Privacy Policy

Roaring Reads (“we”, “us”) is a reading companion for primary-age children, used by parents and carers. This policy explains what personal data we collect, why we use it, and your choices.

Contact: hello@roaringreads.net

Accounts are for adults (18+) acting as parents or carers. Children use the app under that adult’s account and supervision. We do not intentionally offer accounts directly to children under 13.

You confirm at signup that you are an adult and responsible for any child profiles you create. See also our Safeguarding page.

Depending on how you use Roaring Reads, we may process:

• Account data: email address, display name, password (stored hashed by our auth provider), plan tier, billing identifiers (for example Stripe customer / subscription ids), and parent PIN if you set one.
• Child profile data: first name or nickname, year group, reading preferences, and progress you choose to store.
• Book Talk content: questions, typed or spoken answers, transcripts, coaching tips, and generated parent reports.
• Library data: books you add, scans, vocabulary lists, goals, and badges.
• Marketing / waitlist: email if you join early access via our MailerLite form.
• Technical data: basic device/browser information, logs, and security signals needed to run and protect the service.

If Voice Mode is enabled, audio may be sent to our speech providers to create a transcript for that Book Talk. We do not keep raw audio longer than needed to produce the transcript and operate the feature.

We use personal data to:

• provide Book Talks, coaching, reports, library, and related features;
• personalise questions and parent guidance to the child’s year group and answers;
• process Plus subscriptions and manage billing;
• keep accounts secure and prevent abuse;
• improve product quality (including reviewing anonymised or aggregated patterns);
• communicate service updates, early-access news, or support replies you request.

AI features may send relevant Book Talk text to our AI providers so we can generate questions, feedback, and reports. Those providers process data under our instructions as processors.

Where UK GDPR applies, we typically rely on:

• Contract — to provide the service and paid plan you signed up for;
• Legitimate interests — security, product improvement, and preventing misuse, balanced against your rights;
• Consent — where we ask for it (for example optional marketing / early-access emails).
• Legal obligation — where we must keep records for tax, accounting, or regulatory reasons.

Parents/carers are responsible for deciding what child information to enter and for supervising use.

We use trusted processors to host and operate Roaring Reads. Depending on features you use, this may include:

• Supabase — authentication, database, and file storage;
• Vercel — website and app hosting;
• OpenAI — AI generation for Book Talks, coaching, and related features (and speech where Voice Mode is used);
• Stripe — payment processing for Plus subscriptions;
• MailerLite — early-access / launch list emails if you join;
• ISBNdb / catalogue providers — book metadata where configured;
• Resend — transactional email where configured.

We do not sell children’s personal data. We may disclose information if required by law, to protect safety/rights, or as part of a business transfer with appropriate protections.

Some providers may process data outside the UK (for example in the EEA or United States). Where that happens, we use appropriate safeguards (such as standard contractual clauses or equivalent measures offered by those providers).

As a guide:

• Account & library / Book Talk data: while your account is active. After you delete your account, we aim to erase personal data within 30 days, unless we must keep limited records longer (for example security logs, dispute handling, or legal/accounting requirements).
• Billing records: Stripe and we may retain payment records for up to 6–7 years where required for tax and accounting.
• Support emails: typically up to 24 months after the last message, unless needed longer for an ongoing issue.
• Voice audio: not retained beyond transcription / feature operation.

You can delete your account in Parent Settings → Account & support, or ask us at hello@roaringreads.net.

We use essential cookies and similar storage to keep you signed in, remember accessibility preferences, and run the service securely. We do not currently use third-party advertising cookies on the main product.

If we introduce optional analytics or marketing cookies later, we will update this policy and, where required, ask for consent.

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. Contact hello@roaringreads.net. You may also complain to the UK Information Commissioner’s Office (ICO).

We use industry-standard measures such as encrypted transport (HTTPS), access controls, and hashed credentials via our auth provider. No online service is perfectly secure; please use a strong password and keep your parent PIN private.

We may update this policy. We will change the “Last updated” date and, for material changes, provide clearer notice in the app or by email where appropriate.