Privacy policy

Updated 1 October 2026

This notice covers the ReadFirst app and the getreadfirst.com website. It describes the app implementation reviewed on 29 September 2026.

1. Who is responsible

Privacy enquiries: [email protected].

2. Your reading stays yours

ReadFirst does not require a ReadFirst account. Your bookshelf, reading entries, goals, preferences, page fingerprints and screen time credit are kept on your device in the reviewed release. We do not operate a server that receives your reading library.

The camera checks a book page on your device using Apple’s text recognition. Verification photos are discarded after the check. The app keeps a fingerprint used to detect repeated pages, not the recognized passage. A book-cover photo you choose to save is different: it can remain part of your bookshelf.

3. Permissions and Apple services

Screen Time permission lets ReadFirst restrict your chosen apps. It uses Apple’s app-selection tokens and local usage events to apply your rule and account for credit. Camera permission enables page and cover scanning. Optional notification permission enables reminders. You can manage these permissions in device Settings.

ReadFirst’s dedicated iCloud synchronization is disabled in the reviewed release. Apple device backups may still include app data if you enable backups. Apple handles those backups under its own terms and privacy policy. We cannot inspect your private Apple backups. If dedicated synchronization is enabled in a future release, this notice will be updated before launch.

Purchases and subscriptions use Apple’s StoreKit. Apple processes payment details. ReadFirst reads transaction and entitlement information to determine access to paid features. We do not receive your payment-card details.

4. Finding books

A book lookup sends the ISBN or search terms directly to catalogue services. These services also receive connection information such as your IP address. Depending on the query and ISBN, the app may use Open Library and its cover service (Internet Archive), K10plus (GBV/SWB), Deutsche Nationalbibliothek, Libris (National Library of Sweden), Bibliothèque nationale de France, Koninklijke Bibliotheek (Netherlands), National Diet Library (Japan), OPAC SBN (Italy), or BrasilAPI. Cover-image requests go to the provider of the returned cover. Google Books is disabled in the reviewed configuration.

Lookup providers process requests under their own policies. You can enter book details manually instead of using online search. Book-page verification photos and your reading history are not sent with catalogue searches.

5. Visiting this website

This website’s code includes no advertising pixels, analytics scripts, external fonts, marketing cookies or browser storage. Images and styling are served with the site. Hosting infrastructure processes connection data, such as IP address, requested URL, browser information and time, to deliver and secure the website. The website runs on a server of netcup GmbH (Germany) and is delivered through the network of Cloudflare, Inc. (USA). Both process this connection data on our behalf.

6. Contacting us

If you email us, we receive your email address, message and any information you choose to attach. We use it to respond and resolve your enquiry. Please avoid sending book-page photographs or sensitive information unless it is needed for your request. We keep enquiries only as long as needed to answer them and to meet any applicable legal retention duty.

7. Legal bases and international processing

Where the GDPR applies, processing needed to provide a requested service is based on Article 6(1)(b), necessary security and routine communications on Article 6(1)(f), and applicable statutory duties on Article 6(1)(c). Optional processing that needs consent relies on Article 6(1)(a); consent can be withdrawn. Our legitimate interests are operating a secure service and answering enquiries.

TrueDigital, LLC is based in the United States. Website, email and third-party service processing may take place outside your country.

8. Retention and your choices

Local reading records remain until you remove them or the app’s data. Removing an app does not necessarily remove iCloud copies or device backups; manage those through Apple’s storage controls. You can delete books in the app and manage backups in your device settings. We cannot delete a private reading library we do not hold.

Where applicable, you may request access, correction, erasure, restriction or portability; object to legitimate-interest processing; withdraw consent; and complain to your local data protection authority. Contact [email protected]. ReadFirst does not sell personal information or use it for targeted advertising. No advertising profiles or decisions with legal or similarly significant effects are made by this website.

9. Changes

We will update this notice when the product or its data processing changes. The date at the top identifies the version.