Privacy Policy

This page explains what iconRead collects, why, and who else touches it. Short version: we collect what the product needs to teach you words, we never sell it, and you can delete all of it yourself.

1. What we collect

  • Account data — email address, optional first/last name, hashed password (we cannot read it), and whether your email is confirmed. Signing in with Google or Apple shares your email and name from that provider.
  • Your content — YouTube links you post, texts you paste, photos of text you upload, and voice recordings you make. Text/photo/voice posts are private to your account.
  • Learning data — which words you look up and how often ("viewed" counts), words you mark orange, your vocabulary and carousel settings, and your viewing history (so you can pick up where you left off).
  • Billing status — whether a Premium subscription is active and its period end. Payments are processed by Stripe or PayPal on their own pages; we never see or store your card or bank numbers. Partners' PayPal email addresses are stored for payouts.
  • Referral attribution — landing on a partner link sets a 90-day cookie so a later signup credits that partner.
  • Technical logs — standard server logs (IP, request, time) for security and debugging, retained briefly.

2. How we use it

To run the product: build your readers, aim the word-boxes at your level, remember your progress, enforce fair-use limits, process payments, pay partners, and answer support email. We do not sell personal data and we run no advertising trackers.

3. Processors we share with

Parts of your content are sent to specialist services strictly to provide the feature, under their own privacy terms:

  • Google Gemini — photos of text (OCR) and post text (word-sense analysis).
  • Deepgram — voice recordings (transcription).
  • Inworld — post text (narration audio).
  • Stripe / PayPal — subscription payments and partner payouts.
  • YouTube — video posts embed the YouTube player, which sets its own cookies under Google's policies.
  • Google / Apple sign-in — if you choose them for login.
  • Our hosting provider stores the database and serves the app.

4. Cookies

We use a session cookie (keeping you signed in), a CSRF cookie (security), and the referral-attribution cookie described above. No third-party advertising cookies.

5. Retention and deletion

Your data stays while your account exists. Profile → Delete Account deactivates the account, deletes API tokens, hides your posts, and removes your viewing history; voice recordings and private posts become inaccessible with the account. For a full erasure request or a copy of your data, email us (section 7) — we answer within 30 days.

6. Security and children

Traffic is encrypted (HTTPS), passwords are stored hashed, and access to production data is limited to the operator. iconRead is not directed at children under 13 and we do not knowingly collect their data.

7. Contact and changes

Privacy questions and rights requests (access, correction, deletion, portability): gladjoy@gmail.com. If we change this policy materially we will note it here with a new date.

Last updated: July 21, 2026 · Terms of Service