Privacy policy

Last updated: 7 October 2026

1. Who we are

Read95 ("we", "Read95") is a reading app for learning languages, operated by Soulthread Technologies Oy, Myötätuulenmäki 3B 19, 02330 Espoo, Finland (Business ID 3620812-9, D-U-N-S® 369311376). As controller, we are responsible for the personal data described in this policy under the General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (1050/2018).

Readers in Algeria. Read95 is sold in Algeria by EURL Soulthread Technologies, 13 Lot. Abdelmoumen III, Blida, Algeria (NIF 002609081375045, RC 09/00-0813750B26), which is also our representative there. For readers in Algeria, EURL Soulthread Technologies and Soulthread Technologies Oy are jointly responsible for their data: EURL Soulthread Technologies for the sale and the subscription, Soulthread Technologies Oy for the app and its servers. Either can be reached at the address below, and the processing of these readers' data is also subject to Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data.

This policy covers the Read95 apps for iPhone, iPad and Android, the website read95.com, and the early-tester sign-up on that website. The terms of use (read95.com/terms) set out the rest of our agreement with you.

For any question about your data, write to: contact@read95.com.

2. In short

• We keep what it takes to fit texts to you: your account, the words you know, what you read and the words you look up.
• No advertising and no ad trackers. We do not sell your data.
• We measure visits to read95.com only if you agree, and we do it ourselves, without any outside service. You can change your mind at any time.
• To explain a word, we send it, with its sentence, to the AI services that write the explanation. Your name, email and account number are not sent with it.
• You can export your data or delete your account from Settings, at any time.

3. The data we process

Account. We record:

• your email address;
• your password, stored as a one-way hash and never readable;
• a display name, if you give one;
• your native language, the languages you are learning and the language the app speaks to you in;
• whether your email address is confirmed, and how far you have got through setup.

Your level. Your answers to the calibration at the start: the words you mark as known or unknown, the level you give yourself, and the other languages you know. Then, for each word: whether you know it, how sure we are, how often you have met it and looked it up, and when it is next due for review.

What you read. The texts written for you; which texts and books you open, when, for how long and how far you get; your place in each book; your ratings (too hard, too easy, interest); the answers you write when you finish a book; the works you are watching; your daily goal.

Words you look up. The word or phrase you press, the sentence it appears in, and the explanation shown to you.

Your interests. The subjects and themes you choose, and any interests you describe in your own words.

Subscription. Your plan, its status, its dates, whether you have used a trial, and the history of changes to it; a customer reference at our payment processor. You choose your price region yourself: we do not locate you.

Your card details do not pass through Read95: payment is entered directly with our payment processor.

Daily allowance. The number of texts opened each day, to apply the limit of the free plan.

Emails we send you. Which message, when, and whether it was delivered.

Technical data. Your IP address, used to slow down repeated sign-in attempts and recorded in our server logs; the error reports our servers produce when something fails.

Early testers. If you sign up on read95.com: your email address, your type of phone (iPhone or Android), your native language, the languages you want to learn and your level in each, the language of the page you used, and whether we have invited you. If you accepted measurement (below), also how you first found Read95 and how you came back on the visit you signed up from.

Visits to read95.com. Only if you accept measurement. Until you answer, and if you refuse, we measure nothing, and nothing is written to your browser except your answer.

If you accept, for each page you view:

• the page and its language;
• whether you arrived from another site, and if so that site's name (not the full address of the page you came from);
• the campaign tags in the link you followed (for example utm_source=newsletter), and the advertising link that brought you, if any;
• your type of device (phone, tablet or computer), your timezone and your browser's language;
• a random identifier kept in your browser, which links your visits together;
• an identifier for the current visit, forgotten when you close the tab;
• how you first found Read95 and how you arrived most recently, kept in your browser and sent with your early-tester sign-up if you make one.

Your IP address and the details of your browser are not stored with any of this.

What we do not collect. Your location, contacts, photos, camera, microphone, date of birth or advertising identifier.

4. Why we use them

• To provide the service (performance of our contract with you): creating and securing your account; estimating your level; choosing and writing texts at that level; explaining the words you look up and bringing them back for review; managing your subscription and your daily allowance; the emails your account needs (confirming your address, resetting your password, the end of a trial).
• Legitimate interest: keeping the service secure and preventing abuse; finding and fixing faults; following the cost and quality of the AI services we use; telling you by email about important changes to Read95. You can object to the last of these at any time (§ 9).
• To comply with the law: billing records, and answers to competent authorities.
• Consent: measurement of your visits to read95.com with an identifier, and the attribution of your early-tester sign-up to the way you found us; marketing emails, which we send only if you agree; reading reminders, which you turn on yourself and which your phone asks permission for; the early-tester list. You can withdraw consent at any time, and withdrawing it does not affect what was done before.

Your data is never sold, never used for advertising, and never used to profile you for anyone else. We do not use it to train AI models, and the AI services we use do not train on what we send them.

Automated decisions. Read95 estimates your vocabulary and chooses your texts automatically. That estimate is used for one thing only: what you read next. It has no legal effect on you and nothing of similar weight. You can correct it at any time by rating texts, checking your level again, or starting a language over.

5. Who receives them

• Our technical providers, only as far as their task requires, and bound to confidentiality:
  • hosting of our servers, located in Finland (§ 6);
  • AI services, which write and check the texts and write explanations and translations. They receive the passage being written, the words it should contain, the words you look up with their sentence, and the interests you describe in your own words. They do not receive your name, email address or account number. Part of this work runs on equipment we operate ourselves;
  • a language-analysis service, which identifies the base form of words in a text. It receives text only, with no identifier;
  • our payment processor, which receives your email address, your name if you gave one, and your account reference, and collects your payment details. It acts under its own privacy policy for the payment itself;
  • our email hosting provider, which sends our emails from the European Union (France);
  • an online dictionary, which receives a word, with no identifier.
• Apple and Google, when you download the app from their stores, under their own policies.
• Nobody outside Read95 for measuring visits. The measurement of read95.com is collected and kept on our own servers. We use no outside analytics or advertising service, and we share none of it with advertising platforms.
• The Read95 team, for support and for running the service, each person with access limited to what their role requires.
• The authorities, where the law requires it.

6. Transfers outside your country

Our servers are in Finland, and for now every reader's data is stored there, readers in Algeria included. For readers in Algeria, that transfer follows the conditions of articles 44 and 45 of Law No. 18-07.

We are preparing our server in Algeria. Once readers in Algeria are served from it, their data will be stored and processed in Algeria and will not be transferred outside it. We will update this policy before that change, and tell readers in Algeria about it.

Some of our providers (AI services, the payment processor) may process data outside the European Union. Those transfers rely on an adequacy decision of the European Commission where one exists, or on the standard contractual clauses it has approved. The AI services never receive a name, an email address or an account number.

7. How long we keep them

• Account and learning data: as long as the account exists. Deleting the account erases them (§ 8). Starting a language over erases that language's data.
• Sessions: you stay signed in for up to 30 days without using the app. Confirmation links expire after 48 hours, password reset links after 60 minutes.
• Subscription and payment records: six years after the end of the year they relate to, the period the Finnish Accounting Act sets. After an account is deleted they are kept without your learning data, and hold no more than your account number and the changes to your subscription.
• Records of events received from the payment processor: 90 days, and deleted at once with your account.
• AI usage records (which service, how much text was processed, at what cost; never the text itself): 12 months linked to your account, then kept as cost history with no link to you. Deleting your account removes the link at once.
• Records of emails sent: 12 months, and deleted at once with your account.
• Server logs and delivery records, including IP addresses: 90 days.
• Backups: 30 days. Data you delete disappears from them when they expire.
• Early-tester sign-ups, and how you found us if you agreed to measurement: until six months after the public launch, or sooner if you ask.
• Measurement of visits to read95.com: 13 months, then deleted.
• In your browser: the measurement identifier and how you found us, 13 months from your agreement; your choice itself, 13 months if you accepted and 6 months if you refused. When it runs out, the site asks again. Refusing deletes the identifier and the attribution at once.

8. Deleting your account

From the app: Settings → Delete your account.

Deletion erases your account (email, password, name), all your languages, your vocabulary, your reading history, the words you looked up, your ratings and answers, the texts written for you, and your subscription data, except the records the law requires us to keep (§ 7).

An active subscription is cancelled at the same moment: we delete your customer record at our payment processor, which ends every subscription on it, so you are not charged again. If the payment processor cannot be reached at that moment, your account is not deleted and the app asks you to try again a little later, so that nobody is left being charged for an account that no longer exists.

Deletion is immediate and cannot be undone. We keep the bare fact that an account with this number was deleted, without your email, for 30 days, so that a device still signed in cannot bring it back.

9. Your rights

At any time, you can:

• see and correct your data from the app, or by writing to us;
• receive a copy of it: Settings → Download your data gives you a file with your account, your vocabulary and your reading history, which you can keep or take elsewhere. For a complete copy of everything we hold, write to us;
• have it erased (§ 8);
• ask us to restrict its use;
• object, on grounds relating to your situation, to a use based on our legitimate interest, and object at any time to our emails about changes to Read95, by writing to us;
• withdraw a consent you gave. For measurement on read95.com, that is Cookie settings at the foot of any page.

To exercise these rights, write to contact@read95.com. We answer within one month, and may ask you to write from the email address of your account so that we know the request is yours.

You can also complain to a data protection authority. Ours is the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi). You may also turn to the authority of the country in the European Union where you live or work; in the United Kingdom, to the Information Commissioner's Office; in Algeria, to the Autorité nationale de protection des données à caractère personnel (ANPDP).

10. Security

• All traffic is encrypted (HTTPS).
• Passwords are stored as one-way hashes. Confirmation and reset links are stored the same way and work once.
• A password reset signs you out everywhere.
• Inside Read95, access to reader data is limited by role.

No system is beyond reach. If a breach puts your data at risk, we inform the competent authority and, where the risk to you is high, we inform you, as the law requires.

11. On your device and on the website

In the app. No advertising, no audience measurement, no tracking, no advertising identifier. Your phone keeps your sign-in in its secure storage, along with your reading preferences (typeface, text size, theme), whether reminders are on, and which tips you have already seen. Reading reminders are scheduled on the phone itself and stay off unless you turn them on.

On read95.com. The site sets no cookies in the strict sense. It uses your browser's storage, which the law treats the same way, as follows:

The first time you visit, a panel asks for your agreement, with Accept and Refuse side by side. Until you answer, and if you refuse, nothing is measured. If your browser sends the Global Privacy Control signal, we treat it as a refusal and do not ask. You can change your choice at any time from Cookie settings at the foot of any page.

Everything the site needs, typefaces included, comes from read95.com itself: visiting it makes no request to anyone else. The early-tester form and the measurement send their data to our server and nowhere else.

12. Children

Read95 is intended for people aged 16 and over. The texts come from real works and can contain adult themes and language. If we learn that an account belongs to someone younger, we delete it.

13. Changes

Any important change to this policy is announced by email or in the app before it takes effect. The date at the top shows the latest version.

This policy exists in English and in Arabic. If the two differ, the English version prevails, except for readers in Algeria, for whom the Arabic version prevails.