type
• Numeric user ID
• IP address, device ID, and user-supplied deletion reason (if provided, capped at 2,000 characters) — these metadata fields are set to NULL at the moment of hard delete; only the event type, timestamp, and numeric user ID survive beyond that point

These records survive your account deletion and are kept for 6 months after execution to demonstrate that we honored your request. They contain no book notes or reading content. After hard delete, the surviving records contain no PII — only event type, timestamp, and a numeric ID.

(g) Crash and Error Reports (via Sentry)

When the app crashes or the backend encounters an error, we send a report to Sentry containing:

• Stack trace
• Your numeric user ID (not your email or display name)
• App version and environment label
• Request URL path (query strings stripped)

We explicitly do not send: your email address, display name, IP address, request body, cookies, refresh tokens, or any free-text note content.

Sentry retains these reports for 7 days (free tier default). Sentry data is hosted in the EU region (de.sentry.io). See Section 4 for Sentry's processor details.

(h) Settings and Preferences

• Theme selection
• Pomodoro work/break durations
• Biometric lock preference
• Individual notification toggles (each type stored separately)

(i) Gamification Data

• Earned achievements and the timestamps when they were unlocked
• Points ledger (in-app reward currency)
• Inventory of redeemed items (e.g., themes you've unlocked)

3. How We Use Your Data

Planned future use — in-app advertising: Once Reading Pal is publicly launched and stable, we plan to introduce Google AdMob advertising. When we do, this Policy will be updated 30 days in advance. Data shared with AdMob will be limited to the Android Advertising ID and contextual data (e.g., app category). We will not share your account data, email, display name, or reading content with advertisers.

4. Who Has Access (Sub-processors)

We do not sell personal data to any third party, ever.

5. International Data Transfers

All your account, library, and reading data is stored in DigitalOcean's Frankfurt (EU) data center (region: FRA1). EU users' data does not leave EU territory.

Sentry crash reports also use Sentry's EU region (de.sentry.io).

Some sub-processors (Google, AdMob) operate globally and may move data between regions for service reliability per their own privacy terms.

6. Your Rights

You can exercise most rights directly in the app without emailing us.

EU / EEA users: you also have the right to lodge a complaint with your national supervisory authority (e.g., your country's data protection authority).

Taiwan users: rights are grounded in the Personal Information Protection Act (個人資料保護法, PIPA).

We will respond to requests within 30 days of receipt.

7. Children

Reading Pal is not directed at children under 13. We do not knowingly collect personal data from users under 13. If you believe a child has created an account, email us at tn08869679@gmail.com and we will delete the account.

8. Cookies and Tracking Identifiers

Reading Pal is a mobile app — there are no web cookies. We use these identifiers:

9. Data Retention

10. Marketing Communications

Marketing push notifications default to OFF. You opt in explicitly: Settings → Notifications → "Marketing push". You can turn off any time in the same place.

We do not send marketing emails.

11. Changes to This Policy

Material changes (new data category, new sub-processor, expanded use of existing data) are announced via an in-app banner 30 days before taking effect. The updated version is dated.

Minor edits (typo fixes, clarifications that don't affect your rights) take effect immediately without prior notice.

Pre-disclosed upcoming changes:

• We plan to introduce Google AdMob advertising once Reading Pal is publicly launched. We will update this Policy with the specific data shared with AdMob, the controls available to you, and the opt-out mechanism, at least 30 days before AdMob goes live.
• Apple Sign-In will be added when Reading Pal launches on the iOS App Store. When it does, your Apple-provided user identifier (relay email if you choose "Hide My Email") will be stored similarly to Google OAuth data described in Section 2(b).

12. Contact

For privacy questions, complaints, or requests we cannot handle in-app:

• Email: tn08869679@gmail.com (This is an interim personal Gmail address. We will migrate to a dedicated domain email in a future update and revise this section accordingly.)

We aim to respond within 30 days.

13. Effective Date and Version History