Privacy Policy.

This Privacy Policy explains how Kiel F. Harvey Books LLC (doing business as RockReader.com) collects, uses, and shares information when you use RockReader (“RockReader,” “we,” “us,” or “our”). By using the Service, you agree to this Policy and to our Terms of Service.

1. Who We Are

Kiel F. Harvey Books LLC is an Arizona limited liability company that owns and operates RockReader.com. Contact us at support@rockreader.com for any privacy question.

2. Information We Collect

We collect the following categories of information:

• Account information. Email address, handle (@username), display name, hashed password, profile fields you choose to fill in (bio, home church, hometown, life verse), and optional profile photo.
• Content you create. Journal entries (Scripture references, observations, applications, prayers, and any titles or images you attach), posts you share, comments you leave, reactions you give, groups you create or join, and the people you follow.
• Technical and usage information. Internet protocol (IP) address, browser type and version, device information, time-stamped access logs, and pages or features used. We use this information for security, abuse prevention, and to maintain and improve the Service.
• Authentication and security information. Sign-in timestamps, IP address of sign-in, multi-factor authentication factors you enroll, and password-change events. We may use this for fraud detection and to notify you of suspicious activity.
• Cookies. See Section 6.

We do not knowingly collect information about race, ethnicity, sexual orientation, political opinions, or precise geolocation. We do not collect financial-account data because the Service is currently free.

3. How We Use Information

We use the information we collect to:

• Operate, maintain, and improve the Service.
• Authenticate you and protect your account.
• Show your content to the audiences you choose (private, friends, group, or public).
• Send you transactional emails (account confirmation, password reset, security alerts).
• Respond to your support requests.
• Detect, investigate, and prevent abuse or violations of our Terms.
• Comply with legal obligations.

We do not use your content to train artificial intelligence or machine learning models. We do not sell your personal information. We do not show third-party advertising in the Service.

4. How We Share Information

We share information only as described below:

• With other users, at your direction. When you mark an entry or post as friends-only, group, or public, the audience you select can see it. Anything you keep private remains private.
• With service providers (sub-processors). We use trusted third parties to host, store, and deliver the Service. Each is bound by contractual or platform obligations to protect your information. Our current sub-processors are:
  • Supabase, Inc. — database, authentication, and file storage
  • Vercel Inc. — web application hosting
  • Resend (Cassidoo, Inc.) — transactional email delivery
  • Cloudflare, Inc. — DNS and content delivery
  • Crossway / ESV API — Scripture text rendering (we do not send your personal data, only the verse references you request)
• For legal reasons. We may disclose information if required by law, subpoena, or other valid legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• In a business transfer. If RockReader is acquired or merges with another business, your information may be transferred as part of that transaction. We will notify you and post a notice on the Service before your information becomes subject to a different privacy policy.

5. How Long We Keep Information

We keep your account information and content for as long as your account is active. If you delete your account, we permanently delete your profile, journal entries, posts, and uploads from our active systems within thirty (30) days. We may retain limited information for longer if necessary to comply with legal obligations, resolve disputes, or enforce our Terms. Comments you leave on other users’ posts may persist as attributed to “[deleted user]” so that conversation threads remain coherent.

Aggregated or de-identified data that cannot reasonably be linked to you may be retained and used for analytics.

6. Cookies and Similar Technologies

RockReader uses a small number of strictly necessary cookies, primarily to keep you signed in across pages. These cookies are essential to operate the Service and cannot be disabled without breaking sign-in. We do not use cookies for cross-site tracking, retargeting, or third-party advertising.

Your browser may allow you to refuse or delete cookies through its settings. If you do, you may not be able to sign in to RockReader.

7. Your Choices and Rights

You have the following choices regarding your information:

• Access and download. You can download a complete archive of your account, journal entries (as markdown), posts, comments, follows, group memberships, and reactions from Settings.
• Correction. You can update most profile fields at any time from Settings.
• Deletion. You can delete your account from Settings (Danger zone). This permanently removes the data described in Section 5.
• Email preferences. Transactional emails (account confirmation, password reset, security alerts) cannot be opted out of while you maintain an account, because they are necessary to operate the Service.

8. California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act gives you the following rights regarding personal information we have collected about you in the preceding twelve months:

• The right to know what categories of personal information we have collected, the sources, the purposes, and the categories of recipients.
• The right to request a copy of the specific personal information we have collected about you (you can also self-serve through the data export described above).
• The right to request deletion of your personal information, subject to limited exceptions.
• The right to correct inaccurate personal information.
• The right to limit the use of sensitive personal information.
• The right not to be discriminated against for exercising your rights.

We do not sell or share personal information for cross-context behavioral advertising as defined under California law. To exercise these rights, email support@rockreader.com from the email address associated with your account. We may need to verify your identity before fulfilling certain requests.

9. Children

RockReader is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided personal information to us, please contact support@rockreader.com and we will delete it promptly.

10. Security

We use industry-standard safeguards to protect your information, including:

• Encrypted transport (TLS) for all data in transit.
• At-rest encryption of database records by our infrastructure provider.
• Row-level security enforced at the database layer to prevent cross-user data access.
• Password hashing using industry-standard algorithms (we never store passwords in plain text).
• Optional two-factor authentication.
• Stripping of EXIF and location metadata from uploaded images.
• A Content Security Policy and other browser-level protections.

No system is completely secure. If we learn of a breach affecting your personal information, we will notify you as required by applicable law.

11. Geographic Scope

RockReader is intended for use by residents of the United States. Personal information we collect is processed in the United States. If you access the Service from outside the United States, you do so on your own initiative and consent to your information being processed in the United States, which may have data-protection laws different from those in your jurisdiction.

12. Third-Party Links

The Service may contain links to third-party websites (for example, BibleGateway for non-ESV translation rendering, or external content shared by users). Their privacy practices are governed by their own policies. We are not responsible for the content or privacy practices of third-party sites.

13. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide notice through the Service or by email and update the “Effective” date at the top of this page. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

14. Contact Us

Privacy questions or requests? Email support@rockreader.com or write to:

Kiel F. Harvey Books LLC
Attn: Privacy
2700 S Gilbert Road, Ste 5 #148
Chandler, AZ 85286