Summer Reading — Privacy Policy
Last updated: 26 May 2026
Summer Reading (“the app”) is a summer reading club app. This policy explains what data the app
collects, why, and how it is handled. The app is operated by Curious Minds
(“we,” “us”).
What we collect
We only collect what the app needs to function. All of it is linked to your
account. We do not use any of it for advertising or tracking,
and we do not sell it.
- Account info — when you sign in, we receive your name, email
address, and an account identifier from the provider you choose. With
Sign in with Apple the email may be an Apple private-relay
address; with Sign in with Google we receive the name, email
address, and Google account identifier on your Google account. We use these to
create and identify your account.
- Health & fitness data — if you choose to connect Apple
Health, we read your daily step counts only, and only the days you
sync. We use them to show your progress and rank the challenge leaderboard.
- Content you create — the books you log, podcasts you track,
ratings, comments, and reactions. These are shown to the other members of your
challenge group.
How your Apple Health data is used
Your step data is used solely to power the in-app challenge features you see.
Specifically, we confirm that health and fitness data:
- is never used for advertising or marketing;
- is never shared with, or sold to, third parties or data brokers;
- is never used to determine eligibility for insurance, credit, employment, or any similar purpose;
- is read only with your explicit permission, which you can revoke at any time in
iOS Settings › Privacy & Security › Health.
Who can see your data
Your activity (books, steps, podcasts, comments, reactions) is visible only to
the members of your own private challenge group. It is not public and is not
indexed by search engines.
How it’s stored
Data is stored on our backend hosted by Fly.io, with a PostgreSQL database
located in the United States. Connections use TLS encryption. Sign-in sessions are
stored as hashed tokens, never in plain text.
Third-party services
We use the following third-party services:
- Apple — Sign in with Apple and HealthKit.
- Google — Sign in with Google. If you choose to sign in with
Google, Google authenticates you and returns your name, email address, and Google
account identifier to the app. Google's handling of your data is governed by
Google's own privacy policy.
- Fly.io — backend hosting and database.
- Open Library and Google Books — to find cover artwork for the
books you log. When you add or edit a book, we send the title and author you
entered to these catalog services and display the cover image they return. We do
not send your name, account identifier, or any other personal information, and
these lookups are not used for advertising or tracking.
We do not use any advertising networks, analytics SDKs, or cross-app tracking. The
app’s privacy manifest declares no tracking.
Data retention & deletion
We keep your data for as long as your account is active. You can request deletion
of your account and all associated data at any time by emailing us at the address
below; a group admin can also remove your account and content from within the app.
Deleting your account removes your profile, logs, comments, reactions, and synced
step data.
Children
The app is intended for a private group that may include minors participating
with family involvement. We do not knowingly collect data from children outside of
that invited group, and we collect no more data from younger members than from any
other member.
Changes
If this policy changes, we’ll update the date at the top of this page.
Contact
Questions or deletion requests: hibiscuscourt143@gmail.com.
See also our Support page.