This Privacy Policy explains what information Reax ("Reax", "we", "us") collects through the Reax app (Android and iOS) and the reaxbooks.com website (together, the "Service"), how it is used, and the choices you have. Reax is a book-tracking and social reading platform: you can track your reading, rate and review books, follow other readers, and discover new books.

This policy describes Reax as it actually works today. If a feature described here changes, we will update this page.

Account information: when you create an account, we collect your email address and password (email/password sign-up; the password is stored only in hashed form by our authentication provider), or, if you choose "Continue with Google" or "Continue with Apple", the basic profile information that provider shares with us to create your account, such as your name and email address. With Apple you can choose to share a private relay email address instead of your real one.

Profile information: your username, display name, profile photo, bio, location, favorite quote, website link, favorite genres and authors, country, preferred language, reading goal, reading motivations, app theme, and whether your profile is public or private. Your country is requested during setup. Gender is optional (you can choose "prefer not to say"), and optional Instagram or TikTok handles can be saved to your profile; gender, country, and these handles are not shown on your public profile.

Reading and social activity you create: your library (books marked Want to Read, Reading, Finished, or Did Not Finish), reading progress, ratings, reviews, replies, quote posts, reading updates, likes, saves, favorite books, follows and follow requests, blocks, reading milestones, and your yearly reading goal.

Imported reading history: if you choose to import your library from Goodreads or The StoryGraph, we process the file you upload (typically a CSV or spreadsheet export containing book titles, authors, shelves, dates, ratings, and any reviews it includes). The rows we read from the file are stored with your import so it can be processed and retried, and any reviews it contains are published to your Reax profile like reviews you write in the app.

Books you add: if you add a book to the Reax catalog yourself, we store the details you enter (such as title, author, and description) and any cover image you upload. Reader-added books are reviewed by our team.

Content Guide submissions: optional, book-level content notes you choose to submit (for example, flagging that a book contains certain themes).

Terms of Use acceptance: when you agree to the Reax Terms of Use, we record which version you accepted, when, the platform (iOS, Android, or web), and the app version you were using.

Reports: if you report content or an account, we store your report (the reason, any details you add, and a copy of the reported text at the time of the report) so our team can review it.

Support and other communications: if you contact us directly, we collect whatever information you include in that message.

If you upload a profile photo, or manually submit a book cover image while adding a book to the catalog, that image is stored so it can be displayed in the app. Uploaded images are processed and size-limited before storage.

Uploaded images are stored in publicly accessible storage so they can be displayed: anyone who has an image’s web address can view it, even outside the app. A cover you upload for a reader-added book is held back from the public catalog until our team approves the book.

Reax does not currently use any third-party analytics or crash-reporting service, and does not track you across other apps or websites.

Push notification token: if you enable notifications, we store a device push token (and the platform, e.g. iOS or Android) so we can deliver notifications to your device.

Camera and photo access: if you scan a book’s barcode, the camera is used locally on your device to read the barcode value (an ISBN) -- Reax does not save the camera image itself. If you pick a photo for a book cover or profile photo, only the image you actively choose to upload is used, as described above.

Standard technical logs: like effectively every website and cloud-hosted app, our infrastructure providers (see Section 6) may automatically log basic technical information needed to operate the Service, such as IP address, browser or device type, and request timestamps.

Abuse protection: to prevent overuse of book search, Reax keeps a request counter keyed to the IP address that made the request. It stores only the IP address, the start of the current time window, and a count. It is not linked to your account. The count is reset each time window, but the entry itself is not currently deleted automatically.

Information stored on your device: the app keeps some settings on your device, such as your sign-in session, preferred language, guest-mode choice, library view preference, and your recent searches. Recent searches stay on your device and are not sent to us.

To create and secure your account, and keep you signed in.

To provide Reax’s core features: your library, ratings, reviews, feed, search, follows, notifications, and book discovery.

To enforce your privacy and blocking choices (see Section 7).

To send you notifications about activity relevant to you (for example, a new follower, reply, or like), where enabled.

To import books into your library when you use the Goodreads/StoryGraph import feature.

To maintain and improve the Reax book catalog (for example, matching a book you search for against Google Books or Open Library data).

To investigate abuse, enforce our content and community rules, and keep the Service secure. This includes automatically checking text you post (reviews, replies, quote posts, reading updates, profile text, and books you add) against a list of prohibited language, reviewing reports, removing content that breaks our Terms of Use, and suspending or banning accounts.

To record that you accepted our Terms of Use and to show you the Terms again when they change.

Reax relies on a small number of third-party services to operate. We share the minimum information each service needs to perform its role, and we do not sell your personal information to anyone.

• Supabase -- our backend provider. Supabase hosts our database, handles authentication, stores uploaded media, and runs the server-side functions Reax depends on. Nearly all information described in this policy passes through or is stored by Supabase on our behalf.

• Google -- if you sign in with "Continue with Google," Google authenticates you and shares basic profile information with us. Separately, when you search for a book, your search terms may be sent to the Google Books API (through our own server) to look up book information -- this is unrelated to Google sign-in.

• Apple -- if you sign in with "Continue with Apple," Apple authenticates you and shares the basic profile information you choose to share (which may be a private relay email address, at your choice) with us.

• Open Library -- an open book-metadata database we query (through our own server) to help populate and enrich Reax’s book catalog.

• Vercel -- hosts the reaxbooks.com website.

• Expo / EAS -- the build and app-update infrastructure used to compile and distribute the Reax mobile app. Expo’s push notification service also relays notifications to your device: when we send you a notification, your device’s push token and the notification text (for example, "Someone liked your review") pass through Expo and then Apple Push Notification service or Google Firebase Cloud Messaging.

Each of these providers processes information under its own privacy policy and terms, which we encourage you to review if you’d like more detail on how that specific provider handles data.

You can set your Reax profile to public or private in Settings. If your profile is private, users who don’t follow you cannot see your bio, location, favorite quote, favorite genres/authors, library, reviews, or your followers/following lists -- they only see your username, display name, and avatar.

Your username and display name may still appear in search results even if your profile is private, so that other readers can find you and send a follow request. Setting your profile to private restricts who can see your content, but it does not remove your account from search.

If you block another user, that user can no longer view your profile or content, you no longer see theirs, follows and likes between you are removed, and existing notifications between you and that user are hidden from both of you.

If an account is banned for breaking our Terms of Use, its content and profile photo are hidden from other readers.

Anything you post to a public profile -- reviews, quote posts, ratings, replies, and library activity where visible -- can be seen by other Reax users (and, if you’re not logged in, by guests browsing Reax) according to these visibility rules.

We keep your account information for as long as your account exists, so that Reax can function (your library, reviews, and social connections). If you delete your account, we delete the data described in Section 9 below.

Shared catalog data -- for example, a book record in Reax’s catalog -- is not personal to any one user and is not deleted when an account is deleted, since other readers rely on it. If you contributed that catalog entry, your account’s association with it is removed rather than the catalog entry itself.

Moderation records: reports, the copy of reported text saved with each report, and the record of actions our team took are kept after the accounts involved are deleted, so that we can handle repeat abuse and respond to safety or legal requests. When the reporting or reported account is deleted, the report is no longer linked to that account. We do not currently delete these records automatically.

Banned accounts: if an account is banned, we keep a one-way cryptographic fingerprint (a SHA-256 hash) of its email address and of its Apple or Google sign-in identifier, even after the account is deleted, so the same person cannot simply create a new account. We do not keep the email address itself for this purpose. These fingerprints are removed if the ban is lifted.

Imports: the book rows read from an import file are kept with your account until you delete your account.

Our infrastructure providers may retain minimal operational logs for a limited period for security and reliability purposes, consistent with their own standard practices.

You can permanently delete your Reax account at any time from Settings → Delete Account. Deleting your account removes your profile, library, ratings, reviews, replies, quote posts, reading updates, likes, saves, favorites, follows and follow requests, blocks, notifications, reading milestones, Content Guide submissions, imports, Terms of Use acceptance records, push notification tokens, and your uploaded profile photo, and deletes your underlying account credentials.

If you signed in with Apple, deleting your account also asks Apple to revoke Reax’s access to your Apple ID. If that step cannot be completed, the app tells you how to remove Reax in your Apple ID settings.

Some records are kept after deletion, as described in Section 8: moderation records and, for banned accounts only, the sign-in fingerprints used to prevent re-registration.

If you can no longer use the app, you can request deletion by emailing support@reaxbooks.com from the address linked to your account. Step-by-step instructions are at reaxbooks.com/delete-account.

One exception: if you manually submitted a book cover image to Reax’s shared catalog, that image may remain in place after your account is deleted, because it can still be the live cover image other readers see for that catalog entry -- it is catalog content, not personal content, at that point.

Account deletion is processed as soon as you confirm it. In rare cases where a step of the deletion process needs to be retried (for example, a temporary network issue), Reax is designed so the process can safely resume without creating duplicate or inconsistent data, and without affecting any other account.

You can review and update your profile information, switch your profile between public and private, manage who you follow and who follows you, block or unblock other users, manage your notification settings, and delete your account, all from within the app.

You can request to have your account deleted at any time, as described above. To ask about, or make a request concerning, the information we hold about you, contact us using the information in Section 15.

We use measures such as encrypted connections (HTTPS) and access controls to help protect your information. That said, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

You must be at least 13 years old to use Reax (see our Terms of Use). Reax is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us using the information in Section 15 and we will take appropriate steps to remove it.

Reax is available to readers in many countries. If you use Reax from outside the location where our service providers operate, your information will be transferred to, stored, and processed in that location, which may have different data protection laws than your own country.

We may update this Privacy Policy from time to time as Reax changes. If we make a material change, we’ll update the effective date below. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or how your information is handled, contact us at privacy@reaxbooks.com.