Privacy Policy

Readforth collects the minimum we need to run the service: your email, your reading sessions, your notebook entries, and (if you subscribe) your billing information. We do not sell your data. We do not train AI models on your dialogue. We use third-party services only when we have to, and we name them below.

Readforth is operated by Readforth, based in California, United States. Contact us at legal@readforth.com for privacy questions, data requests, or to delete your account.

• Account info — your email address and any display name you set. Required to sign in and save your notebook. Handled by our authentication provider (Clerk).
• Session transcripts — what Socrates asks you and what you reply, per book and per stage. Stored so you can resume, and so we can build your notebook from your answers.
• Notebook entries — the three-paragraph Grammar / Logic / Rhetoric summaries you write per unit, plus the book-level synthesis stitched from them. Tied to your account; visible only to you. Readforthdoesn't generate this content for you — you write it in your own words and Socrates can review it. The review feedback is stored alongside your text.
• Commonplace highlights — quotes you save from a passage, plus your optional note and tags. By default these are private; if you choose to share a highlight, the resulting /h/<id> URL is unguessable but world-readable, and the quote and note are visible to anyone who has the link. You can delete a highlight at any time, which invalidates the share URL.
• Voice mode usage — for free-tier readers, we count which units you've played in voice mode so we know when you've consumed your ten-unit voice taster. Stored as a small ledger of (book slug, unit id) pairs.
• Microphone audio (voice mode only) — when you tap the mic, your phone's on-device speech recognizer (Apple SFSpeechRecognizer) transcribes what you say. The transcript is sent to Readforth as a regular text reply; the raw audio never leaves your device, and we never receive or store it.
• Usage metadata — which books you've opened, which units you've completed, how many dialogue turns you've used today. Used for product improvement and to enforce the daily-turn limits described in pricing.
• Billing information — handled by Stripe. We receive your subscription status and the last four digits of your card; we never see or store your full card number.
• Technical logs — IP addresses, user-agent strings, and request timings, retained for 30 days to debug errors and detect abuse.

• We do not sell your data to advertisers or data brokers.
• We do not train AI models — ours or anyone else's — on your dialogue transcripts or notebook entries.
• We do not share your notebook with other users, even in anonymized form.
• We do not use cookies for cross-site tracking. Only the strictly-necessary cookies for sign-in and session state.

To run Readforth, we share data with these providers only as needed for them to perform their specific function:

• Anthropic — receives your reader messages and the book context to generate Socratic replies. Under our enterprise agreement, Anthropic does not retain this data for model training.
• OpenAI — receives short Socratic reply text to synthesize voice-mode audio (Voice tier only). No persistent storage.
• Clerk — authentication provider. Stores your email and sign-in credentials.
• Stripe — payment processor. Handles card data directly; we never see it.
• Neon — managed PostgreSQL database where your sessions, notebooks, and account records live.
• Vercel — hosts the application and processes web requests.
• Resend — sends transactional email (welcome, receipts, password resets).

Regardless of where you live, you can at any time:

• Export your data — notebook entries and session transcripts, from your account settings. Email us if anything's missing.
• Delete your account — permanently removes your sessions, notebook, and account record within 30 days. Billing records may be retained longer where tax law requires.
• Correct or access data we hold about you — email legal@readforth.com.

If you're in the EU/UK (GDPR) or California (CCPA), you have additional rights including the right to object to processing and the right to complain to a supervisory authority. Reach out and we'll handle it.

Readforth is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has created an account, email us and we'll delete it.

We'll update the “Last updated” date at the top whenever we change anything. Material changes will be announced by email to active accounts at least 14 days before they take effect.