Privacy Policy

This Privacy Policy explains how readQ collects, uses, shares, and protects your personal data. If you are a minor, you must have the consent of a legal guardian before using the Service. This policy applies to our website, app, APIs, and related services.

1. Information We Collect

1.1 Information You Provide

• Basic Information: Name or nickname, email, password (hashed), role (student/teacher/parent/admin), class and school information (if imported by a teacher)
• Learning Data: Reading history, quiz results, scores/levels, teacher feedback, and assignments
• Communication: Information you provide via forms, surveys, or customer support

1.2 Automatically Collected Data

• Device and Logs: IP address, browser/device info, language, timestamps, activity logs, and error reports
• Cookies / Local Storage: Used for login sessions, preferences, analytics, and abuse prevention. You can manage cookies in your browser, but disabling them may affect functionality

1.3 Third-Party or Institutional Data

• When schools or teachers create student accounts or sync results, we process data according to their authorization
• Single sign-on (SSO) or identity integration (if added later) will be announced separately

2. How We Use Your Data

• Core Functionality: Account management, course and quiz distribution, reading assessments, learning records, and reports
• Improvement: Personalized recommendations, analytics, and interface optimization
• Security and Compliance: Authentication, abuse detection, legal compliance
• Communication: Service notices, updates, and educational information (when consented)

3. Legal Bases (if GDPR applies)

• Consent
• Performance of a contract with you or your institution
• Legitimate interests, such as service security and reliability, without overriding your rights
• Legal obligations, such as compliance with government or court orders

4. Data of Minors

• Minors must have guardian consent to use the Service. Teachers or schools creating student accounts must confirm proper authorization
• Parents/guardians may exercise rights on behalf of their child (access, correction, deletion, restriction)

5. Data Sharing and Processors

We do not sell personal data. We share data only as follows:

Service Providers / Processors

• Cloudflare (frontend hosting, CDN, and security)
• AWS Lightsail / Amazon RDS (backend and database hosting)
• Other essential vendors (e.g., email delivery, error tracking, backups) strictly within service needs

Other Sharing Situations

• Legal Requirements or Safety: In response to lawful requests or to protect users, the public, or the Service
• Educational Context: Teachers or schools may access learning data for educational purposes

6. Data Retention and Deletion

• Account Data: Retained while the account is active; deleted or anonymized within a reasonable period after closure
• Learning Records: Retained according to school/teacher requirements or applicable law, then deleted or anonymized
• Logs and Backups: Cycled or deleted periodically for safety and reliability

7. Data Security

We implement encryption (HTTPS/TLS), access control, hashed passwords, backup, and monitoring to reduce risk. However, no online system is perfectly secure. In case of a data breach, we will notify affected users and take proper actions in accordance with applicable laws.

8. Your Rights

You may:

• Access your personal data held by us
• Correct inaccurate or incomplete information
• Request deletion where legally permissible
• Restrict or object to processing in certain circumstances
• Request data portability in a structured format

Requests can be made via our contact address. If your account is managed by a school, some rights may be exercised through the school administrator.

9. Cookies and Tracking

• Essential Cookies: For authentication and security
• Analytics Cookies: For performance and usability improvement

If third-party analytics or advertising tools are introduced in the future, this policy will be updated with opt-out options.

10. Policy Updates

We may update this Policy periodically. Significant changes will be announced via website notices or email. Continued use constitutes acceptance of the changes.

11. Contact