Privacy Policy
This policy clearly explains which personal data we process when you visit the Leo - RSVP Reader website, join the waitlist, contact us or use the app once it becomes available. It is based on the EU General Data Protection Regulation (GDPR) and applicable Spanish law.
1. Data controller
Controller: Adrián Romero Verdasco (tax ID 50356394X).
Address: Calle Enrique Granados, 50, 28660 Boadilla del Monte (Madrid), España.
Contact email: adrianromero@ireadwithleo.com.
2. Key information
| Purposes | Managing the waitlist and Leo-related notices, answering enquiries, maintaining the website, and providing, personalising and improving the app when available. |
| Legal bases | Your consent for the waitlist and non-essential analytics; performance of a contract to provide the app; and our legitimate interests in answering enquiries and maintaining security. |
| Recipients | We do not sell data. We use technology providers on our behalf, including Vercel and Brevo and, when the relevant features are enabled, Google Analytics, PostHog, Apple and RevenueCat. |
| Your rights | You may request access, correction, erasure, restriction, objection or portability and withdraw your consent. |
3. Data we process and why
Waitlist. We process your email address, language, sign-up date and consent record, including its date and the version of the wording you accepted. We use it to confirm your registration, notify you when Leo - RSVP Reader launches and send updates directly related to its availability and development. Brevo manages the list and these emails. We do not send third-party advertising, and you may unsubscribe at any time.
Enquiries and support. If you contact us, we process your email and the information in your message to respond and follow up.
Technical operation. We process the minimum technical data needed to serve and secure the website or app and diagnose errors, including providers' usual technical logs.
Local preferences. The website may store preferences such as language or visual theme in your browser. See our Cookie Policy.
Analytics. We may use Google Analytics on the website and PostHog in the app to understand usage and improve the product. Google Analytics will only be enabled after you consent through the cookie notice. PostHog will be enabled with the app and configured according to applicable permissions and options. A tool that has not yet been enabled does not collect data.
The Leo - RSVP Reader app. Books you import (EPUB and PDF), their covers and your reading position will be processed and stored only on your device: we will not upload them to our servers. You will be able to import books from catalogues or libraries compatible with OPDS (Open Publication Distribution System). The connection will be made directly from your device, and we will not store the credentials or books from those libraries on our servers.
Account and statistics. If you create an account, we will store your email, name, optional profile photo and reading statistics, such as words read, minutes, speed and streaks, in our database. We use this data to maintain your profile, preserve your progress and display your statistics on devices where you sign in. Books, covers and reading position are not part of this synchronisation and remain only on each device.
Improvement proposals. If you use the dedicated feature to suggest improvements, we process the proposal text, your account identifier and any technical or contact information you choose to include to review it, consider it for development, group it with similar requests and respond if necessary. Please do not include sensitive data or another person's personal information.
Purchases and subscriptions. App Store purchases will be handled by Apple, including payment and card details. RevenueCat may process a user identifier and purchase and subscription data, but not your card details. Before enabling these features, we will update the app privacy information and App Store disclosure where necessary.
4. Legal bases
The waitlist and associated emails rely on your consent, given by ticking the form checkbox and withdrawable at any time. Non-essential analytics also rely on consent. App accounts, statistics storage and subscriptions will rely on performance of a contract when you use those features. Managing improvement proposals, security, abuse prevention and answering enquiries rely on our legitimate interests in improving and protecting the service and supporting its users, although pre-contract enquiries may be handled to take steps at your request.
5. Retention
We keep waitlist data until you withdraw consent, unsubscribe or the launch process ends. In all cases, inactive contacts will be reviewed and deleted no later than 24 months after the last waitlist-related communication. Support messages are kept while the request is handled and then restricted for applicable statutory periods. Technical logs are kept for each provider's configured security and operational period. Profile and statistics data is kept while your account remains active; after deletion, it is erased or anonymised except where legal retention is required. Identifying data associated with an improvement proposal is deleted or anonymised when no longer needed and no later than 24 months after it is closed; we may retain the idea anonymously to continue improving the product.
6. Providers and international transfers
We do not sell or rent your data. Providers acting on our behalf under the appropriate agreements include Vercel for website hosting and Brevo for the waitlist and emails and, when enabled, Google Analytics for web analytics, PostHog for app analytics and RevenueCat for subscription management. Apple processes App Store purchases under its own terms and privacy policy.
Some providers may process data outside the European Economic Area. Where required, transfers will rely on an adequacy decision, EU Standard Contractual Clauses or another valid safeguard. You may request details by emailing adrianromero@ireadwithleo.com.
7. Your rights
You may exercise your rights of access, correction, erasure, objection, restriction and portability, and withdraw consent, by emailing adrianromero@ireadwithleo.com. Withdrawal does not affect prior lawful processing. Waitlist emails will include an easy unsubscribe option. You may also lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.
8. Children
Leo - RSVP Reader is not directed at children under 14, and we do not knowingly collect their data. Contact us if you believe a child has provided information so we can delete it.
9. Security
We apply reasonable technical and organisational measures to protect your data and review them as the service evolves.
10. Automated decisions
We do not make solely automated decisions that produce legal or similarly significant effects on you.
11. Changes to this policy
We may update this policy to reflect legal, technical or service changes. We will publish the current version and update date. If a change materially affects consent already given, we will request new consent where required.
This policy covers the website, waitlist and planned app features. Mentioning a future tool does not mean it is active: it will process data only once it is actually added to the service.