legal

Privacy Policy

Last updated: April 12, 2026

Who We Are

Your Next Read is a book recommendation service operated by Shoshone Point Ventures LLC (“we,” “us,” or “our”). We help readers find their next book through AI-powered recommendations based on their reading history and preferences.

If you have questions about this policy, contact us at: privacy@yournextread.app

What We Collect and Why

Information you give us directly

Your reading history. When you upload a Goodreads CSV export or add books manually, we store the titles, authors, ratings, dates read, and shelves from that data. This is the core of the service — without it, we can't give you personalized recommendations.

Your taste notes. When you fill out a book's taste profile — what you loved, what didn't work, mood tags, pace preferences, personal notes — we store that information. These notes are the most important signal our recommendation engine uses. The richer they are, the better your recommendations get.

Your freeform writing. When you use the AI-assisted note feature or talk to Kyra, your free-form text input is stored. This includes the raw, unedited version of any notes you type about a book, and the full history of your conversation with Kyra. We store this because it contains valuable context about your taste that improves your recommendations over time.

Your email address and name. If you create an account using Google Sign-In, we receive your name and email address from Google. We use your email address to identify your account. We do not send marketing emails without your explicit consent.

Your profile photo. If your Google account has a profile photo, we display it in the app as your account avatar. We do not store it separately — it loads directly from Google.

Information collected automatically

Usage data. We log which pages you visit, which features you use, and basic interaction data (for example, when you click a “buy this book” link). We use this to understand how the app is being used and to improve it.

Affiliate link clicks. When you click a “buy this book” link, we record which book you clicked, which retailer (Bookshop.org or Amazon), and when — so we can track whether a purchase commission was earned. This data is associated with your account if you're signed in, or logged anonymously if you're a guest.

Device and browser information. We collect standard web server logs including your IP address, browser type, and operating system. We use this for security, debugging, and rate limiting.

Cookies. We use a session cookie to keep you signed in. We use a separate cookie to remember whether a guest user has already received their free recommendation set. We do not use advertising cookies or tracking pixels.

Information we do not collect

We do not collect your payment information — book purchases happen on the retailer's website, not ours. We do not collect your location beyond what can be inferred from your IP address. We do not collect data from your device beyond what you explicitly provide.

How We Use Your Information

To provide recommendations. Your reading history, taste notes, freeform writing, and conversation history with Kyra are sent to Anthropic's Claude AI to generate personalized book recommendations and your Reading DNA taste profile. This is the core purpose of the service.

To improve the service. We analyze aggregated, anonymized usage patterns to understand what's working and what isn't. We do not analyze individual users' data for this purpose.

To process affiliate commissions. We track affiliate link clicks to verify commission payments from Bookshop.org and Amazon Associates.

To communicate with you. If you contact us, we use your email to respond. If you opt in to a newsletter or notifications, we use your email for that purpose.

To prevent abuse. We use IP addresses and usage patterns to enforce rate limits on our free features and to detect and prevent misuse.

How We Share Your Information

With Anthropic. Your reading data, taste notes, and conversation history are sent to Anthropic's API to generate recommendations and taste profiles. Anthropic processes this data as a service provider on our behalf. We use Anthropic's standard API, which means your data is subject to Anthropic's data retention and usage policies for API customers.

With Vercel. Our application and database run on Vercel's infrastructure. Your data is stored on Vercel Postgres.

With Google. We use Google Sign-In for authentication and Google Books API to retrieve book metadata and cover images. When you sign in with Google, Google shares your name, email, and profile photo with us under Google's terms. We do not share your data back to Google beyond what is inherent in using their authentication service.

With affiliate partners. When you click a “buy this book” link, you are redirected to Bookshop.org or Amazon with an affiliate tracking tag in the URL. These retailers will know that you arrived from Your Next Read. We do not share your name, email, or reading history with them — only the referral link click.

We do not sell your data. We do not share your personal information with data brokers, advertisers, or any third party for commercial purposes unrelated to providing this service.

Legal requirements. We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers. If Your Next Read is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

Data Retention

Active accounts. We retain your data for as long as your account is active.

Deleted accounts. When you delete your account, we permanently delete your library, taste notes, reading history, Kyra conversation history, taste profile, and recommendation history within 30 days. We may retain anonymized, aggregated data that cannot be linked back to you.

Guest data. Guest recommendation results and email captures are retained for 90 days, then deleted. Guest affiliate click logs are retained for 12 months for commission tracking purposes.

Conversation history. Your full conversation history with Kyra is stored indefinitely as part of your account. You can clear your Kyra conversation history at any time from within the app. Clearing your history is permanent and cannot be undone.

Your Rights and Choices

Access your data. You can view your library, taste notes, taste profile, and Kyra conversation history within the app at any time.

Export your data. You can export your library as a CSV file from your account settings.

Delete your data. You can delete individual books, clear your Kyra conversation history, or delete your entire account from account settings. Account deletion is permanent.

Correct your data. You can edit any book's taste profile, your notes, or your account information directly in the app.

Opt out of communications. If we send you emails, each email will include an unsubscribe link.

California residents. If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at privacy@yournextread.app.

European residents. If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, correct, delete, and port your personal data, and the right to object to or restrict processing. Our legal basis for processing your data is the performance of our contract with you (providing the service) and our legitimate interests in improving the service. To exercise your rights, contact us at privacy@yournextread.app.

Security

We store your data in Vercel Postgres, a managed cloud database with encryption at rest and in transit. Access to the database is restricted to authenticated application code — no human has routine access to your individual reading data. We use industry-standard HTTPS for all data transmission.

No method of transmission or storage is 100% secure. If we become aware of a security breach that affects your personal data, we will notify you as required by applicable law.

Children

This service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you by updating the “Last updated” date at the top of this page and, for material changes, by sending a notification to your registered email address or displaying a notice in the app. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

Contact

Questions, concerns, or requests regarding your privacy: privacy@yournextread.app