Privacy Policy

The short version

Reedli stores the articles you save so you can read them later. Your data lives in the EU, we run no ads, we sell nothing to anyone, and our apps contain no tracking SDKs. You can export everything as JSON or delete your account (and all its data) at any time, directly in the app. This policy explains the details.

1. Who we are

The Reedli service (the reedli.com website, the app.reedli.com web app, the Reedli mobile app, and the Reedli browser extension) is operated by Rabbit Soft Szymon Krolikiewicz, ul. Jakuba Wujka 7/22, 61-581 Poznań, Poland, NIP 6172082665 ("Reedli", "we"). We are the data controller for the personal data described in this policy. For anything privacy-related, contact [email protected].

2. What we collect

Account data.

• Your email address and a password (stored only as a secure hash), or, if you sign in with Apple or Google, the email address and account identifier your provider shares with us. We never see your Apple or Google password.
• Your app settings (theme, text size, listening speed).

Content you save.

• The links you save, along with the readable article we extract from them: title, author, site name, excerpt, full article text, an estimated reading time, and the address of the lead image.
• The tags you create, your reading position in each article, and your reading history (which articles you finished and when).

Technical data.

• Standard server logs (IP address, browser type, request time) processed by our hosting provider to deliver the service and keep it secure.
• On the marketing website only, cookieless aggregate analytics (page views, referrer, country, browser type) that cannot identify you and do not track you across other websites.

3. How saving works

When you save a link, our servers fetch that page on your behalf and store a cleaned, readable copy for your personal use. If you save from the browser extension, the extension sends the page as your browser sees it, which lets Reedli save pages that require your login. We also cache the icon of the site you saved on our own servers, so no third-party icon service ever learns what you read.

4. What we do not do

• No advertising and no ad tech, anywhere.
• We never sell or rent your data.
• No tracking or analytics SDKs in the mobile app, web app, or extension.
• No profiling and no automated decision-making.
• The "Listen" feature reads articles aloud using your device's built-in speech engine. Article text is never sent to a text-to-speech service.

5. Legal bases

Under the GDPR, we process your data to perform our contract with you (providing the service you signed up for, Art. 6(1)(b)), for our legitimate interests (keeping the service secure and preventing abuse, Art. 6(1)(f)), to comply with legal obligations (Art. 6(1)(c)), and, where we ask for it, based on your consent (Art. 6(1)(a)).

6. Where your data lives and who processes it

Your account and saved content are stored in the EU. We use a small number of service providers (processors) bound by data processing agreements:

• Supabase - database, authentication, and file storage, hosted in the EU.
• Vercel - web hosting and content delivery. Delivering pages to you can involve processing technical request data outside the EU, covered by EU-approved safeguards (the EU-U.S. Data Privacy Framework and standard contractual clauses).
• Umami - cookieless, anonymized analytics on the marketing website only, hosted in the EU.
• Zoho - delivery of account emails such as sign-up confirmations and password resets.

If you subscribe to a paid plan through an app store, the store operator (for example Apple) processes your payment under its own privacy terms; we never see your payment card details.

7. How long we keep data

We keep your data for as long as your account exists. When you delete your account, your profile, saved articles, tags, reading progress, and reading history are deleted immediately, and disappear from routine database backups within 30 days. Server logs are kept only briefly for security and operations. Content cached on your phone for offline reading stays on your device until you clear it or sign out.

8. Your rights

Under the GDPR you can:

• Export everything as JSON at any time, from Settings (right to access and portability).
• Delete your account and all its data at any time, from Settings (right to erasure).
• Ask us to correct or restrict data, or object to processing based on legitimate interests, by writing to [email protected].
• Complain to a supervisory authority. In Poland this is the President of the Personal Data Protection Office (PUODO); you may also use the authority of your own EU country.

9. Security

All traffic is encrypted in transit. Your data is isolated with database-level access rules so it is readable only by your account. Passwords are stored only as secure hashes.

10. Cookies

The marketing website sets no cookies. The web app sets only the strictly necessary cookies that keep you signed in; there are no advertising or third-party tracking cookies, so no consent banner is required.

11. Children

Reedli is not directed at children and is not intended for anyone under 16. We do not knowingly collect data from children under 16.

12. Changes to this policy

If we make material changes, we will notify you by email or in the app before they take effect and update the date at the top of this page.

13. Contact

Questions about privacy? Write to [email protected].