Legal

Privacy Policy

Your privacy is fundamental to our mission. We built NowIRead with student safety and data protection at the core.

Effective Date: March 1, 2026

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, role (student, parent, teacher, or freelance reader), and — for student accounts — grade level and date of birth.

Reading Data: We collect information about books you add to your library, reading progress, chapter completions, quiz scores, points earned, streaks, and achievement badges.

Payment Information: Subscription payments are processed by Stripe. We do not store your credit card number or full payment details on our servers. We receive and store a Stripe customer ID, subscription status, and billing history summary.

Authentication Data: If you sign in with Google OAuth, we receive your Google profile name, email, and profile picture. We do not access any other Google account data.

Usage Data: We collect anonymized analytics about how you interact with the platform (pages visited, features used, session duration) to improve the product.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the NowIRead platform
  • Generate AI-powered comprehension quizzes and personalized book recommendations
  • Calculate points, track reading streaks, and manage the rewards system
  • Enable parent-teacher communication and student progress tracking
  • Process subscription payments and manage billing
  • Send transactional emails (account verification, password resets, subscription updates)
  • Analyze aggregate usage trends to improve the product (no individual profiling for advertising)

3. Children’s Privacy & COPPA Compliance

NowIRead is committed to complying with the Children’s Online Privacy Protection Act (COPPA). We take the privacy of children under 13 very seriously.

Parental Consent: Children under 13 cannot create accounts independently. A parent or legal guardian must create the child’s account and provide verifiable parental consent before the child can use the platform.

Limited Data Collection: For children under 13, we collect only the minimum information necessary to provide the service: a display name (which need not be the child’s real name), grade level, and reading activity data.

No Behavioral Advertising: We never use children’s data for targeted advertising, behavioral profiling, or sale to third parties.

Parental Rights: Parents can review their child’s personal information, request deletion of their child’s data, or revoke consent at any time by contacting us at support@nowiread.com.

4. FERPA Compliance

When NowIRead is used in a school or classroom context, we operate as a “school official” under the Family Educational Rights and Privacy Act (FERPA). Student education records are used solely for legitimate educational purposes.

We do not disclose student education records to third parties except as permitted by FERPA or as directed by the school. Teachers and administrators can access student reading data only for students within their assigned classrooms or school.

Schools and parents may request access to or deletion of student education records by contacting us.

5. Third-Party Services

We use the following third-party services to operate NowIRead. Each has its own privacy policy governing how it handles data:

  • Stripe — Payment processing for subscriptions
  • Google OAuth — Optional social sign-in
  • AI Service Provider — AI-generated quizzes and book recommendations (reading data is sent for processing; our AI provider does not use this data for model training per our data processing agreement)
  • PostHog — Anonymized product analytics
  • Sentry — Error monitoring and performance tracking
  • Neon — PostgreSQL database hosting
  • Vercel — Application hosting and deployment
  • Resend — Transactional email delivery

6. Cookies & Tracking

We use cookies and similar technologies for the following purposes:

  • Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
  • Analytics Cookies: Used by PostHog to understand how the platform is used in aggregate. These can be opted out of.

We do not use advertising cookies or tracking pixels. We do not sell data to advertisers or data brokers.

7. Data Security & Retention

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), encrypted database connections, secure authentication tokens, and role-based access controls.

We retain your personal data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

Anonymized, aggregated data (e.g., platform-wide reading statistics) may be retained indefinitely for research and product improvement.

8. Your Rights

You have the right to:

  • Access your personal data and request a copy of it
  • Correct inaccurate or incomplete personal data
  • Delete your account and personal data
  • Opt out of analytics cookies and non-essential data collection
  • Data portability — request your reading history and quiz data in a machine-readable format

To exercise any of these rights, contact us at support@nowiread.com. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the platform at least 30 days before the changes take effect. Your continued use of NowIRead after the effective date constitutes acceptance of the updated policy.

10. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: support@nowiread.com

Company: NowIRead, Inc.