ReadLog

Privacy Policy

Effective date: June 17, 2026 · Last updated: September 26, 2026

Local content, limited anonymous usage data. Everything you enter stays on your device and is never sent to us. The app sends a small set of anonymous usage events to our own Cloudflare-hosted server so we can improve the app. There is no advertising, no third-party tracking, and no third-party analytics SDK.

Who we are

ReadLog ("the app", "we") is provided by Softgrove, an independent developer based in Japan. Contact: softgrove@duck.com.

What data the app handles

You may record books (title, author, format, status, genre, length, your rating, notes), reading sessions, reading goals, and saved quotes (quote text, book, author, page, favorite) ("your reading data"). Your reading data is stored only locally on your device using Apple's on-device database, protected with iOS file protection. We never receive this data.

We do not collect your entries (books, sessions, goals, quotes, notes) or other user content, camera images, name, email address, account credentials (the app has no account), location, contacts, or advertising identifiers through the app. The limited usage events described below are the only data sent to us.

Camera (quote scanning)

If you choose to scan a quote, the app uses your camera and Apple's on-device text recognition (VisionKit). Recognition happens entirely on your device; camera images are not saved by the app and are never sent to us or any third party. Only the text you choose to keep is saved, locally, as a quote.

Anonymous usage analytics

ReadLog sends a small set of funnel events. An event name describes an internal action such as using a core feature, viewing a result or the Premium offer, starting or completing a purchase, restoring a purchase, or interacting with a reminder. Not every version sends every event.

Each request contains the app identifier (a), app version (v), a random installation identifier (d), event name (e), timestamp (t), and a small properties object (p). Current properties are limited to fixed internal screen or flow names, an App Store product identifier, subscription plan, and trial-eligibility flag where relevant. They do not contain your entries, book titles, quotes, notes, camera images, or other free-form content.

The installation identifier is a random UUID generated on your device. It is not your Apple advertising identifier (IDFA), Apple vendor identifier (IDFV), name, email address, or account ID. We use these events only to understand aggregate feature use and funnel completion and to improve ReadLog; never for advertising or cross-app or cross-website tracking.

Cloudflare, Inc. hosts the endpoint as our infrastructure processor. Our Worker does not store source IP addresses, User-Agent headers, raw event bodies, raw timestamps, or raw installation identifiers. It stores daily aggregate counts and, for this app, a per-day HMAC-SHA-256 hash of the random identifier. The hash is salted with the day and app identifier, so it changes each day. Cloudflare may process network metadata to deliver and secure its service under its data-processing terms.

Export and deletion

Subscriptions and payments

Premium subscriptions are sold and processed by Apple through the App Store. We do not receive or store your payment information. Apple's handling of your purchase is governed by Apple's Privacy Policy.

Notifications

If you enable reading reminders, the app schedules local notifications on your device. The reminder time and notification content are not sent to us or any third party. Whether you accept or decline the reminder prompt, grant permission, or open a reminder may be counted as an anonymous usage event (see above).

Children

ReadLog is not directed to children under 13 (or the minimum age in your region) and does not knowingly collect personal information from children. The app collects no personal information from anyone; it sends only the anonymous usage events described above.

Third parties

ReadLog has no third-party analytics or advertising SDKs. We use Cloudflare, Inc. only to host the anonymous event endpoint and aggregated database described above. We do not sell these events, provide them to third parties for their own purposes, use them for advertising, or use them to track you across apps or websites.

For users in the EU/EEA and UK (GDPR)

Controller postal address. Ryosuke Igarashi (Softgrove), Shibuya Dogenzaka Tokyu Bldg. 2F-C, 1-10-8 Dogenzaka, Shibuya-ku, Tokyo 150-0043, Japan.

Controller. The controller for the limited usage analytics is Ryosuke Igarashi (Softgrove), Japan. Contact: softgrove@duck.com.

Purposes and legal bases. We process the limited usage events to understand aggregate feature use and improve the app, based on our legitimate interests under Article 6(1)(f) GDPR. Your on-device content is not sent to or processed by us. Purchases are processed by Apple; see Apple’s Privacy Policy. If you contact us, we process the information you send to answer your request, also based on our legitimate interests.

Recipients and international transfers. Cloudflare, Inc. processes the usage events for us as hosting provider on its global network. This may involve transfers outside the EU/EEA or UK, including to the United States, using safeguards such as the European Commission’s Standard Contractual Clauses and the UK transfer addendum where applicable.

Retention. We do not retain raw events or raw installation identifiers. Daily aggregate counts and per-day HMAC hashes are retained in a form not designed to identify a person. The current server code has no automatic deletion period for those aggregate records. On-device content remains until you delete it or the app. Correspondence is kept only as long as reasonably needed to answer and document the request.

Your rights. Subject to applicable law, you may request access, rectification, erasure, restriction, objection, and data portability by emailing softgrove@duck.com. Because the random installation identifier is not linked to your identity and the server does not retain the raw identifier, we may be unable to identify records as relating to you. You may also lodge a complaint with the data-protection supervisory authority in your country of residence or work, or where you believe an infringement occurred.

Providing usage events is not a contractual or statutory requirement; the app’s core operation does not depend on a successful telemetry request. We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Changes

We may update this policy. Material changes will be reflected here with a new "Last updated" date.

Contact

Questions: softgrove@duck.com.

ReadLog is a personal reading log. You enter your own books and sessions, and any statistics it shows reflect only what you have logged. See the Terms of Use.