Privacy Policy
Last updated: July 23, 2026
1. What data we collect
We collect first-party usage metrics (no third-party tracking providers): navigation and training-progress events (e.g. completed exercises, reading sessions), aggregated to measure retention, activation and engagement. We store this data on our own infrastructure, within the European Union.
1.1. How long we keep data
We apply the storage-limitation principle (art. 5(1)(e) GDPR): telemetry events are kept for at most 180 days, after which they are deleted automatically. Aggregate metrics (without identifiers), used for long-term trends, may be kept longer.
2. Legal basis
We process these metrics on the basis of legitimate interest (art. 6(1)(f) GDPR) in improving the product. The first-party metrics use no third-party cookies and do not feed advertising; for the third-party tools, which start ONLY with your consent, see section 7. You can opt out anytime (see section 6).
3. Region processing
We retain the country (two-letter code) derived from the network for geographic segmentation. We do NOT store your IP address. We apply the most protective standard by default, regardless of region.
4. Browser signals
We honor Global Privacy Control (Sec-GPC) and Do Not Track (DNT) signals: if your browser sends them, we stop collecting analytics.
5. Identifiers
We use a first-party identifier (rw_aid) to correlate anonymous activity with your account after sign-in. It is only set if analytics is allowed and is removed on opt-out.
6. Your rights
- Opt-out: from the profile page you can stop future analytics collection.
- Deletion: when you delete your account, the associated events are permanently deleted.
7. Advertising and behaviour analytics
The app may use advertising pixels (Meta, TikTok, Google) and Microsoft Clarity (click heatmaps and anonymised session recordings) only with your explicit consent, given via the cookie banner or, in the mobile apps, on the privacy screen shown when you create your account. Clarity runs on the public marketing pages and on the checkout page — never in the library, the reader or the exercises — and any text you type into forms, billing details included, is masked before it is sent. Card details are entered directly with the payment processor and never reach Clarity. You can withdraw this consent anytime from your profile page or by clearing your browser cookies.
The table below lists the cookies the app may set. Marketing cookies are set ONLY after you press “Accept” in the banner (or “Continue” on the privacy screen in the mobile apps); strictly-necessary ones (payment, session, your consent choice) are always active.
| Cookie | Provider | Purpose | Category | Max duration |
|---|---|---|---|---|
_fbp (Meta Pixel) | Meta Platforms | campaign measurement and personalized ads | Marketing (after consent) | 90 days |
_ttp (TikTok Pixel) | TikTok | campaign measurement and personalized ads | Marketing (after consent) | 13 months |
_ga, _gcl_au (Google Analytics / Ads) | campaign and conversion measurement | Marketing (after consent) | 2 years / 90 days | |
_clck, _clsk (Microsoft Clarity) | Microsoft | click heatmaps and anonymised session recordings, ONLY on the public marketing pages | Marketing (after consent) | 1 year / 1 day |
__stripe_mid, __stripe_sid | Stripe | payment fraud prevention (only during checkout) | Strictly necessary | 1 year / 30 min |
rw_consent | ReadWizzard (first-party) | remembers your consent choice | Strictly necessary | 12 months |
rw_aid | ReadWizzard (first-party) | first-party usage analytics (see section 5) | Analytics (opt-out) | 12 months |
We also use strictly-necessary first-party cookies for authentication and preferences (session, CSRF protection, theme, language), with no tracking role.
8. Contact
Data controller: ASHA NEW EVO SRL (Romania). For data-related questions, contact us at support@readwizzard.com.
9. Account deletion & data retention
You can delete your account at any time from the app: Profile → Danger Zone → Delete account permanently, confirmed by retyping your email address. The public page /delete-account describes the full process without requiring you to log in.
Deletion permanently removes: your account, all training progress (exercises, reading sessions), badges, XP, and any active subscription (canceled and removed).
We retain: fiscal invoices, for the legally-required retention period, but anonymized (no longer linked to your account); billing data (card, customer record), retained by our payment processor, Stripe, under its own legal obligations.
Local library data differs by platform: on iOS it is removed when you uninstall the app; on Android it is stored by Chrome and survives uninstalling the app, until you clear it manually via Chrome.
10. Public reading-speed test
The public /test page offers a short reading-speed test, no account needed. While you're on it we collect, anonymously, under a session identifier (not an email): your profiling answers (e.g. monthly goal, preferred reading habit), your reading score (words per minute, comprehension), and your timezone — used to suggest a training time that fits you; we call this out explicitly as approximate location data, we don't hide it under "technical data". The legal basis is your consent, given while going through the test. We keep this data for at most 180 days, after which it is deleted automatically by a monthly purge. If you create an account after the test, this data is linked to your account via the test's session cookie (rw_quiz_session) — and is permanently deleted if you delete your account (section 9).