Legal

Privacy policy

Controller

The data controller is Readendar, responsible for this website, the waitlist and the mobile app. You can reach us at hello@readendar.com.

Waitlist data

On the waitlist we collect your email address, the form language, the page you signed up from and the sign-up date. The hidden anti-spam field is used only to discard automated submissions.

App data

When you use the app we process:

Purpose and legal basis

We use the waitlist email with your consent to notify you about early access. In the app, we process your data to provide the service you request (performance of the usage contract): to authenticate you, store your library and events, and manage clubs. Reminder notifications are scheduled locally on your device.

Recipients and processors

We rely on providers acting as processors solely to operate the service: hosting and infrastructure (Hetzner), network and DNS (Cloudflare), transactional email (Brevo), image storage (Hetzner object storage) and Google identity when you choose that method. To enrich book search we query catalogue services (Open Library and Google Books) with your search term. We do not sell your data or use it for advertising or cross-app tracking.

International transfers

Some technology providers may process data outside the European Economic Area. When that happens, it is done with the applicable safeguards, such as adequacy decisions or standard contractual clauses.

Retention

Waitlist data is kept for as long as necessary or until you withdraw consent. Account data and your content are kept while your account is active. If you delete your account from the app, your personal data and content are removed immediately (backups rotate within a reasonable period).

Your rights

You can exercise access, rectification, erasure, objection, restriction, portability or withdrawal of consent. From within the app you can download a copy of your data ("Download my data") and delete your account at any time. You can also write to hello@readendar.com. You may lodge a complaint with the competent supervisory authority; in Spain, the Spanish Data Protection Agency.