Reed Privacy Policy

DRAFT — pending legal review. This document was prepared from the app's actual data flows but has not been reviewed by an attorney. Do not treat it as legal advice or as final. COPPA imposes obligations that go beyond this document. Especially review the Children's Privacy section before relying on this.

Last updated: June 23, 2026

Reed ("Reed," "we," "us," or "our") is operated by Tyrannosaurus Tot, LLC, a Virginia limited liability company. This Privacy Policy explains what information we collect through the Reed mobile application (the "App") and related services (together, the "Service"), how we use and share it, and the choices and rights you have.

Reed is a family reading tracker: adults and children read, track their reading, rate and review books, and share insights with members of their family. Accounts are created and controlled by an adult parent or guardian, who may add profiles for children in their family. We have designed the Service so that children do not register on their own.

If you have questions, contact us at john@tyrannosaurustot.com or 214 W Brookland Park Boulevard, Richmond, VA 23222.

1. Quick summary

We collect the information needed to run a reading-tracker: account details, the profiles a parent creates (including children's profiles), the books and reading activity you log, and ratings/reviews you choose to share.
A parent or guardian creates every account and any child profiles, and provides consent for the information collected from their children when they do so.
We use trusted service providers — Cloudflare (hosting), Stripe (payments), and Apple (app distribution) — to operate the Service.
We do not sell personal information, we do not show third-party advertising, and we do not use third-party analytics or tracking SDKs.
Parents can review, update, or delete their family's information at any time, including by deleting the account from within the App.

2. Information we collect

a. Information you provide — adult account holder (parent/guardian)

Email address and password (passwords are stored only in hashed form on our servers).
Display name / username, and optional nickname and profile avatar.
Family name and the family/account structure you create.
App preferences (e.g., reading-time defaults, timer behavior, sounds, haptics, font size, theme).

b. Information you provide about a child (under-13 profiles)

When a parent or guardian creates a child profile, we collect:

The child's name and username.
The child's birthdate (used to determine age, surface age-appropriate content, and apply children's-privacy protections).
An optional avatar, reading level, and favorite genres.
An optional profile password or PIN that the parent sets.

c. Reading and activity information (all profiles, including children)

Books added to reading lists and their status (want to read, reading, finished, abandoned), reading progress (e.g., current page), and finish/completion data.
Ratings and any reviews or notes you choose to write.
Achievements, reading momentum, and an activity feed of your family's reading activity.

d. Family and parental-control information

Parental controls a parent configures: book- and review-approval requirements and daily and weekly reading-time limits.

e. Payment information

Reed offers a paid family membership. Payments are processed by Stripe through a secure checkout. Your card and billing details are entered with and handled by Stripe; we do not collect or store full payment card numbers. We receive limited transaction and subscription-status information (e.g., whether the family's membership is active). The membership subscriber is the adult account holder, not a child.

f. Technical and session information

Authentication session tokens, which are stored securely in the device Keychain and sent with requests so you stay signed in.
Basic technical data necessary to deliver the Service (e.g., request and connection data handled by our hosting provider).

We do not integrate third-party advertising, analytics, crash-reporting, or tracking SDKs in the App.

3. How we use information

We use the information above to:

Create and manage accounts, family groups, and child profiles.
Provide core features: tracking reading, logging progress, ratings/reviews, achievements, and the activity feed.
Enable sharing within a family, and enforce parental controls and approvals.
Process and manage the family membership and billing.
Maintain security, prevent abuse, debug, and operate and improve the Service.
Communicate with the account holder about the Service (e.g., account, security, or billing notices).
Comply with legal obligations.

We do not use children's information for behavioral advertising or sell it, and we do not condition a child's participation on disclosing more information than is reasonably necessary.

4. Children's privacy (COPPA)

Reed is a family service that knowingly allows parents to create profiles for children under 13. We take children's privacy seriously and design the Service to comply with the U.S. Children's Online Privacy Protection Act (COPPA).

Parent-controlled accounts. Children do not create their own accounts. A parent or guardian creates the family account and each child profile, and controls that profile.

Parental consent. By creating a child's profile and providing the information described in Section 2(b)–(d), the parent or guardian provides consent for Reed to collect and use that information to provide the Service as described here.

[REVIEW] COPPA requires verifiable parental consent and a direct notice to parents before collecting a child's personal information. Confirm with counsel that the account-creation flow satisfies the verifiable-consent standard for the data collected, or implement an additional consent step.

What we collect from children and why. See Section 2(b)–(d). We limit collection to what is reasonably necessary for a child to use the reading-tracker features.

No advertising or sale. We do not serve behavioral advertising to children, we do not use third-party advertising or analytics SDKs, and we do not sell children's personal information.

Sharing of a child's information. A child's reading activity and shared content are visible within their family. We share data with service providers only as described in Section 5.

Parental rights. At any time, a parent or guardian may:

Review the personal information we have collected from their child.
Direct us to correct or delete that information.
Refuse to permit further collection or use of the child's information (which may mean the child profile can no longer use the Service).

To exercise these rights, use the in-App account controls or contact us at john@tyrannosaurustot.com. We will verify that the request comes from the child's parent or guardian before acting on it.

5. How we share information

We do not sell personal information and we do not share it for cross-context behavioral advertising. We share information only as follows:

Service providers ("processors") that operate the Service on our behalf and are bound to protect the information:
- Cloudflare — application hosting and infrastructure.
- Stripe — payment processing for memberships.
- Apple — app distribution and, during testing, TestFlight.
Within your family, as part of the Service's sharing features that you and your family control.
Legal and safety — when required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or others.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Data retention and deletion

We retain personal information for as long as an account is active or as needed to provide the Service, and as required for legal, security, or recordkeeping purposes. You can delete your account and associated data from within the App (which removes the family's data from our systems, subject to limited retention required by law). To request deletion another way, contact john@tyrannosaurustot.com.

7. Data security

Passwords are stored in hashed form, session tokens are stored in the device's secure Keychain, and data is transmitted over encrypted connections (HTTPS). No method of transmission or storage is 100% secure, but we work to protect your information using reasonable administrative, technical, and physical safeguards.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to appeal a decision about a request. This includes residents of Virginia (under the Virginia Consumer Data Protection Act) and other U.S. states with comparable laws. We do not sell personal information or use it for targeted advertising. To exercise any right, contact john@tyrannosaurustot.com; we will verify your request before responding.

9. Where your information is processed

Reed is operated from the United States, and our hosting and payment providers may process data in the United States and other locations. By using the Service, you understand your information may be processed in the United States.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, where required, notify the account holder. Material changes affecting the collection or use of a child's information will be handled consistent with COPPA.

11. Contact us

Tyrannosaurus Tot, LLC 214 W Brookland Park Boulevard, Richmond, VA 23222 Email: john@tyrannosaurustot.com