top of page
logo transparent.png
ChatGPT_Image_Jun_3__2026__08_34_41_PM-removebg-preview.png
by

The Reading Lodge

The Reading Lodge

Get App

Privacy

Last updated: 20 July 2026
 

The Reading Lodge respects the privacy of children, families, teachers and schools.


This Privacy Policy explains:

  • what personal information we collect;

  • why we collect it;

  • how it is used and shared;

  • how long it may be retained;

  • the choices and privacy rights available to users; and

  • how to contact us about privacy.


The Reading Lodge is designed so that student profiles are created and managed by authorised adults. Children are not required to create their own accounts.


1. About The Reading Lodge
 

The Reading Lodge is a home-reading application that allows teachers and families to create student reading profiles, record home-reading activity, track progress and celebrate reading milestones.
 

The Reading Lodge is a registered business name operated by The Business. In this Privacy Policy, “The Reading Lodge”, “we”, “us” and “our” refer to The Business trading as The Reading Lodge.


Our principal place of business is in Australia.

​

This Privacy Policy applies to users of The Reading Lodge in the countries where we make the service available, including Australia, New Zealand, the United States, the United Kingdom, Canada and Ireland.


2. Who may use The Reading Lodge
 

Teacher and parent or caregiver accounts are intended for adults.
 

Children should not independently:

  • create a teacher, parent or caregiver account;

  • purchase a subscription;

  • enter adult account information; or

  • provide personal information through an adult account.
     

A child may use child-facing parts of the app under the direction or supervision of an authorised teacher, parent or caregiver.
 

An adult who creates, connects to or manages a student profile must have appropriate authority to do so.
 

3. Information we may collect
 

The information we collect depends on how a person uses The Reading Lodge.
 

Account information
 

We may collect:

  • an email address used to create or access an account;

  • the account holder’s chosen name or display name;

  • account role, such as teacher or parent;

  • subscription status;

  • app access and account settings;

  • authentication identifiers;

  • sign-in method;

  • communications sent to our support team; and

  • information provided through supported authentication services, such as email sign-in, Google Sign-In or Apple Sign-In.


Student information

We may collect:

  • a student’s first name, preferred name or nickname;

  • an optional second initial;

  • the student’s selected Reading Lodge avatar;

  • a randomly generated join code used to connect the student profile with an authorised family account;

  • the teacher or parent account that created or manages the student profile;

  • authorised accounts connected to the student profile;

  • profile status, such as active or archived; and

  • reading progress associated with the student profile.


We recommend that users do not enter a student’s full legal name.


Reading information
 

We may collect:

  • book titles;

  • authors;

  • book cover images;

  • International Standard Book Numbers, or ISBNs;

  • reading dates;

  • pages read;

  • reading duration, where that feature is available;

  • the type or level of reading support provided;

  • enjoyment and confidence ratings;

  • optional comments entered by a parent or caregiver;

  • reading totals;

  • badges;

  • milestones;

  • rewards;

  • avatar items; and

  • related progress information.


Subscription information


We may process:

  • the subscription product selected;

  • subscription status;

  • trial eligibility and trial status;

  • purchase and renewal status;

  • cancellation status;

  • the relevant app-store platform;

  • transaction identifiers;

  • entitlement information; and

  • limited purchase information supplied by Apple, Google or RevenueCat.

We do not receive or store complete payment-card details.


Technical and security information


We and our service providers may process limited technical information needed to operate, secure and troubleshoot the app.


This may include:

  • device type;

  • operating system;

  • app version;

  • general network information;

  • authentication events;

  • error information;

  • diagnostic information;

  • security logs;

  • approximate country or app-store region;

  • technical identifiers; and

  • records of actions required to maintain account and service security.

We do not use this information for third-party behavioural advertising.


4. Information we do not intentionally collect
 

The Reading Lodge does not require students to provide:

  • an email address;

  • a home address;

  • a telephone number;

  • a precise location;

  • a photograph;

  • a date of birth;

  • a school name; or

  • a full legal name.


We do not intentionally collect sensitive information about students, such as:

  • health or medical information;

  • religious or philosophical beliefs;

  • racial or ethnic origin;

  • political opinions;

  • biometric information;

  • sexual orientation; or

  • government identification numbers.


Users should not include this type of information in reading comments, support requests or other text entered into the app.


5. How we use personal information


We may use information collected through The Reading Lodge to:

  • create and maintain teacher, parent and student profiles;

  • authenticate users;

  • connect authorised family accounts with student profiles using join codes;

  • display student reading information to authorised users;

  • record and display reading activity and progress;

  • calculate reading totals;

  • award badges and milestones;

  • unlock app features and avatar items;

  • provide subscription and account access;

  • process subscription entitlements;

  • restore purchases;

  • communicate service-related information;

  • respond to support and privacy requests;

  • diagnose errors and technical problems;

  • prevent misuse, fraud and unauthorised access;

  • maintain the safety, reliability and security of the app;

  • improve the operation and usability of the service;

  • enforce our Terms of Use; and

  • meet legal and regulatory obligations.

We do not use student information to build advertising profiles.
 

6. Children’s information


The Reading Lodge is designed to be managed by teachers, parents and caregivers.
 

Children are not required to create accounts or provide their own contact information.
 

Adults creating or managing a student profile must:

  • have appropriate authority to provide the information;

  • enter only the information reasonably necessary to use The Reading Lodge;

  • avoid entering unnecessary personal or sensitive information;

  • protect student join codes; and

  • use student information only for authorised educational or family reading purposes.

We recommend using a student’s first name, preferred name or nickname and, where needed, a second initial rather than a full legal name.


Student join codes should only be shared with an authorised parent or caregiver. They should not be posted publicly or shared with unauthorised people.


We do not sell children’s personal information.


We do not use children’s personal information for:

  • targeted advertising;

  • third-party behavioural advertising;

  • cross-app advertising tracking; or

  • public student profiles.


Where applicable law requires parental consent or another valid authorisation before a child’s information is collected or used, we will require that consent or authorisation.


Where a school or teacher provides authorisation on behalf of a parent, that authorisation must be legally permitted and must relate to an appropriate educational purpose.


Parents and caregivers may contact us to request access to, correction of or deletion of information associated with their child, subject to verification of their identity and authority.


7. Teachers, schools, parents and caregivers


Teachers and schools


Teachers and schools are responsible for:

  • ensuring they have appropriate authority to create and manage student profiles;

  • complying with applicable school, departmental, district or organisational policies;

  • providing any notices or obtaining any permissions required by their organisation or applicable law;

  • protecting account credentials and student join codes;

  • using student information only for authorised educational purposes;

  • ensuring information entered into the app is accurate and appropriate; and

  • responding appropriately when a student leaves their class or school.


A teacher should not use The Reading Lodge to store information that is not reasonably required for home-reading management.


Parents and caregivers


Parents and caregivers are responsible for:

  • ensuring they are authorised to connect to and manage a student profile;

  • keeping account credentials secure;

  • ensuring comments and other information entered into the app are appropriate;

  • avoiding unnecessary personal or sensitive information; and

  • notifying us if they believe an account or student join code has been compromised.


8. Legal grounds for processing


The legal grounds on which we process personal information depend on the user’s location and the circumstances.


Where the United Kingdom General Data Protection Regulation or European Union General Data Protection Regulation applies, we may process personal information on one or more of the following grounds:


Performance of a contract


We may process information where it is necessary to:

  • create and operate an account;

  • provide the features of The Reading Lodge;

  • manage subscriptions;

  • connect authorised accounts;

  • record reading information; or

  • provide customer support.


Legitimate interests


We may process information where it is necessary for our legitimate interests or those of another person, provided those interests are not overridden by the rights and interests of the person concerned.


These interests may include:

  • operating and improving The Reading Lodge;

  • maintaining service security;

  • preventing fraud and misuse;

  • diagnosing technical problems;

  • protecting our legal rights; and

  • communicating important service information.


When children’s information is involved, we give particular consideration to the child’s interests, rights and reasonable expectations.


Legal obligations


We may process or retain information where necessary to comply with legal, regulatory, taxation, accounting or law-enforcement obligations.


Consent


We may rely on consent where applicable law requires it.


Where we rely on consent, the person who provided the consent may withdraw it, subject to legal and technical limitations. Withdrawal does not make processing that occurred before withdrawal unlawful.


9. How information is shared


We do not sell personal information.


Personal information may be shared in the following limited circumstances.


With authorised users


Student information may be made available to an authorised teacher, parent or caregiver connected to the relevant student profile.


The information visible to each account may depend on:

  • who created the student profile;

  • how the account is connected;

  • the account role; and

  • the permissions and features available within the app.


With service providers


We may share information with service providers that help us:

  • host databases;

  • authenticate users;

  • deliver emails;

  • retrieve book information;

  • process subscriptions;

  • manage app entitlements;

  • secure and maintain the app;

  • diagnose technical problems; or

  • provide app-store services.


These providers may process information only as needed to perform services for us or as otherwise permitted by their own terms and applicable law.


Legal and safety reasons


We may disclose information where:

  • required or permitted by law;

  • required by a court, regulator or lawful government request;

  • necessary to investigate fraud, abuse or security incidents;

  • necessary to protect the safety, rights or security of users, the public or The Reading Lodge; or

  • necessary to establish, exercise or defend legal claims.


Business changes


If The Reading Lodge or its business assets are sold, transferred, reorganised or merged, personal information may be transferred as part of that transaction.

Any recipient would be required to handle the information consistently with applicable privacy law.


10. Third-party services


The Reading Lodge uses third-party services to provide parts of the app.


Supabase


Supabase provides database, account authentication and related hosting services.


Account information, student profiles, authorised account connections and reading information may be stored and processed through Supabase.


RevenueCat

​

RevenueCat helps us manage subscription status, trials, purchases, app entitlements and access to paid features.

​

We provide RevenueCat with a unique app-user identifier corresponding to the user’s Supabase account ID. We do not intentionally provide RevenueCat with the user’s name, email address, student information or reading history.

​

RevenueCat may also receive subscription, transaction and technical information directly from Apple or Google as necessary to manage purchases and app entitlements.

​

RevenueCat does not provide us with complete payment-card details.


Google Books and Open Library


When a user searches for a book or scans an ISBN, the book title, search terms or ISBN may be sent to Google Books or Open Library so matching book information can be returned.


We do not intentionally send a student’s:

  • name;

  • reading comments;

  • reading ratings; or

  • reading history

to these book-information services.


Authentication providers


When a user chooses a third-party sign-in option, such as Google Sign-In or Apple Sign-In, that provider processes information according to its own privacy policy.


We may receive limited account and authentication information needed to sign the user into The Reading Lodge.


Email-delivery providers


We may use an email-delivery provider, including Resend, to send:

  • account verification messages;

  • password-reset messages;

  • security notices;

  • support communications; and

  • other service-related emails.


The provider may process the recipient’s email address and technical delivery information.


Apple App Store and Google Play


Subscription purchases may be processed by Apple or Google.


The relevant app store may process:

  • payment information;

  • purchase history;

  • app-store account information;

  • transaction identifiers;

  • subscription status;

  • country or storefront information; and

  • taxation information.


We do not receive or store complete payment-card details.


Users should review the privacy policies of relevant third-party services for information about their own privacy practices.


11. Camera and barcode scanning


The Reading Lodge may request access to a device camera so a user can scan a book’s ISBN barcode.


Camera access is:

  • optional;

  • used only after permission has been granted; and

  • intended only to support barcode scanning.


The Reading Lodge does not intentionally save or upload photographs or video captured during barcode scanning.


A user may deny or withdraw camera permission through their device settings. Manual book entry may remain available.


12. Data storage and international transfers


The Reading Lodge is operated from Australia.


Our service providers may store or process information in Australia or in other countries.


Information may therefore be transferred to or processed in a country other than the country where the user lives.


The privacy and data-protection laws of those countries may differ from the laws in the user’s country.


Where required by applicable law, we will take reasonable steps to use appropriate safeguards for international transfers. These may include:

  • contractual protections;

  • provider data-protection terms;

  • legally recognised transfer mechanisms;

  • security safeguards; and

  • assessments of the relevant processing arrangements.


The countries used by our service providers may change as their infrastructure and services change.


Users may contact us for further information about the service providers or transfer safeguards relevant to their information.


13. Data security


We use reasonable administrative and technical safeguards designed to protect personal information from:

  • loss;

  • misuse;

  • interference;

  • unauthorised access;

  • unauthorised disclosure;

  • alteration; or

  • destruction.


Measures may include:

  • account authentication;

  • access controls;

  • database security rules;

  • encrypted communications;

  • service monitoring;

  • security logging;

  • controlled administrative access; and

  • security features supplied by our hosting and authentication providers.


No online service, transmission method or electronic storage system can be guaranteed to be completely secure.


Users should:

  • protect their account credentials;

  • avoid sharing passwords;

  • keep student join codes private;

  • use secure devices; and

  • notify us if they believe an account or join code has been compromised.


14. Data retention


We retain personal information only for as long as it is reasonably required for the purposes described in this Privacy Policy.


The period for which information is retained depends on:

  • the type of information;

  • whether an account remains active;

  • whether a student profile remains active or archived;

  • whether the information is connected to another authorised account;

  • security and fraud-prevention requirements;

  • legal, taxation and accounting obligations;

  • dispute-resolution requirements; and

  • backup and system-recovery processes.


Student profiles may be archived by a teacher. Archiving a profile does not necessarily delete it.


Archived information may remain stored until:

  • the relevant account holder deletes it;

  • an authorised deletion request is completed;

  • the information is no longer reasonably required; or

  • it is deleted through our retention processes.


When an account or information is deleted, some copies may remain temporarily in secure backups or logs until those backups or logs are overwritten or no longer required.


We may retain limited records after account deletion where reasonably necessary for:

  • legal compliance;

  • taxation or accounting;

  • security;

  • fraud prevention;

  • dispute resolution;

  • enforcing agreements; or

  • documenting that a deletion request was completed.


Where practical, information retained for these purposes will be restricted or separated from ordinary use.


15. Access, correction, deletion and other privacy rights


Users may update certain information within the app.


Users may also contact us to request:

  • access to personal information;

  • correction of inaccurate information;

  • deletion of personal information;

  • information about how personal information is used or shared; or

  • assistance exercising another applicable privacy right.


We may need to verify:

  • the requester’s identity;

  • the requester’s authority over the relevant account;

  • the requester’s relationship to a child or student profile; and

  • whether another authorised account has rights or responsibilities relating to the information.


We may refuse or limit a request where permitted or required by law, including where fulfilling the request would:

  • disclose another person’s information;

  • interfere with another person’s rights;

  • compromise security;

  • conflict with a legal obligation; or

  • prevent us from establishing, exercising or defending a legal claim.


We will respond within the period required by applicable law.


16. Account deletion


Account holders can request account deletion:

  • through the account settings area of the app; or

  • by contacting us.


Deleting an adult account may affect student profiles, reading records and account connections owned or controlled by that account.


Information connected to another authorised teacher, parent or caregiver account may need to be managed separately.


Before deleting information associated with a student, we may need to determine:

  • who created or owns the student profile;

  • which authorised accounts remain connected;

  • whether the requester has authority to delete it;

  • whether deletion would improperly remove information managed by another authorised account; and

  • whether any information must be retained for legal or security reasons.


17. Analytics, advertising and tracking


The Reading Lodge does not:

  • display third-party advertising;

  • sell personal information;

  • use student information for targeted advertising;

  • use student information for third-party behavioural advertising; or

  • use personal information for cross-app advertising tracking.


We may process limited technical, diagnostic and security information needed to operate and protect the app.


If we introduce analytics, advertising or additional tracking technologies in the future, we will:

  • assess their privacy impact;

  • update this Privacy Policy;

  • update relevant app-store privacy disclosures; and

  • provide any notices, permissions or choices required by law.


18. Regional privacy information


The rights available to a user may depend on where they live.


Nothing in this Privacy Policy is intended to limit a right that cannot lawfully be excluded.


Australia


Users in Australia may have rights under the Privacy Act 1988 and the Australian Privacy Principles where those laws apply.


Users may contact us to:

  • access or correct personal information;

  • make a privacy complaint; or

  • request further information about our privacy practices.


If a user is not satisfied with our response, they may be entitled to contact the Office of the Australian Information Commissioner.


New Zealand


Users in New Zealand may have rights under the Privacy Act 2020.


These may include rights to:

  • request access to personal information;

  • request correction of personal information; and

  • make a complaint about how personal information has been handled.


If a user is not satisfied with our response, they may be entitled to contact the Office of the Privacy Commissioner of New Zealand.


Our privacy contact identified below acts as the contact point for privacy matters relating to New Zealand users.


United States


The Reading Lodge is intended to be managed by adults, including teachers, schools, parents and caregivers.


Children under 13 should not independently create accounts or provide personal information through an adult account.


Where the United States Children’s Online Privacy Protection Act applies, we take steps designed to:

  • provide appropriate notice about our information practices;

  • collect only information reasonably necessary to provide the service;

  • obtain parental consent or other legally permitted authorisation where required;

  • allow an authorised parent to request access to their child’s information;

  • allow an authorised parent to request correction or deletion;

  • protect children’s information using reasonable security measures;

  • retain children’s information only for as long as reasonably necessary; and

  • avoid conditioning participation on the collection of more information than is reasonably necessary.


Where a school provides authorisation in place of a parent, that authorisation must be legally permitted, limited to the educational context and based on appropriate notice of our information practices.


The Reading Lodge does not sell children’s personal information or use it for targeted advertising.


Residents of particular US states may have additional privacy rights. Where such laws apply to us, we will honour those rights.


United Kingdom


Users in the United Kingdom may have rights under the United Kingdom General Data Protection Regulation and the Data Protection Act 2018.


Depending on the circumstances, these may include the right to:

  • be informed about processing;

  • access personal data;

  • correct inaccurate personal data;

  • request deletion;

  • restrict processing;

  • object to certain processing;

  • receive certain information in a portable format;

  • withdraw consent where processing is based on consent; and

  • make a complaint to the Information Commissioner’s Office.


These rights are not absolute and may be subject to lawful exceptions.


Because The Reading Lodge is designed for use in connection with children, we seek to apply privacy-protective settings, data minimisation and child-appropriate safeguards to student information.


Ireland and the European Economic Area


Users in Ireland and other parts of the European Economic Area where we make the service available may have rights under the European Union General Data Protection Regulation.


Depending on the circumstances, these may include the right to:

  • be informed about processing;

  • access personal data;

  • correct inaccurate personal data;

  • request deletion;

  • restrict processing;

  • object to certain processing;

  • receive certain information in a portable format;

  • withdraw consent where processing is based on consent; and

  • make a complaint to a local data-protection supervisory authority.


Users in Ireland may contact the Data Protection Commission.


These rights are not absolute and may be subject to lawful exceptions.


Where children’s personal data is involved, we give particular consideration to:

  • the child’s best interests;

  • data minimisation;

  • clear and age-appropriate information;

  • appropriate adult authority;

  • secure default settings; and

  • limits on commercial use.


Canada


Users in Canada may have rights under applicable federal or provincial privacy law.


Depending on the applicable law, these may include rights to:

  • understand how personal information is collected, used and shared;

  • access personal information;

  • correct inaccurate personal information;

  • withdraw consent, subject to legal or contractual limitations;

  • challenge our compliance with applicable privacy requirements; and

  • make a complaint to an applicable privacy regulator.


We recognise that children may not be able to provide meaningful consent to the same extent as adults. Student profiles must therefore be created and managed by an appropriately authorised adult.


We limit the collection and use of student information to what is reasonably necessary to provide and protect The Reading Lodge.


19. Privacy information for children


Children have privacy rights too.


In simple terms:

  • The Reading Lodge helps record books and reading progress.

  • A teacher, parent or caregiver creates and manages the student profile.

  • Children do not need to give us their email address, address, phone number or photograph.

  • Reading information is shown only to authorised adults connected to the student profile.

  • We do not sell student information.

  • We do not show third-party advertisements.

  • We do not use student information to target advertisements.

  • A parent, caregiver or authorised teacher can ask us questions about a student’s information.

  • A parent or caregiver can ask us to correct or delete information where they have authority to do so.


A child who has a question about their information should speak with a parent, caregiver or teacher, who can contact us.


20. Privacy complaints


A person who believes we have not handled personal information appropriately should contact us using the details below.


The complaint should include enough information for us to understand the concern, but should not include unnecessary student or sensitive information.


We may ask for additional information to:

  • verify identity;

  • confirm authority;

  • locate the relevant account or information; and

  • investigate the complaint.


We will review the complaint and respond within a reasonable period or within any period required by applicable law.


A person may also have the right to complain to the privacy or data-protection regulator in their country.


21. Changes to this Privacy Policy


We may update this Privacy Policy when:

  • The Reading Lodge changes;

  • we introduce or remove features;

  • our service providers change;

  • our data-handling practices change;

  • we enter new countries; or

  • applicable legal or regulatory requirements change.


The updated Privacy Policy will display a new “Last updated” date.


Where a change materially affects how personal information is collected, used or shared, we will provide additional notice where required by law.


22. Questions and privacy requests


Questions, concerns, complaints and requests relating to privacy can be sent to:


Privacy Officer
The Reading Lodge
Operated by The Business
Australia
Email: hello@thereadinglodge.com.au


Please do not include unnecessary student information in an initial email.


We may request additional details after confirming that the appropriate person is making the request.

 

bottom of page