Privacy Policy

• There are three ways to use Readnext: the sample reader, with no account; a free account; and a paid membership.
• Without a membership, your books, ratings and reactions stay in your browser. We don't keep them.
• Only members' libraries are saved on our servers, and they're removed when a membership ends.
• What you type in a request is used to find books and is not stored or logged by us.
• We don't sell your information, show ads, or use advertising or analytics trackers.
• Payments are handled by Stripe. We never see or store your card details.

Readnext is run by Nebula Digital ("we", "us"). We decide how the information described here is used. You can reach us at michaelbowers@nebuladigital.net.

If you try the sample reader without an account:

• The sample reader's books are built in. When you ask for sample picks, your browser sends your request to our server so it can find and rank books. We use it for that request only and don't keep it.

If you create an account:

• Your email address and password. The password is stored only as a secure hash by our database and sign-in provider, Supabase. Depending on how sign-up is configured, we may ask you to confirm your email address before you can sign in.
• Basic sign-in records kept by Supabase, such as when the account was created and last signed in.
• Without a membership, your library (the books you add, how you rated them, your shelves, your reactions to picks, and recently shown picks) is saved in your browser's storage on your device. It is not saved on our servers; our database accepts saved libraries only from members. Each account's library is kept separately in the browser, and a library saved in the browser without an account is added to your account only if you choose to.
• When you ask for recommendations, your browser sends your request, your ratings and a list of books you've read to our server so it can find and rank books. We use them for that request only and don't keep them.
• A monthly count of your AI-judged requests, so we can apply your allowance. It is kept with your account.

If you become a member:

• Your library is saved to your account so it is available on any device: books, ratings, shelves, reactions, Reader DNA history, and the picks you were shown recently (used for 72 hours so you aren't shown the same books again).
• Your Stripe customer and subscription identifiers, your plan, your membership status and the end of your current billing period. Your card details go directly to Stripe and never reach us.
• If you import a Goodreads or StoryGraph export, the file is read in your browser. Only each book's title, first author and ISBN are sent to our server, which looks them up in Open Library. The ratings, shelves, dates, reviews and notes in the file are not sent. When you confirm the import, only the books you chose, with their shelves, the feelings you chose and their dates, are saved to your library.

Everyone:

• Book searches you type are sent to Open Library to find matching books.
• Your IP address is used briefly, in memory, to limit request rates. We don't store it in our database for that.
• Our hosting provider keeps standard server logs, which can include IP addresses, browser type and the pages requested. Our own application logs record outcomes such as timings and counts, never request text, email addresses or library contents.

• To provide Readnext: building your Reader DNA, finding and ranking books, and saving members' libraries.
• To process memberships and payments, and to apply allowances and rate limits.
• To send account emails you need, such as sign-up confirmation (where it's turned on) and password reset. We don't send marketing email, and creating an account or becoming a member doesn't sign you up for any.
• To keep the service secure and working, and to meet legal obligations such as tax records.

We don't sell or rent personal information, we don't share it for advertising, and we don't use it to train AI models.

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases: performing our agreement with you (providing Readnext and memberships), our legitimate interests (security, preventing abuse, fair-use limits), and legal obligations (financial records).

To judge how well candidate books fit a request, Readnext sends Anthropic, the provider of the Claude AI model, the text of your request, a summary of your Reader DNA, some titles from your library so books you've already read can be left out, and catalog information about candidate books.

We don't send your email address, password or account identifiers. Anthropic processes this data to provide its service to us, under its commercial terms. Those terms say it doesn't train its models on this data; it may keep it for a limited time, for example to check for misuse, as its terms describe.

A free account gets 10 AI-judged requests each calendar month (UTC), and members get up to 100 a month. A request counts only when the AI check completes. The sample reader doesn't use AI judging. A member's requests beyond that are ranked without sending anything to Anthropic.

We use these service providers. Each receives only what it needs to do its job for us:

• Supabase: database, sign-in and account emails. Data is stored in the United States.
• Vercel: hosting and delivery of the website and app.
• Stripe: the checkout page, payment processing, receipts and the billing portal. Stripe collects card details directly under its own privacy policy, and may also use payment information for its own purposes, such as preventing fraud, as that policy describes.
• Anthropic: AI judging of recommendations, as described above.
• Open Library and the Internet Archive: the book catalog and cover images. Our server sends them the search terms it builds from your requests and the titles, authors and ISBNs it looks up, never your account details. Covers load directly from their servers, so they see your IP address and browser details when your browser requests an image.

We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a sale or reorganization of the business, in which case this policy continues to apply to it.

If you sign in, Readnext sets cookies that keep you signed in. They are strictly necessary and are not used for anything else.

Readnext also uses your browser's storage for each signed-in account's library (for members, a copy of the saved library) and a few display preferences, such as whether you dismissed a notice. Signing out removes a member's copy from the browser. You can clear browser storage at any time in your browser settings; doing so deletes a library that isn't saved to a membership.

We don't use analytics, advertising or tracking cookies.

• Library in your browser: until you clear that browser's storage, or delete your account from that browser (which removes it from that browser only).
• Members' libraries: for as long as the membership lasts. When it ends, the next time you open Readnext your library is copied back into your browser and, once the copy is checked, removed from our servers. A library that isn't collected is deleted 90 days after the membership ends.
• Recently shown picks: used for 72 hours, then deleted the next time you get recommendations, or with the rest of a member's saved library.
• Request text: not stored.
• Monthly counts of AI-judged requests: until the account is deleted.
• Account (email and sign-in records): until the account is deleted.
• Billing records: Stripe keeps payment records for as long as the law requires. We keep your Stripe identifiers and membership status while your account exists.

You can cancel a membership at any time in billing. You can delete your account on the Membership page. While a membership is still running, including while a payment is being retried, deletion waits: cancel in billing, and delete the account once the membership has ended. Deleting the account removes it and everything saved with it from our database, including your library, membership record and request counts; Stripe keeps its own payment records as the law requires. When you delete it on the Membership page, Readnext also removes that account's library from the browser you're using, along with any library from that browser that you added to the account. We can't reach other browsers or devices: a library kept in one stays there until you clear that browser's storage. Another account's library in the same browser isn't touched.

To get a copy of your data, correct it, or have us delete your account, email michaelbowers@nebuladigital.net from the address on the account. We'll respond within 30 days.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict some processing, and to withdraw consent. California residents have the right to know, delete and correct, and to not be treated differently for using these rights; we don't sell or share personal information as California law defines those terms. If you are in the EEA or UK, you can also complain to your local data protection authority.

Connections to Readnext are encrypted. Each account can read and change only its own saved data, and only members can save a library to our servers; both are enforced in the database. Passwords are stored only as hashes, and card details are handled by Stripe. No system is completely secure, so we can't promise that information will never be accessed without permission, but we'll tell affected users promptly if a breach affects them.

Readnext and its service providers operate in the United States. If you use Readnext from elsewhere, your information is transferred to and processed in the United States.

Readnext is not meant for children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has created an account, email michaelbowers@nebuladigital.net and we'll delete it.

We'll post any changes on this page and update the date at the top. If a change materially affects how we use information we already hold, we'll tell members by email before it takes effect.

Questions about privacy go to michaelbowers@nebuladigital.net.