This Privacy Policy describes how RexyRead ("we," "our," or "the app") handles information when you use our application. We are committed to your privacy. This policy is written in plain language because you deserve to understand it.
RexyRead does not collect your personal data. We do not have servers that receive your reading or listening activity. We do not sell data. We do not run analytics on how you use the app. We do not use your data to train any machine learning or artificial intelligence models. Your library and reading progress stay between you and your own RexyServer. On supported platforms, you can optionally send a bug report from Help & Feedback — the attached diagnostic log contains only app version, device model, and app events, with no personal content, IP addresses, or library information included. You can review the log before sending.
RexyRead collects and stores the following data locally on your device only:
None of this data is transmitted to RexyRead or any third party. It lives on your device and on your own server, and is used only to make the app function.
RexyRead communicates directly between your Apple device and your personal RexyServer over a TLS-encrypted, certificate-pinned connection. Your library content, reading progress, and listening activity are processed entirely between your device and your own server — they do not pass through RexyRead's infrastructure because RexyRead has no infrastructure.
The per-device API key that authorizes RexyRead to connect to your RexyServer is generated by your RexyServer when you pair the device, transmitted once via QR code or manual entry, and then stored securely in your device's Keychain. RexyRead never receives or stores your server's master credentials.
RexyRead is distributed through the Apple App Store and uses Apple services including StoreKit for optional tips, WebKit for the novel reader, and the Apple Keychain for secure credential storage. Your interactions with these services are governed by Apple's own Privacy Policy, available at https://www.apple.com/legal/privacy/.
RexyRead itself does not contact any third-party metadata providers. When metadata is fetched for comics, manga, or novels in your library, those requests are issued by your RexyServer on your own hardware, not by RexyRead.
For metadata sources that require an API key or authentication token (such as ComicVine, Marvel, AniList, MyAnimeList, League of Comic Geeks, or Google Books), you obtain those credentials yourself directly from the respective provider and configure them in your own RexyServer. You are the API consumer in that relationship. You agreed to that provider's terms of service when you obtained the credential, and your use of their API is governed by those terms — not by these privacy or terms documents.
For metadata sources that do not require authentication (such as Open Library, MangaDex, iTunes Search, or Audnexus), your RexyServer makes anonymous requests on your behalf. RexyRead, the client app, does not see, store, or transmit any of these requests or their responses — it receives only the final metadata that your RexyServer has already retrieved and stored locally.
On supported platforms, RexyRead includes an optional bug report feature accessible from Help & Feedback. If you choose to use it, the app composes an email with a diagnostic log attached. This log includes:
The log does not include your IP address, server name, library content, file names, account credentials, or any information that identifies what you read or listen to. You can review the full contents of the attachment before choosing to send the email. Diagnostic data is never collected or transmitted automatically — it is only sent when you explicitly compose and send the bug report email yourself.
RexyRead does not knowingly collect any information from children under the age of 13 (or the applicable minimum age in your jurisdiction). The app is intended for general audiences and requires users to have their own RexyServer, which is not typical for children. If you are a parent or guardian and believe a child has provided information through this app, please contact us and we will take appropriate action.
Because we do not collect or store your data on our servers, there is no central database that can be breached. The data that RexyRead does store — your preferences and pairing credentials — uses Apple's standard security mechanisms including Keychain encryption and app sandboxing. The connection to your RexyServer is encrypted with TLS and the server's certificate fingerprint is pinned, so a man-in-the-middle attacker cannot impersonate your server even on a hostile network. While we take reasonable measures to protect data stored on your device, no method of electronic storage is 100% secure. You are responsible for maintaining the security of your device and your RexyServer.
Since all data is stored locally on your device or on your own server, you have complete control over it at all times. You can:
If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar privacy laws, you have the following rights:
In practice, because RexyRead collects almost no personal data and stores nothing on our servers, most of these rights are satisfied automatically. If you contact us via email, that email address and message content is the only personal data we may hold. You can request deletion at any time by emailing rexyviewapp@gmail.com.
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale or sharing of personal information. Because RexyRead does not collect, sell, or share personal information, these rights are satisfied by default. You can contact us at rexyviewapp@gmail.com to exercise any of these rights.
If we make material changes to this Privacy Policy, we will update the Last Updated date at the top of this document. For significant changes, we will make reasonable efforts to notify users within the app. We encourage you to review this policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, please contact us at rexyviewapp@gmail.com.