ReadQu
Privacy Policy
Effective date: 24 October 2026
1. Information We Collect
1.1 Information You Provide Directly
- Account registration: name, email address, and password.
- User ID: a unique identifier assigned to your account, used internally to link your data across the platform.
- Profile information: display name and learner type.
- Payment and purchase history: processed by Paystack (PCI-DSS compliant) — we do not store your card details, but we do keep a record of your subscription, credit top-up, and marketplace purchases.
- Community Rep information: bank details, collected solely for processing payouts.
- Documents and content you upload to the platform.
- Communications, including Quest Group chats and in-app messages, and support messages.
1.2 Information Collected Automatically
- App activity: pages and screens visited, features used, quiz scores, and time spent on the platform.
- Device information: device type, operating system, browser, IP address, and device/push-notification IDs (via Expo/EAS).
- Learning data: XP, streaks, badges, mastery scores, and leaderboard rankings.
- Referral data: the Community Rep referral code used at signup, if any.
1.3 Information from Third Parties
- Google OAuth: your name and email address, if you sign in with Google.
- Expo: push notification tokens, used to deliver notifications you enable.
2. How We Use Your Information
- Account management.
- AI-powered study features.
- Payment processing.
- Gamification — XP, badges, and the leaderboard.
- Social features — Quest Groups, Follow, and VLAS.
- Marketplace transactions and Community Rep commissions.
- Notifications, only if you enable them.
- Improving the platform, using anonymised data.
- Legal compliance.
- Fraud detection.
3. Data Sharing and Disclosure
We do not sell your data.
3.1 Service Providers
- Supabase — database hosting, authentication, and storage.
- Railway — backend API hosting.
- Vercel — frontend hosting.
- OpenAI — powers our AI features; document content is sent for processing, and OpenAI may use this data unless data sharing has been opted out.
- Paystack — payment processing and bank transfers.
- Resend — delivers transactional emails (signup confirmation, payment receipts, weekly progress summaries, and similar account notifications).
- Expo/EAS — mobile app builds and push notifications.
3.2 Public Information
The following is visible to other users on the leaderboard and your profile:
- Display name, level, XP, streak, and badges.
- Public question sets you share.
- Marketplace listings.
- Follower and following counts.
- Quest Group activity events.
3.3 VLAS Accountability Partners
- Your study activity, streak, quiz completion rate, and mastery scores are visible to your VLAS partner.
- You control this partnership and can revoke it at any time.
3.4 Legal Requirements
We may disclose information if required to do so by law.
4. Data Retention
- We keep your data while your account is active.
- Data is deleted within 30 days of account deletion, except financial records.
- Public content you have shared may remain visible unless removed before deletion.
If an account is suspended for breaking our content rules and the account holder then deletes it, we
keep a one-way scrambled (hashed) version of the email address for up to 12 months. We use it only to
stop the same person from immediately creating a new account to avoid the suspension. The original
email cannot be read from it, and it is deleted after 12 months.
5. Data Security
- HTTPS/TLS encryption.
- Supabase Auth, an industry-standard authentication system.
- Row Level Security (RLS) policies on our database.
- Paystack handles all payment data directly.
- Administrative access to user data is restricted.
- No method of transmission or storage can be 100% guaranteed secure.
6. Children's Privacy
- You must be at least 13 years old to use ReadQu.
- We do not knowingly collect personal information from children under 13.
- If we learn that an account belongs to someone under 13, we delete the account and its data. A parent or guardian who believes this is the case can contact us at hello@readqu.com to request this.
7. Your Rights
- Access: view your information from your Profile page.
- Correction: update your display name at any time.
- Deletion: delete your account via Danger Zone at readqu.com/profile — permanent and irreversible.
- Withdraw consent: disable notifications, revoke a VLAS partnership, or remove a public question set.
- Data portability: download your study packs and documents.
- Contact us at hello@readqu.com with any other requests.
8. Cookies and Tracking
- We use session cookies and local storage to keep you logged in and remember your preferences.
- We do not use third-party advertising cookies.
- Clearing your cookies will log you out.
9. Third-Party Links
ReadQu is not responsible for the privacy practices of third-party sites we may link to.
10. Changes to This Privacy Policy
We will notify you of material changes via a notice on the platform or by email. Continued use of ReadQu
after a change constitutes acceptance of the updated policy.