Privacy Policy

Who operates SubRead

The data controller is the operator of the SubRead service available at https://www.subread.online. We do not list a company registration or postal address on this site.

For privacy rights we provide in-product controls (including account deletion) and you may also revoke access via your OAuth provider (for example Google) account settings.

Data we collect

Account data: identifiers from authentication (such as user id and email if provided by your sign-in provider), and session cookies needed to keep you signed in.

Profile & learning data: languages, proficiency, goals, onboarding status, favorites, and similar settings you save in SubRead.

Usage data when you accept analytics: approximate device/browser and page-view metrics via Vercel Analytics and Speed Insights.

Content you submit to AI features: selected text, prompts, and related learning context sent to generate explanations or chat replies.

How we use data

To provide and secure the service, remember your session, personalize learning, save favorites, operate AI helpers, process optional donations through payment partners, and—only with consent—measure aggregate traffic.

We do not sell personal information as defined under the California Consumer Privacy Act (CCPA/CPRA).

AI processing

AI features use Google Gemini (or successor models we configure). Prompts and necessary context are processed to return explanations or chat answers. Do not submit sensitive personal data you do not want processed by AI providers.

AI output can be wrong; it is not legal, medical, or professional advice.

Service providers

We use processors such as Supabase (auth and database), Vercel (hosting and optional analytics), Google (Gemini AI), and payment/donation partners when you choose to support SubRead. Reddit content is loaded from Reddit; Reddit’s own policies apply to that third-party content.

Cookies and analytics

Necessary cookies/storage support login sessions and interface language. Optional analytics cookies/scripts run only after you accept in our consent banner. Details are in the Cookie Policy.

Retention

We keep account and profile data while your account exists. If you delete your account, we delete associated auth and cascaded app data subject to short-term security backups and legal obligations.

Analytics data retained by providers follows their retention schedules.

Your rights (GDPR / CCPA)

Depending on where you live, you may have rights to access, correct, delete, restrict, or port personal data, and to object to certain processing. California residents may also request information about categories of data collected and opt out of “sale” or “sharing” (we do not sell personal information).

To erase SubRead-held account data, use Delete account in Settings while signed in, then revoke SubRead access in your OAuth provider if needed. We do not publish a privacy contact email.

Children

SubRead is not directed to children under 13 (or the higher age required in your country). Do not create an account if you are under that age.

Changes

We may update this Policy by posting a new version on this page and changing the “Last updated” date. Continued use after changes means you accept the updated Policy where permitted by law.