Effective: 26 October 2026 · Data controller: Read & Earn Ltd, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom · Contact: privacy@readandearn.app
We collect what is needed to pay you and to stop fraud, and nothing else is sold. We do not sell personal data, we do not hand your contact details to task customers, and you can delete your account and most of your history from inside the app.
| Category | Data | Why | Legal basis |
|---|---|---|---|
| Account | Email, password hash, country, birth-year flag | Provide the service, enforce 18+ and one-account rules | Contract |
| Payout | Payout handle (e.g. PayPal email), display name on it, payout history | Pay you, meet anti-money-laundering and tax duties | Contract, legal obligation |
| Verification | Only above $500 lifetime payouts: ID document, liveness check | Fraud and AML controls | Legitimate interest, legal obligation |
| Task activity | Responses, completion time, quality score | Pay for accepted work, detect bots | Contract, legitimate interest |
| Device | App version, model, coarse IP-derived region, install identifier | Security, duplicate-account detection | Legitimate interest |
| Support | Messages you send us | Answer and investigate | Legitimate interest |
We do not request contacts, camera roll, precise location, or SMS permissions. If a future feature needs any of those, this page changes first and the app asks again.
Anyone requesting the above while claiming to represent Read & Earn is running a scam. Report it to support@readandearn.app.
Task customers receive responses in aggregate and de-identified form; they never receive your name, email or payout details. Outside that we share only with: our payment processor, fraud-prevention and hosting providers under written data-processing agreements; our professional advisers; and law enforcement where a valid legal demand requires it. This site sets no third-party advertising or analytics trackers.
Account and activity data: for as long as your account is open, then 90 days after deletion. Payout and tax records: 6 years where United Kingdom company and tax law requires it. Verification documents: deleted 30 days after a passed check, except where AML rules require a longer hold, in which case they are encrypted and access-logged.
Data is stored in the European Union (Ireland) and the United States. Where processing moves outside the UK/EEA, we rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses with supplementary technical measures.
Access, rectify, export, object, delete, and withdraw consent. Write to privacy@readandearn.app or use the in-app deletion screen. We answer within 30 days and will not degrade your task access or earnings for exercising a right. California residents may additionally request a disclosure of categories collected under the CPRA.
TLS everywhere, salted password hashing, least-privilege access to production data, audit logging on payout approval, and mandatory 2FA for staff who can move money. If a breach puts your data at risk we notify the UK Information Commissioner's Office and affected members within 72 hours where the law requires it.
This site sets no non-essential cookies. A single session cookie holds your login state inside the app; it expires in 30 days and is not shared with third parties.
Tell us first at privacy@readandearn.app; then escalate to your supervisory authority — in the UK, the Information Commissioner's Office; in the EU, your local Data Protection Authority; in the US, the Federal Trade Commission or your state Attorney General. Suspected impersonation of this service goes to support@readandearn.app.