Last updated: 24 August 2026
This policy explains how Krootl OÜ (registry code 16596495, Estonia) (“Krootl”, “we”, “us”) processes personal data when you use the READLO app. It is meant to meet GDPR and, for California residents, CCPA/CPRA-style rights. The English version is the binding language.
Controller: Krootl OÜ. Contact: hello@krootl.com.
The READLO iOS app (bundle id com.krootl.readsavvy), our
Firebase backends, and this website. It does not cover Apple, Google, or
other third-party sites you open from the App.
Depending on how you use READLO, we may process:
Pack files (text, audio, translations) are product content. They are cached on your device; they are not your personal data except insofar as they sit next to your progress.
We do not use your data to serve third-party ads in READLO.
We use Google Analytics for Firebase (Firebase Analytics). It records automatic events such as app open, session start, and engagement. While you are signed in we set Analytics user id to your Firebase uid (cleared on sign-out). We do not send quiz answers, display names, or vocabulary lists to Analytics.
On first launch we show Apple’s App Tracking Transparency prompt. If you allow, Analytics may use the advertising identifier (IDFA) to help us understand how people find and use READLO. If you deny or ignore the prompt, Analytics still runs without IDFA. There is no ads SDK and no ad personalization in the App. We do not sell personal information.
We use companies that process data on our instructions:
Some providers are outside the EEA (notably the United States). Where GDPR requires it, they rely on adequacy decisions or Standard Contractual Clauses and similar safeguards.
We do not sell your personal information and we do not share it for cross-context behavioral advertising.
Account and learning data stay until you delete the account, or until we no longer need them for the App (for example an abandoned anonymous account). Analytics retention follows Google’s settings. Cached packs on your device can be cleared by deleting the App. Support emails are kept as long as the conversation and legal record-keeping require.
If GDPR (or similar law) applies, you may request access, correction, deletion, restriction, objection (including to legitimate-interest analytics), and portability, and you may withdraw consent (for example by denying tracking in iOS Settings) without affecting earlier lawful processing. You may complain to your local supervisory authority (in Estonia, the Data Protection Inspectorate — aki.ee).
California residents may request to know, delete, or correct personal information and to opt out of “sale” or “sharing” as those terms are defined under CCPA/CPRA. We do not sell or share in that sense. We will not discriminate for exercising these rights. Email hello@krootl.com and we will verify the request as required.
READLO is 13+. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will delete it.
In the App: Profile → Settings → Delete account. That removes your Firebase user, Firestore data under that user, and the RevenueCat customer record. It does not cancel an Apple subscription; cancel that in your Apple ID settings. You can also email hello@krootl.com.
Reading reminders are optional. We ask for notification permission only if you opt in during onboarding. Reminders are scheduled on your device; you can turn them off in iOS Settings.
We use industry-standard access controls (authenticated Firebase access, signed pack URLs, least-privilege functions). No method of transmission or storage is perfectly secure.
We will update this page and the “Last updated” date when the policy changes. Material changes will be flagged in the App or by email where we have one.
Privacy requests: hello@krootl.com.
Krootl OÜ · registry code 16596495 · Estonia.