Privacy policy
Last updated: 6 November 2026
This policy explains what the ReadIn app and website (“ReadIn”, “we”) collect, why, who we share it with, how long we keep it and how you can delete it. We wrote it in plain words. If anything is unclear, e-mail micboltech@gmail.com.
1. Who we are
ReadIn is a reading app for Android, run from Nigeria. Contact for all privacy questions: micboltech@gmail.com.
2. What we collect and why
| Data | Why |
|---|---|
| E-mail address, display name, password (stored only as a secure hash) | To create your account, sign you in, confirm your e-mail and reset your password. |
| Your library list: title, author, file type and size, a fingerprint of the file | To show your library on your account and avoid duplicates. The book files you import stay on your phone — the current app does not upload them. Files uploaded with earlier versions are kept in our cloud storage until you delete them or your account. |
| Notes, highlights, bookmarks, reading progress, shelves and reading habits | To keep them safe and in sync with your account. |
| Plan and payment records: plan, amount, date, payment reference | To give you Premium and keep accounting records. We never see or store your card details — payments are handled by Paystack (website/APK version) or Google Play (Play Store version). |
| Technical data: IP address, time of requests, app version, error messages in our server logs | To keep the service running, stop abuse (rate limits) and fix problems. |
We do not collect your contacts, location, photos, microphone or camera, and we do not show ads or sell your data. Today ReadIn uses no advertising or analytics trackers. If we add crash reports or usage statistics, the app will ask for your permission first and this policy will be updated.
3. Data that stays on your phone
Books you import, downloaded classics, reading settings and a copy of your notes are stored inside the app on your phone. Read-aloud uses your phone’s text-to-speech engine. ReadIn does not back up its data to your Google account. Uninstalling ReadIn removes this data from the phone.
4. Who we share data with
Only with the service providers we need to run ReadIn. They process the data for us and may store it outside Nigeria (mainly in the USA and Europe):
- Render — runs our server.
- MongoDB Atlas — our database.
- Upstash — short-lived counters for rate limiting (contain IP addresses for up to 15 minutes).
- Cloudinary — stores book files uploaded with earlier app versions.
- Resend — sends our e-mails (account confirmation, password reset, receipts).
- Paystack — card and bank payments in the website/APK version.
- Google Play — app distribution and, in the Play Store version, payments.
- Cloudflare — hosts this website.
- Project Gutenberg / Gutendex — when you browse or download free classics, your phone contacts them directly (they see your IP address, not your account).
We may also share data if the law requires it. We never sell personal data.
5. How long we keep data
- Account data and everything in your library: until you delete it or delete your account.
- Payment records: as long as accounting and tax law requires (usually up to 6 years). When you delete your account they are kept without your e-mail address.
- Server logs: a few weeks. Rate-limit counters: up to 15 minutes.
6. Deleting your account
In the app: Profile → Delete account. Without the app: readin.micbol.org/delete-account. We delete your account, your library list and files in our cloud, notes, highlights, bookmarks, progress, shelves, habits and trials. Deleting in the app also removes ReadIn’s data from that phone.
7. Security
All connections use HTTPS. Passwords are stored only as a strong hash. Sign-in tokens on your phone are kept in encrypted storage. Only the ReadIn team can access the admin tools, and every admin action is logged.
8. Your rights
Under the Nigeria Data Protection Act 2023 (and similar laws where you live) you can ask to see, correct, export or delete your data, and object to how we use it. E-mail micboltech@gmail.com — we answer within 30 days. You can also complain to the Nigeria Data Protection Commission (NDPC).
9. Children
ReadIn is not directed at children under 13, and we do not knowingly collect their data. If you think a child gave us data, write to us and we will delete it.
10. Changes
If we change this policy we will update the date above, and tell you in the app for important changes.