Privacy Policy

Last updated: April 7, 2026

Redda (“the App,” “we,” “us,” or “our”) is a children's story app built for multilingual families. This Privacy Policy explains what information we collect, how we use it, and how we protect it.

The short version: Redda collects only what is needed to operate the app, compensate authors, and sync your child's reading progress. We do not show ads, do not sell data, and do not track your children across apps or websites.

This policy applies to the Redda reader app (iOS and Android). For the publisher platform's privacy policy, visit studio.reddastories.com/privacy.

1. Information We Collect

1.1 Account Information (from parents)

Redda requires a parent or guardian account to use the app. When you create an account through our authentication provider (Clerk), we collect:

• Email address
• Authentication method (email, Google, or Apple sign-in)
• Primary language preference
• Child's age range (a parent-selected bracket: 0-3, 3-5, 5-8, or 8-12)
• Subscription or purchase status

1.2 Reading Activity

When your child uses the app, we collect reading activity data. This data is functional, not analytical. We collect it for specific purposes, not to build profiles or target content:

• Which books are opened
• Pages read and highest page reached per book
• Reading session duration
• Language selected per book
• Audio playback events (play and pause, not recordings)
• Book completion status
• Country (determined by our server from the network request, not from your device's location services)

1.3 Device Information

We collect minimal technical data to ensure compatibility and fix issues:

• Device type and operating system version
• App version
• Crash logs and basic performance data

1.4 Payment Information

If you subscribe or make a purchase, it is processed entirely by Apple (App Store) or Google (Play Store). We receive a subscription receipt to verify your plan status. We never see or store your payment details.

1.5 Camera (Barcode Scanner)

Redda requests camera access only when you use the barcode scanner to look up a book by its ISBN. The camera feed is processed on your device in real time. No images or video are stored, transmitted, or retained by Redda.

2. What We Do Not Collect

• Child's name, photo, or likeness
• Precise or approximate location (no GPS, no device location services)
• Device advertising identifiers
• Contacts or microphone access
• Cross-app or cross-site tracking data
• Browsing history outside the app

3. How We Use Your Information

Every piece of data we collect has a specific purpose:

• Author compensation: We track which books are read and how far to fairly compensate our authors and illustrators based on actual readership.
• Reading recommendations: We use reading history to suggest books your child will enjoy.
• Progress sync: We save reading progress so your child can pick up where they left off, even on a different device.
• Service operation: Device and app version data helps us ensure compatibility and fix issues.

4. How Stories Are Created

Redda's stories are translated and narrated before they reach your device. During the publishing process, we use AI services (DeepL for translation, Anthropic's Claude for quality refinement, and ElevenLabs for narration) to produce content in multiple languages. This happens in our publisher platform, not while your family uses the app.

No user data from the reader app is ever sent to these AI services. Your child's reading activity, account information, and device data stay entirely within Redda's own infrastructure.

5. Children's Privacy

Redda is designed for families with children and requires a parent or guardian account. The account belongs to the parent, not the child.

5.1 COPPA Compliance (United States)

We comply with the Children's Online Privacy Protection Act (COPPA). Parental consent is obtained through email verification at account creation. No data is collected before consent is given. We collect only the minimum data necessary for the purposes described in Section 3.

5.2 GDPR Article 8 (European Union)

For users in the EU/EEA, we comply with GDPR requirements for processing children's data. Our legal basis for processing is parental consent, obtained through the same account verification flow. Parents may exercise their rights under GDPR as described in Section 8.

5.3 Protections

• No advertising of any kind
• No behavioral profiling or tracking
• No social features or user-generated content
• Parental gate (PIN or biometric) protects settings, purchases, and external links
• No third-party analytics SDKs in the app

6. Third-Party Services

DeepL, Anthropic, and ElevenLabs are used in our publisher platform only. They are never called from the reader app, and no user data from the reader app touches these services.

7. Data Retention

• Reading sessions: Retained for author payment calculations. Anonymized after 2 years.
• Reading progress: Retained while your account is active. Deleted when you delete your account.
• App event logs: Retained for 90 days for operational purposes, then deleted.
• Account data: Deleted on request per COPPA/GDPR.

8. Your Rights

As a parent or guardian, you have the right to:

• Access the data we hold about your child's reading activity
• Correct inaccurate account information
• Delete your account and all associated reading data
• Export your child's reading history
• Stop collection by deleting your account (the app requires an account to function)

To exercise these rights, contact us at support@reddastories.com. We will respond within 30 days.

If you are located in the EU/EEA, you also have the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local data protection authority.

9. Session and Identifier Design

We are intentional about how we identify usage:

• Session ID: A random identifier generated each time the app is opened. Not persistent across sessions. Not tied to device hardware.
• User ID: Your Clerk account ID, tied to the parent's email. The only identifier that persists.
• No device fingerprinting: We do not combine device attributes to create a persistent identifier.

10. International Data Transfers

Redda uses service providers based in the United States and other countries. If you are located outside the United States, your data may be transferred to and processed in the United States. We ensure that these transfers are protected by appropriate safeguards, including service providers' data processing agreements and, where applicable, Standard Contractual Clauses approved by the European Commission.

11. Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls. All reading data is stored in encrypted databases. However, no system is completely secure, and we cannot guarantee absolute security.

12. App Store Privacy Disclosures

Apple App Privacy (Nutrition Label)

• Data Used to Track You: None
• Data Linked to You: Usage data (reading activity), identifiers (account ID)
• Data Not Linked to You: Diagnostics (device type, app version)

Google Play Data Safety

• Data collected: App activity (reading sessions), app info and performance (device type, version)
• Data shared: None (no third-party sharing)
• Data handling: Encrypted in transit, deletion available on request

13. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you through the app or by email. The “Last updated” date at the top always reflects the most recent version.

14. Contact Us

If you have questions about this policy:

• Email: support@reddastories.com