1. Introduction
ReadHatch ("we," "our," or "us") provides a mobile application that helps children practice reading comprehension through AI-generated quizzes. Parents, teachers, and tutors ("grown-ups") create the account and run the app, and children take quizzes on the grown-up's device. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have.
2. Information We Collect
Grown-up account
When a grown-up creates an account, our authentication provider, Clerk, collects their email address and password. If they sign in with Google or Apple, we also receive the name and profile photo from that account. We never see your password.
Reader profiles
The grown-up adds each reader with a first name (or nickname) and, optionally, an age. Children do not create accounts, sign in, or enter an email address.
Reading activity
We store the books searched for or scanned, quiz answers and scores, points, streaks, levels, weekly goals, and the creatures each reader collects, including any names a reader gives them.
Grown-up check
If you set a PIN for grown-up actions, we store only a salted, one-way hash of it. If you use fingerprint or face unlock, the check happens on your device and nothing biometric is sent to us.
Subscriptions
Purchases are made through the Apple App Store or Google Play. We receive your subscription status through RevenueCat. We never receive your card or payment details.
Affiliate attribution
Some people find ReadHatch through a partner's link. After a grown-up signs in, the Insert Affiliate SDK records whether the app was installed through such a link, using the app store's install referrer, IP address, and basic device information (such as device type and operating system), so we can credit the partner for a subscription. It collects nothing before a grown-up signs in.
What stays on your device
The camera is used only to read the barcode on a book. Barcode images are processed on the device and never stored or sent to us; only the book's ISBN is used to look it up. Questions and answers are read aloud by your device's built-in text-to-speech.
What we do not collect
ReadHatch does not collect location, contacts, photos, or microphone audio, and does not use the advertising ID. There are no ads in ReadHatch.
3. How We Use Information
- To provide and operate the ReadHatch service
- To generate age-appropriate comprehension quizzes using AI
- To track reading progress, points, levels, streaks, and goals
- To let grown-ups see each reader's progress
- To manage subscriptions purchased through the App Store or Google Play
- To credit partners whose link led to a subscription
- To provide support and keep the service secure
We do not sell personal information, show advertising, or use anyone's information to build advertising profiles.
4. AI-Generated Quizzes
To write a quiz, we send the book's title and author, the quiz language, and the reader's age, if set, to OpenRouter, which passes the request to Claude, an AI model made by Anthropic. We never send a reader's name or any account details.
These requests are only handled by providers that keep no copy of them and do not use them to train AI models (currently Claude running on Google Cloud Vertex AI or Amazon Bedrock). The AI is instructed to keep every question appropriate for children. AI can still make mistakes, so grown-ups can dismiss any question that looks wrong or generate a new quiz.
5. Children's Privacy
ReadHatch is used by children under a grown-up's supervision. We design it to comply with the U.S. Children's Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation (GDPR), and similar laws.
- What we hold about children: the reader's name and age entered by the grown-up, their quiz answers and reading activity, and any names they give their creatures.
- Why: only to run ReadHatch for that reader. We never use it for advertising or sell it.
- Who else sees it: only the service providers in section 6 that we need to run the app. Only the reader's age reaches the AI provider, never their name.
- Grown-up check: sharing results outside the app and deleting the account ask for the grown-up's PIN or fingerprint first.
- Your controls: grown-ups can see each reader's activity in the app, delete a reader (which removes their history), delete the whole account, or email us to review or delete a child's information. We respond within 30 days.
6. Third-Party Services
ReadHatch uses the following service providers:
- Clerk — grown-up sign-in and account management (email, name, and profile photo)
- Convex — our database and backend, which stores accounts, reader profiles, and reading activity
- OpenRouter and Anthropic — AI quiz generation, run on Google Cloud Vertex AI or Amazon Bedrock with no data retained (book title, author, language, and reader age only)
- Open Library — book search and details (the search text or ISBN only, sent from our servers)
- RevenueCat, Apple App Store, and Google Play — subscription purchases and status
- Insert Affiliate — affiliate attribution, after a grown-up signs in (install referrer, IP address, and basic device information)
- Google Analytics and PostHog — website analytics on readhatch.com only (pages visited and traffic sources). They are not used in the app.
7. Data Security
All data is sent over encrypted connections (HTTPS). Each account can access only its own readers' information, and every request is checked on our servers. Grown-up PINs are stored only as salted hashes. API keys and other credentials are kept on our servers and never sent to devices.
8. Data Retention
- We keep account and reading data while your account is open, and no longer than we need it to provide ReadHatch.
- Deleting a reader immediately removes their profile and reading history.
- Deleting your account immediately removes your account, every reader, and all reading history. Deleted data is cleared from our backups within 30 days. See how to delete your account.
- Quizzes generated for a book are detached from your account and kept; they contain only the book and its questions.
- Apple, Google, and RevenueCat keep billing records they are required to keep. Insert Affiliate keeps attribution records under its own privacy policy. Our AI providers keep nothing.
9. Your Rights
Depending on where you live, you have the right to:
- Access the personal information we hold about you and your readers
- Request correction of inaccurate information
- Delete your account and data, in the app or by emailing us
- Withdraw consent for data processing (by deleting a reader or your account)
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new "Last updated" date. Your continued use of ReadHatch after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or your data, please contact us at: