privacy

This Privacy Policy explains what information Reax ("Reax", "we", "us") collects through the Reax app (Android and iOS) and the reaxbooks.com website (together, the "Service"), how it is used, and the choices you have. Reax is a book-tracking and social reading platform: you can track your reading, rate and review books, follow other readers, and discover new books.

This policy describes Reax as it actually works today. If a feature described here changes, we will update this page.

Account information: when you create an account, we collect your email address and password (email/password sign-up), or, if you choose "Continue with Google" (or "Continue with Apple," once that option is enabled), the basic profile information that provider shares with us to create your account, such as your name and email address.

Profile information: your username, display name, profile photo, bio, country, preferred language, and whether your profile is set to public or private.

Reading and social activity you create: your library (books marked Want to Read, Reading, Finished, or Did Not Finish), ratings, reviews, replies, quote posts, likes, saves, favorite books, follows and follow requests, blocks, and your yearly reading goal.

Imported reading history: if you choose to import your library from Goodreads or The StoryGraph, we process the file you upload (typically a CSV or spreadsheet export containing book titles, authors, shelves, dates, and ratings) to add those books to your Reax library.

Content Guide submissions: optional, book-level content notes you choose to submit (for example, flagging that a book contains certain themes).

Support and other communications: if you contact us directly, we collect whatever information you include in that message.

If you upload a profile photo, or manually submit a book cover image while adding a book to the catalog, that image is stored so it can be displayed in the app. Uploaded images are processed and size-limited before storage.

Reax does not currently use any third-party analytics or crash-reporting service, and does not track you across other apps or websites.

Push notification token: if you enable notifications, we store a device push token (and the platform, e.g. iOS or Android) so we can deliver notifications to your device.

Camera and photo access: if you scan a book’s barcode, the camera is used locally on your device to read the barcode value (an ISBN) -- Reax does not save the camera image itself. If you pick a photo for a book cover or profile photo, only the image you actively choose to upload is used, as described above.

Standard technical logs: like effectively every website and cloud-hosted app, our infrastructure providers (see Section 6) may automatically log basic technical information needed to operate the Service, such as IP address, browser or device type, and request timestamps. Reax itself does not separately collect or analyze this information beyond what these providers log for normal operation and security purposes.

To create and secure your account, and keep you signed in.

To provide Reax’s core features: your library, ratings, reviews, feed, search, follows, notifications, and book discovery.

To enforce your privacy and blocking choices (see Section 7).

To send you notifications about activity relevant to you (for example, a new follower, reply, or like), where enabled.

To import books into your library when you use the Goodreads/StoryGraph import feature.

To maintain and improve the Reax book catalog (for example, matching a book you search for against Google Books or Open Library data).

To investigate abuse, enforce our content and community rules, and keep the Service secure.

Reax relies on a small number of third-party services to operate. We share the minimum information each service needs to perform its role, and we do not sell your personal information to anyone.

• Supabase -- our backend provider. Supabase hosts our database, handles authentication, stores uploaded media, and runs the server-side functions Reax depends on. Nearly all information described in this policy passes through or is stored by Supabase on our behalf.

• Google -- if you sign in with "Continue with Google," Google authenticates you and shares basic profile information with us. Separately, when you search for a book, your search terms may be sent to the Google Books API (through our own server) to look up book information -- this is unrelated to Google sign-in.

• Apple -- "Continue with Apple" is present in Reax but is not yet enabled for account creation. If and when it is enabled, Apple will authenticate you and share the basic profile information you choose to share (which may be a private relay email address, at your choice) with us.

• Open Library -- an open book-metadata database we query (through our own server) to help populate and enrich Reax’s book catalog.

• Vercel -- hosts the reaxbooks.com website.

• Expo / EAS -- the build and app-update infrastructure used to compile and distribute the Reax mobile app.

Each of these providers processes information under its own privacy policy and terms, which we encourage you to review if you’d like more detail on how that specific provider handles data.

You can set your Reax profile to public or private in Settings. If your profile is private, users who don’t follow you cannot see your bio, location, favorite quote, favorite genres/authors, library, reviews, or your followers/following lists -- they only see your username, display name, and avatar.

Your username and display name may still appear in search results even if your profile is private, so that other readers can find you and send a follow request. Setting your profile to private restricts who can see your content, but it does not remove your account from search.

If you block another user, that user can no longer view your profile or content, and existing notifications between you and that user are hidden from both of you.

Anything you post to a public profile -- reviews, quote posts, ratings, replies, and library activity where visible -- can be seen by other Reax users (and, if you’re not logged in, by guests browsing Reax) according to these visibility rules.

We keep your account information for as long as your account exists, so that Reax can function (your library, reviews, and social connections). If you delete your account, we delete the data described in Section 9 below.

Shared catalog data -- for example, a book record in Reax’s catalog -- is not personal to any one user and is not deleted when an account is deleted, since other readers rely on it. If you contributed that catalog entry, your account’s association with it is removed rather than the catalog entry itself.

Our infrastructure providers may retain minimal operational logs for a limited period for security and reliability purposes, consistent with their own standard practices.

You can permanently delete your Reax account at any time from Settings → Delete Account. Deleting your account removes your profile, library, ratings, reviews, replies, quote posts, likes, saves, favorites, follows and follow requests, blocks, notifications, and your uploaded profile photo, and deletes your underlying account credentials.

One exception: if you manually submitted a book cover image to Reax’s shared catalog, that image may remain in place after your account is deleted, because it can still be the live cover image other readers see for that catalog entry -- it is catalog content, not personal content, at that point.

Account deletion is processed as soon as you confirm it. In rare cases where a step of the deletion process needs to be retried (for example, a temporary network issue), Reax is designed so the process can safely resume without creating duplicate or inconsistent data, and without affecting any other account.

You can review and update your profile information, switch your profile between public and private, manage who you follow and who follows you, block or unblock other users, manage your notification settings, and delete your account, all from within the app.

You can request to have your account deleted at any time, as described above. If you have a privacy question we haven’t answered here, you can reach us using the contact information in Section 15.

We use measures such as encrypted connections (HTTPS) and access controls to help protect your information. That said, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

Reax is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us using the information in Section 15 and we will take appropriate steps to remove it.

Reax is available to readers in many countries. If you use Reax from outside the location where our service providers operate, your information will be transferred to, stored, and processed in that location, which may have different data protection laws than your own country.

We may update this Privacy Policy from time to time as Reax changes. If we make a material change, we’ll update the effective date below. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or how your information is handled, contact us at privacy@reaxbooks.com.