legal

Privacy Policy

Last updated: October 16, 2026

Who We Are

Your Next Read is a book recommendation service operated by Shoshone Point Ventures LLC (“we,” “us,” or “our”). We help readers find their next book through AI-powered recommendations based on their reading history and preferences.

If you have questions about this policy, contact us at: hello@yournextread.app

What We Collect and Why

Information you give us directly

Your reading history. When you upload a Goodreads CSV export or add books manually, we store the titles, authors, ratings, dates read, and shelves from that data. This is the core of the service — without it, we can't give you personalized recommendations.

Your taste notes. When you fill out a book's taste profile — what you loved, what didn't work, mood tags, pace preferences, personal notes — we store that information. These notes are the most important signal our recommendation engine uses. The richer they are, the better your recommendations get.

Your freeform writing. When you use the AI-assisted note feature or talk to Kyra, your free-form text input is stored. This includes the raw, unedited version of any notes you type about a book, and the full history of your conversation with Kyra. We store this because it contains valuable context about your taste that improves your recommendations over time.

Your email address and name. If you create an account using Google Sign-In, we receive your name and email address from Google. We use your email address to identify your account. We do not send marketing emails without your explicit consent.

Your profile photo. If your Google account has a profile photo, we display it in the app as your account avatar. We do not store it separately — it loads directly from Google.

Information collected automatically

Usage data. We log which pages you visit, which features you use, and basic interaction data (for example, when you click a “buy this book” link). Page records name the kind of page, not its address: “a book page”, not which book or whose profile. Each record carries a random identifier for your browser or app install and one for your current visit, the app version, and whether you used the website or the iOS app. We use this to understand how the app is being used and to improve it.

Feedback you give. If you rate a Kyra reply (thumbs up or down) or tell us why you're deleting your account, we record that choice to improve the app.

Emails we send. Links to our site in our emails pass through a redirect on yournextread.app that records the click, so we can see which emails are useful. Our email provider tells us whether each email was delivered or bounced. We do not track whether you open an email.

Affiliate link clicks. When you click a “buy this book” link, we record which book you clicked, which retailer (Bookshop.org or Amazon), and when — so we can track whether a purchase commission was earned. This data is associated with your account if you're signed in, or logged anonymously if you're a guest.

Device and browser information. We collect standard web server logs including your IP address, browser type, and operating system. We use this for security, debugging, and rate limiting.

Cookies. We use a session cookie to keep you signed in. We use a separate cookie to remember whether a guest user has already received their free recommendation set. A device cookie holds a random identifier for your browser or app install, for up to 400 days, so that usage from the same device is counted together, including before and after you sign in; it contains nothing about you and is never shared. We do not use advertising cookies or tracking pixels.

How you found us. When you first visit, we note the website that sent you (its domain only, not the full address) and any campaign tags on the link, such as a friend's share link. We store this in a first-party cookie and, if you create an account, save it with your account so we can see which channels bring readers to Your Next Read. It is never shared or used for advertising.

Information we do not collect

We do not collect your payment information — book purchases happen on the retailer's website, not ours. We do not collect your location beyond what can be inferred from your IP address. We do not collect data from your device beyond what you explicitly provide.

How We Use Your Information

To provide recommendations. Your reading history, taste notes, freeform writing, and conversation history with Kyra are sent to Anthropic's Claude AI to generate personalized book recommendations and your Reading DNA taste profile. This is the core purpose of the service.

To improve the service. We analyze aggregated, anonymized usage patterns to understand what's working and what isn't. We do not analyze individual users' data for this purpose.

To test improvements. Sometimes we show different versions of a feature to different devices and compare, in aggregate, which works better. Which version you see is decided from your device's random identifier; we record that you saw it as usage data.

To process affiliate commissions. We track affiliate link clicks to verify commission payments from Bookshop.org and Amazon Associates.

To communicate with you. If you contact us, we use your email to respond. If you opt in to a newsletter or notifications, we use your email for that purpose.

To prevent abuse. We use IP addresses and usage patterns to enforce rate limits on our free features and to detect and prevent misuse.

How We Share Your Information

With Anthropic. Your reading data, taste notes, and conversation history are sent to Anthropic's API to generate recommendations and taste profiles. Anthropic processes this data as a service provider on our behalf. We use Anthropic's standard API, which means your data is subject to Anthropic's data retention and usage policies for API customers.

With Vercel. Our application and database run on Vercel's infrastructure. Your data is stored on Vercel Postgres.

With Google. We use Google Sign-In for authentication and Google Books API to retrieve book metadata and cover images. When you sign in with Google, Google shares your name, email, and profile photo with us under Google's terms. We do not share your data back to Google beyond what is inherent in using their authentication service.

With affiliate partners. When you click a “buy this book” link, you are redirected to Bookshop.org or Amazon with an affiliate tracking tag in the URL. These retailers will know that you arrived from Your Next Read. We do not share your name, email, or reading history with them — only the referral link click.

We do not sell your data. We do not share your personal information with data brokers, advertisers, or any third party for commercial purposes unrelated to providing this service.

Legal requirements. We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers. If Your Next Read is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

Data Retention

Active accounts. We retain your data for as long as your account is active.

Deleted accounts. When you delete your account, we permanently delete your library, taste notes, reading history, Kyra conversation history, taste profile, and recommendation history within 30 days. Records of how the app was used (pages viewed, features used, steps toward a purchase) are anonymized at the moment you delete your account: the link to your account is removed and your device identifier is replaced with a random one used nowhere else, so they can no longer be linked back to you. We keep those anonymized records, and aggregated statistics, to understand how readers use the app.

Guest data. Guest recommendation results and email captures are retained for 90 days, then deleted. Guest affiliate click and purchase-funnel logs are retained for 12 months for commission tracking purposes. If you visit without ever creating an account, the record of how you found us is deleted after 13 months.

Service logs. Records of requests to our AI provider include the text sent to it; that text, and the email address attached to the record, are erased after 30 days, and the rest of the record (which feature, how long it took, how much it cost) is deleted after 13 months. Logs of the book searches Kyra runs on your behalf are deleted after 30 days. Book searches you type are kept as usage data; their text is erased after 90 days.

Conversation history. Your full conversation history with Kyra is stored indefinitely as part of your account. You can clear your Kyra conversation history at any time from within the app. Clearing your history is permanent and cannot be undone.

Your Rights and Choices

Access your data. You can view your library, taste notes, taste profile, and Kyra conversation history within the app at any time.

Export your data. You can export your library as a CSV file from your account settings.

Delete your data. You can delete individual books, clear your Kyra conversation history, or delete your entire account from account settings. Account deletion is permanent.

Correct your data. You can edit any book's taste profile, your notes, or your account information directly in the app.

Opt out of communications. If we send you emails, each email will include an unsubscribe link.

California residents. If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at hello@yournextread.app.

European residents. If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, correct, delete, and port your personal data, and the right to object to or restrict processing. Our legal basis for processing your data is the performance of our contract with you (providing the service) and our legitimate interests in improving the service. To exercise your rights, contact us at hello@yournextread.app.

Security

We store your data in Vercel Postgres, a managed cloud database with encryption at rest and in transit. Access to the database is restricted to authenticated application code — no human has routine access to your individual reading data. We use industry-standard HTTPS for all data transmission.

No method of transmission or storage is 100% secure. If we become aware of a security breach that affects your personal data, we will notify you as required by applicable law.

Children

This service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you by updating the “Last updated” date at the top of this page and, for material changes, by sending a notification to your registered email address or displaying a notice in the app. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

Contact

Questions, concerns, or requests regarding your privacy: hello@yournextread.app