Night Light Readers is a book club app. We collect the least we can, we never sell it, we show no ads, and you can delete everything yourself from inside the app. This page says exactly what we hold and why.
Who we are
Night Light Readers ("we", "us") operates the Night Light Readers mobile app and the website at nightlightreaders.com. We are based in Texas, United States. Questions about this policy go to support@nightlightreaders.com.
What we collect
We only collect what the app needs to work. Everything below is created by you, in the app, on purpose.
| Data | Why we have it |
|---|---|
| Email address and a password (stored as a one-way hash) | To create your account, sign you in, confirm your address and reset your password. |
| Display name and your chosen profile visibility | So club members and friends can recognise you. We never require a real name. |
| Your shelves: books you want to read, are reading, have finished or set aside, with ratings, progress and dates | This is the app. Your shelf is private by default; you choose what clubs and friends can see. |
| Private reviews and notes you write | Shown only to you. |
| Club membership, club chat messages, discussion posts and votes | Shown to the members of that club, and nobody else. |
| Club logos you upload | Shown to that club's members. |
| Friend requests and blocks | To connect you with people you choose and keep away people you do not. |
| Reports you file about content or people, including a copy of the reported content | So we can review it. See "Moderation" below. |
| A push notification token for your device | To deliver notifications you have turned on. You can turn each type off in Settings. |
| Books you import from a CSV file, a pasted list or screenshots | To add them to your shelf. Screenshots are read on your device and never uploaded; only the titles and authors found in them are sent. |
We do not collect your location, your contacts, your photos beyond the single club logo you choose, payment details, or advertising identifiers. We run no analytics or advertising SDKs. We do not track you across other apps or websites.
What we do not do
- We do not sell, rent or trade your data, ever.
- We show no advertising.
- We do not use your reading data to profile you or to train anything.
- We never ask for the password to another service. Imports are file-based only.
Services that see some of your data
Running an app takes a few other companies. Each sees only what its job requires.
- Hosting. Your account and reading data live on a server we manage, hosted by Elestio in the United States. Backups are encrypted.
- Book information and covers. Book details come from Open Library, a project of the Internet Archive. When the app fetches a cover or looks up a book we do not already have, those servers see your device's IP address, as with any web request. They never see who you are or what is on your shelf.
- Push notifications. Delivered through Firebase Cloud Messaging (Google) and Apple Push Notification service. They receive your device token and the notification content.
- Email. Account emails (confirmation, password reset) are sent through Amazon Simple Email Service, which sees your email address and the message.
- Website. This website is served through Cloudflare.
Where it is stored and for how long
Your data is stored in the United States. We keep it for as long as your account exists. When you delete your account, everything tied to it is removed or made permanently inaccessible at once (see below), and deleted data ages out of our encrypted backups within 30 days.
Deleting your account and getting your data out
Delete: in the app, open Settings, then Account, then Delete account. This removes your account, profile, shelves, reviews, club memberships, messages, votes, friendships, blocks, reports, club logos you uploaded and device tokens. It cannot be undone. If you no longer have the app, email support@nightlightreaders.com from the address on your account and we will do it for you. Full details are on the account deletion page.
Export: in the app, open Settings, then Your data, then Export. You get a CSV file of your shelf in a format other reading apps can import.
Moderation
Clubs contain content written by their members. You can report a message or a person from inside the app, and you can block anyone. Reports are reviewed by a human, and we act on them within 24 hours. Blocking someone hides you from each other and refuses friend requests; we never tell the other person they were blocked.
Children
Night Light Readers is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has an account, email us and we will remove it.
Security
Connections to our servers are encrypted. Passwords are stored as hashes we cannot reverse. Access to your data is controlled per row, so a club's messages are only ever readable by that club's members. No system is perfect; if we learn of a breach affecting your data, we will tell you.
Your rights
Wherever you live, you can see, export, correct or delete your data using the app itself. If your local law gives you additional rights (for example under the GDPR or the CCPA), email us and we will honour them.
Changes
If this policy changes in a way that matters, we will say so in the app before the change takes effect. The date at the top is the date of the current version.