Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Petr Jahoda
JustRead
Email: support@justread.app

If you have any questions about how your data is processed, or if you wish to exercise your rights, please contact us using the details above.

2. The JustRead App

JustRead has no account, no ads, no analytics and no tracking. It contains no analytics SDK, and it doesn’t send us usage data or crash reports.

Your books, highlights, reading progress and settings stay on your devices and in your own iCloud. We can’t read them.

The In-App Roadmap

If you vote, suggest a feature or comment on the Roadmap, that vote, suggestion or comment is stored on VoteFirst (votefirst.app), our own service, together with a random anonymous ID that the app keeps on your device. Suggestions and comments are public, shown under a generated name. Just reading the Roadmap doesn’t create an ID. Loading the Roadmap and developer messages also contacts VoteFirst and tells it your app version and platform.

VoteFirst doesn’t store your IP address with this ID.

Services You Choose to Use

Some features send a request directly to another service when you use them: Wikipedia and Wiktionary for lookups, Apple Books, Google Books and Open Library for book details, where only the title and authors or the ISBN leave your device, Apple for new releases from authors you follow and for update checks, and Hugging Face for voice downloads. Accounts you connect yourself, such as Calibre, Audiobookshelf, Hardcover, Readwise or KOReader sync, receive what those features need. We don’t receive or keep any of this, and those services’ own privacy policies apply.

Apple

Apple gives developers download and sales statistics, and crash reports from people who chose to share them with developers.

Support

If you email us, we keep your message so we can answer it.

3. The Website

On the website we collect only the minimum data necessary to provide and improve it. Below is a complete overview of the categories of data we collect through the website:

Data We Do Not Collect

We do not collect names, phone numbers, physical addresses, payment information, precise location data, advertising identifiers (IDFA/GAID), or biometric data. We do not use session replay or screen recording. We do not create individual user profiles that could identify you personally.

4. How We Use Your Data

We use the data we collect for the following purposes:

• Service Improvement: Understanding how visitors use the website to identify bugs, improve features, and enhance the experience.
• Product Development: Using aggregated and anonymized website usage patterns to inform our development roadmap and prioritize features.
• Feature Flagging: Delivering and testing new website features for specific groups of visitors via PostHog feature flags.
• Newsletter & Communications: Sending you product updates and other communications related to the Service.
• The Roadmap: Storing the votes, suggestions and comments you post on the in-app Roadmap on VoteFirst, our own service.
• Support: Keeping the emails you send us so we can answer them, and diagnosing and resolving the issues you report.

We do not use your data for advertising, profiling, automated decision-making, or selling to third parties.

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, we process your personal data based on the following legal grounds under Article 6(1) of the GDPR:

6. Cookies and Tracking Technologies

Website

Our website uses PostHog analytics, which sets first-party cookies to understand how the site is used. These cookies are set only after you provide consent through our cookie banner. No cookies are placed for advertising, retargeting, or cross-site tracking purposes.

If you decline cookies via the cookie banner, no analytics cookies will be set. You may also manage cookies through your browser settings at any time. Disabling cookies may affect certain features of the website.

The App

The JustRead app contains no analytics SDK and does not track you. What does leave your device is described in The JustRead App.

7. Third-Party Service Providers

We use the following third-party services to operate the website. Each acts as a data processor on our behalf:

PostHog (Analytics & Feature Flags)

• What it does: Collects anonymized usage analytics and manages feature flags on our website.
• Data processed: Page views, feature interactions, performance metrics. IP addresses are anonymized and never stored in full.
• Hosting: PostHog Cloud, hosted in the European Union (EU).
• Privacy policy: posthog.com/privacy

Sender (Email Communications)

• What it does: Manages our newsletter and sends product update emails.
• Data processed: Your email address.
• Privacy policy: sender.net/privacy-policy

VoteFirst is our own service, not a third party, and Apple and the services you choose to use in the app are described in The JustRead App.

8. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We do not share your data with advertisers. We only share data with the third-party service providers listed above, and only to the extent necessary for them to provide services on our behalf.

We may disclose your data if required by law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of JustRead, our users, or the public.

9. International Data Transfers

Our analytics data is processed by PostHog within the European Union, so no transfer of analytics data outside the EEA occurs.

Your email address stored with Sender may be processed outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on an adequacy decision, to protect your data in accordance with GDPR requirements.

10. Data Retention

11. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• SSL/TLS encryption for all communications between your device and our servers.
• IP anonymization to prevent storage of full IP addresses.
• Use of EU-hosted infrastructure for analytics data.
• Limiting access to personal data to only those who need it to operate the Service.

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

12. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights regarding your personal data under the GDPR:

• Right of Access (Art. 15) — You have the right to request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16) — You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17) — You have the right to request deletion of your personal data, subject to applicable legal exceptions.
• Right to Restriction of Processing (Art. 18) — You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability (Art. 20) — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21) — You have the right to object to processing based on legitimate interests at any time. We will cease processing unless we demonstrate compelling legitimate grounds.
• Right to Withdraw Consent (Art. 7(3)) — Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint — You have the right to lodge a complaint with your local data protection supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection (ÚOOÚ).

To exercise any of these rights, please contact us at support@justread.app. We will respond to your request within 30 days.

13. Your Rights Under CCPA/CPRA (California Residents)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), provides you with specific rights regarding your personal information.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

Your CCPA/CPRA Rights

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information as defined by the CCPA/CPRA. Therefore, there is no need to opt out.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by the CCPA/CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To submit a request, email us at support@justread.app. We will verify your identity before processing any request and respond within 45 days.

14. CalOPPA Compliance

In accordance with the California Online Privacy Protection Act (CalOPPA), we make the following disclosures:

• Users can visit our website anonymously if they decline analytics cookies.
• This Privacy Policy is linked from our home page and is accessible from every page of the website via the footer.
• Our Privacy Policy link includes the word “Privacy” and can be easily found on the pages of our website.
• Users will be notified of any privacy policy changes on this page, with the “Last updated” date revised accordingly.
• Users can change their personal information by emailing us at support@justread.app.

15. Children’s Privacy

Our Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information. If you believe that a child under 13 has provided us with personal information, please contact us at support@justread.app.

16. Do Not Track Signals

Some browsers transmit “Do Not Track” (DNT) signals. As required by CalOPPA, we disclose that our Service does not currently respond to DNT signals. However, you can opt out of website analytics by declining cookies, and the app contains no analytics.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our Service, or applicable laws. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

18. Contact Us