It's Our Priority To Keep Your Data Safe.

The Bookworm App is committed to protecting the privacy of our users and ensuring compliance with the General Data Protection Regulation (GDPR) and UK data protection laws.

We collect what the service needs and no more. For the account holder: name and email address. For each learner: a username chosen by the parent (a real name is not required), age, reading language and level, and learning activity such as lessons completed, scores and streaks. If notifications are enabled we store a device push token. Messages sent to Rawi, the in-app study companion, are stored with the learner's profile. Payments are handled entirely by Stripe; we never see or store card details. We do not collect addresses, children's email addresses, or photos.

Data is used to run and personalise the service: keeping progress, matching content to a learner's age and level, and generating recommendations, weekly summaries and Rawi's answers. Some of this processing uses artificial intelligence services provided by Amazon Web Services; learner messages and reading activity are processed only to produce those features, and are not used to train AI models. We never sell personal data and never share it with third parties for their marketing.

With user consent, we may send promotional materials and newsletters. Users can opt out at any time by following the instructions in our emails or contacting support.

Bookworm is built for families, including children from age 5, and children's data is handled with particular care. Only the account holder can create a learner profile, after an explicit age-consent step. Children sign in with a username and password chosen by the parent and never need an email address. We hold no more child data than the service needs: age, username, and learning progress. Parent-only areas are protected by a PIN, and a parent can view, correct or permanently erase a child's profile at any time; erasure is immediate.

Under GDPR, users have the right to access, correct, delete, and restrict processing of their personal data. Users can request data deletion or account removal at any time.

We implement strict security measures, including encryption and secure data storage, to protect user data from unauthorised access, alteration, or destruction.

Cookies are used to store user preferences and enhance the browsing experience. They do not transfer personal data to third parties. Users can disable cookies in their browser settings.

Account data is kept while the account is in use. If you delete your account, it is paused immediately: learner logins are removed and billing stops, and everything is permanently erased after six months unless you return, in which case the account restores exactly as it was. Deleting an individual learner profile erases that learner's data immediately and permanently. Accounts left inactive for an extended period are permanently removed. Card details are processed by Stripe and are never stored by us.

Our lawful bases under UK GDPR are: performance of a contract, for running the service and any subscription; consent, for marketing emails, push notifications, and the creation of children's profiles through the parental consent step; and legitimate interests, for keeping the service secure and improving it. Consent can be withdrawn at any time without affecting the service itself.

While our operations are primarily based in the UK, any data transfer outside the EU will be in compliance with GDPR, ensuring adequate levels of protection and security.

We are not responsible for third-party websites linked to our app. Users should review the privacy policies of external websites before sharing personal information.

Bookworm has no public forums, comments or chat between users; Rawi conversations are private to each learner's profile. The one shared surface is the in-app leaderboard, where a learner's username and score are visible to other learners. Usernames are chosen by the parent, so we recommend choosing one that does not reveal a child's real name.

You can exercise your data rights at any time, not on any fixed schedule. Viewing and correcting details, deleting a learner profile, and deleting the whole account are all self-serve, in the app or by signing in at bookworm.app/account, where deletion asks you to type DELETE to confirm. For a copy of your data, or anything you cannot do self-serve, email bookworm@bookworm.app from your account email; we respond within one month.

We are committed to full compliance with GDPR, including managing consent where necessary, ensuring transparency in data usage, and upholding the privacy rights of our users.

We may update this policy periodically to reflect changes in our practices or new regulatory requirements. Users are encouraged to review this policy regularly.

For any inquiries or requests regarding data privacy, users can contact us at bookworm@bookworm.app.

By using The Bookworm App, users acknowledge and agree to the processing of their data in accordance with this policy. Continued use after updates signifies acceptance of the new terms.