Privacy Notice

Who we are

Nejo Studios, based in Montague, Prince Edward Island, Canada, provides Read Aloud Ready and acts as the data controller for personal information processed to operate the service. For privacy questions or requests, contact us through our help centre.

Read Aloud Ready is designed for teachers and other adults to display stories to a class. Students do not need accounts, and we do not ask teachers to upload student information.

Information we collect and why

• Account information: email address, account identifier, securely protected login credentials, and any name or preferences you provide. We use these to create and secure your account, keep you signed in and provide the service. The legal basis, where required, is contract performance and our legitimate interest in account security.
• Trial and subscription records: trial dates, subscription and customer identifiers, plan, status, renewal dates and relevant payment events. We use these to grant reading access, administer subscriptions and meet recordkeeping obligations. The legal bases are contract performance and legal obligations.
• Support messages: contact details and information you choose to send. We use them to answer questions and resolve problems, based on contract performance or our legitimate interest in customer support. Please do not include student information or card details.
• Technical information: usage information, browser and device details, and error reports. Our hosting and sign-in providers may process IP addresses and security logs to deliver and protect the service. The legal basis is our legitimate interest in operating a reliable, secure service.

Emails

We send account confirmation, password reset and other service emails through Lovable. If you try the service but do not subscribe, we send one follow-up email approximately a week after your trial ends, and no further trial reminders. Contact our help centre if you do not want this reminder. We rely on our legitimate interest in following up on your trial, subject to applicable consent requirements and your right to object. Any additional marketing requires consent where applicable.

Visitor analytics

We use Lovable’s visitor analytics on our published site. It uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.

It records pages visited, where visitors came from, country, browser, operating system and device type, time on the site, page loading speed, errors, and clicks on buttons and links. Clicks are identified by their position, not their text. This site does not currently have an analytics consent banner; these measurements, including clicks, are recorded for every visitor, subject to browser privacy signals. Page visits, time on page, page speed and errors are recorded without cookies and without identifying anyone. If your browser sends Global Privacy Control, clicks are not recorded. Detailed analytics are kept for 90 days and daily summaries for one year. We use these measurements to understand and improve the site, based on our legitimate interest.

Cookies and browser storage

Our sign-in service uses essential browser storage to remember your session so you do not have to sign in repeatedly. Signing out clears the app’s saved session. You can also clear site data in your browser, which may sign you out. Lovable’s visitor analytics does not use cookies or browser storage. We do not currently load advertising pixels or marketing cookies on our own pages.

Payment checkout and the separately linked help centre may use their own cookies and storage for security, payments and support. Their privacy notices explain those practices. Browser controls let you manage cookies and site storage; blocking essential storage may prevent sign-in or checkout from working.

Who receives information

• Lovable and its infrastructure providers, including Supabase for account and database services, process information to host the site, manage sign-in, deliver service emails and provide analytics.
• Paddle is our Merchant of Record and receives information for product sales, subscription management, payment processing, tax compliance and invoicing. Payment details are submitted to Paddle, not stored as full card numbers by Nejo Studios. Paddle handles its own processing under its privacy notice.
• Tawk.to operates our linked help centre and processes information you submit there under its privacy policy.
• Professional advisers, such as legal or accounting advisers, when needed; and authorities where disclosure is required by law.

We do not sell your personal information.

Retention and security

We keep account and preference information while your account is open. After an account closure or deletion request, we delete or anonymise information when it is no longer needed, except records necessary for legal, tax, fraud prevention or dispute obligations. Subscription and transaction records are retained for applicable statutory recordkeeping periods; support information is retained as needed to resolve enquiries and related disputes. Analytics retention is described above.

We use appropriate technical and organisational safeguards, including encrypted connections, access controls and restricted access to account records. No online service can guarantee absolute security.

International processing and your rights

Our service providers may process data outside Canada, including in the United States or other countries, where privacy laws may differ. We use appropriate contractual and other safeguards for transfers as required by applicable law. For transfers subject to UK or EEA rules, these may include adequacy decisions or standard contractual clauses.

Depending on where you live, you may request access, correction, deletion, restriction, or a portable copy of your information; object to certain processing; and withdraw consent where we rely on it. Withdrawal does not affect prior lawful processing. Contact our help centre to exercise these rights. We may verify your identity before acting. We respond within applicable legal deadlines, including normally within one month for UK/EEA requests. You may complain to your local privacy regulator, including the Office of the Privacy Commissioner of Canada or your UK/EEA supervisory authority.

Changes

We will update this notice when our practices change and provide additional notice where required. See our Terms and Conditions for use of the service.