Reading should feel private.

1. Who this policy covers

This policy applies to the ToRead mobile app, this website, subscription access, the optional launch list, content reports, and support requests. The operator identified in the contact section is responsible for personal information under its control. Its Privacy Officer oversees this policy and privacy requests.

2. Information kept on your device

ToRead can store reader information locally so the library works without creating a child account. This information is not sent to ToRead’s servers as part of normal reading.

• Nickname, avatar, age setting, reading level, language, interests, and reading preferences.
• Favorites, progress, vocabulary activity, and downloaded stories.
• Accessibility, comfort, narration, and reading-mode choices.

3. Information ToRead may receive

ToRead limits server-side information to what is needed to operate the service. Depending on the feature you use, this may include:

• Launch list: an email address, the time of signup, consent, and unsubscribe status.
• Subscriptions: a random installation identifier, platform, purchase entitlement, expiry date, and transaction or provider references. Reader profile details are not included.
• Support and content reports: the contact details and message you choose to send, plus the story or edition involved and basic technical context.
• Diagnostics: crash, error, performance, app version, device type, operating system, and request information. Default personal-information collection is disabled in our monitoring configuration.
• Website and server logs: IP address, browser or app type, requested page or endpoint, and timestamp for security and reliable operation.

4. Why we use it

We use information only for the purpose explained when it is collected or for a compatible purpose allowed by law.

• Provide the story catalogue, downloads, offline access, subscription status, and purchase restoration.
• Reply to support requests and review reports about a story.
• Send the launch message requested by a person who joined the list.
• Prevent abuse, protect the service, fix errors, and understand reliability.
• Meet legal, accounting, fraud-prevention, and regulatory duties.

5. What we do not do

ToRead does not sell or rent personal information. We do not show behavioural advertising, create advertising profiles from reading activity, enable cross-app tracking, or use reader profiles to make decisions with legal or similarly important effects. We do not need precise location, contacts, the camera, or the microphone for the reading experience.

6. Service providers and transfers

We use a limited number of providers to run ToRead. Depending on the release and your device, these can include Apple or Google for app distribution and payment, Adapty for subscription entitlement, Sentry for optional error monitoring, infrastructure providers for hosting and storage, and an email provider for the launch list. We share only what that provider needs for its task.

A provider may process information outside Québec or Canada, where different laws apply. Before using a provider, we assess the information involved, the destination, the contract, and the safeguards that are appropriate to the risk. We may also disclose information when required by law or when reasonably necessary to protect people, rights, or the service.

7. Children and family use

ToRead is designed for readers of all ages. A parent or guardian should set up and manage the app for a child who cannot provide meaningful consent, including children under 13. Reader profiles do not require a child’s email address or account. Please use a nickname rather than a full legal name and do not send sensitive information in a support message.

We do not knowingly ask a child under 13 to join the launch list or contact support without a parent or guardian. If you believe a child sent personal information to us, contact the Privacy Officer so we can review and delete it where appropriate.

8. Your choices

You can edit or delete a local reader profile in the app. Deleting a profile removes its local profile, progress, favorites, and vocabulary activity; downloaded story files can remain until they are separately removed or the app data is deleted.

Joining the launch list and sending a support message are optional. Every marketing email will include an unsubscribe method. You can also contact us to withdraw consent where consent is the legal basis. Withdrawal does not affect handling that already occurred lawfully and may make an optional feature unavailable.

9. Retention and deletion

Local reader information remains on the device until a profile, download, or app data is deleted. Device backups are controlled by the device platform and your settings.

Server-side information is kept only as long as needed for the purpose described, to protect the service, or to meet legal duties. Launch-list information is removed when the list is closed or after an unsubscribe, except for a minimal suppression and consent record. Support records, diagnostics, logs, and anonymous subscription records follow category-specific schedules and are then deleted or anonymized. You may ask the Privacy Officer about the schedule that applies to your information.

10. Security

We use safeguards appropriate to the sensitivity of the information, including encrypted connections, access controls, credential hashing, restricted administration, and secure device storage for subscription credentials. No system is perfectly secure. If a breach creates a real risk of significant harm, we will investigate, keep the required records, and notify affected people and regulators as required by law.

11. Your privacy rights

Subject to applicable law, you may ask whether we hold personal information about you, request access or correction, withdraw consent, and complain about our handling. You may also ask about categories of people with access, service providers, transfers outside Québec, and the applicable retention period. We may need to verify your identity before responding.

Most reader information is only on your device, so ToRead cannot retrieve it from its servers. If you are not satisfied with our response, you may contact the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

12. Changes to this policy

We may update this policy as the service or law changes. The new version will show its effective date and will be posted here. We will give additional notice, and seek consent if required, before a material new use of personal information takes effect.