Privacy Notice

1. Who is responsible

Stavroula Angeliki Alexoglou provides MothReads and is the data controller for the personal data described here — meaning we decide why and how it is processed. Contact: stavoulino@gmail.com.

2. Data we collect and why

• Account data (email address, display name, login credentials or Google sign-in identity) — to create and secure your account (contract).
• Reading data (books, pages, notes, ratings, goals, reading sessions, club memberships and emojis) — to provide the journal and book clubs (contract).
• Preferences (language, timer theme, notification setting) — to remember your choices (contract).
• Technical data (IP address, device and browser type, logs) — for security, fraud prevention and fixing problems (legitimate interests).
• Support messages — to answer you (legitimate interests).
• Subscription status received from Paddle — to unlock Premium (contract).

Book descriptions may be sent to an AI translation service to show them in your language; no account details are included.

3. Who we share it with

• Service providers that host and run the app (cloud hosting, database, authentication, AI translation).
• Paddle.com, our Merchant of Record, for the sale of Premium, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities, where required by law.

Other members of a book club you join can see your display name, page progress and reading emoji in that club. We never sell your data.

4. International transfers

Some providers may process data outside the EEA. Where that happens we rely on adequacy decisions or Standard Contractual Clauses.

5. How long we keep it

We keep your data while your account is active. When you delete your account or it is no longer needed, it is deleted or anonymised, except where the law requires us to keep it longer.

6. Your rights

Under the GDPR you can request access to, correction, erasure, restriction or portability of your data, object to processing, and withdraw consent at any time. Email us and we will reply within one month. You can also complain to the Hellenic Data Protection Authority (dpa.gr) or your local supervisory authority.

7. Security

We use appropriate technical and organisational measures, including encrypted connections, access controls and per-user data isolation.

8. Cookies and local storage

We only use essential storage: keeping you signed in, remembering your language and theme, and saving pages for offline use. We do not use advertising or tracking cookies. You can clear this storage in your browser settings.