The Read

Privacy Policy

The Read (the-read.app)

Effective date: July 22, 2026

This policy explains how Deep Roots Physio LLC, an Idaho limited liability company doing business as The Read ("The Read," "we," "us"), collects, uses, and shares personal information when you use the-read.app (the "Service"). We have written it in plain language on purpose.

The Service is used by two kinds of people: coaches (fitness professionals with accounts) and clients (people who take an assessment through a link their coach sends them). This policy covers both, plus visitors to our website.

1. Information we collect

From coaches:

  • Account information: name, email address, password (stored in hashed form by our authentication provider), profession, and optional profile details like a photo or bio.
  • Billing information: your payments are processed by Stripe. We receive your subscription status and transaction records, but we never see or store your full card number.
  • Usage information: reads generated, plan status, and similar records needed to run your account.

From clients:

  • Name and email address, entered when starting an assessment.
  • Assessment responses: answers to a self-report questionnaire about personality, communication preferences, and motivation. These answers are personal, and we treat them with care, but they are self-reported preferences, not medical records.
  • The reports generated from those responses.

From website visitors:

  • If you use our free sample tool or contact form, we collect what you submit there (such as your name, email, and message).
  • Basic technical information common to all websites, such as IP address and browser type, used for security and to keep the Service working. We use Cloudflare Turnstile to block automated spam.

2. How we use information

We use personal information to: generate assessment reports and deliver them by email to the client and their coach; operate coach accounts, billing, and read allowances; respond to support requests; protect the Service against fraud, spam, and abuse; and comply with legal obligations.

If you give us your email through the free sample tool, we may send you a short series of emails about The Read. Every marketing email includes an unsubscribe link, and unsubscribing stops them. We do not send marketing email to clients who take an assessment; they receive only their report and messages related to it.

3. AI processing

Reports are generated using an AI model provided by Anthropic. To generate a report, we send the assessment responses (with the client's first name and the coach's profession for context) to Anthropic's API. Under Anthropic's commercial API terms, data submitted this way is not used to train their models.

4. Who we share information with

We do not sell personal information, and we do not share it with advertisers. We share it only with the service providers we use to run The Read, and only so they can provide their service to us:

  • Lovable Cloud / Supabase — application hosting, database, file storage, and authentication
  • Anthropic — AI report generation
  • Stripe — payment processing
  • Resend — email delivery
  • Cloudflare — spam protection (Turnstile)

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger, acquisition, or sale of assets (in which case this policy would continue to apply to your information until changed with notice).

5. A note for clients

If you took an assessment through a link from your coach, your information was collected at your coach's direction, and your report was shared with your coach as part of their work with you. Questions about how your coach uses your report should go to your coach. Questions about how The Read stores or handles your data, or requests to access or delete it, can come straight to us at support@the-read.app.

6. Instagram comment automation

We run an automation on our own Instagram account. If you comment a keyword we have set up (for example, a word we ask for in a post) on one of our Instagram posts, Meta sends us a webhook containing your Instagram user ID, your Instagram username, and the text of your comment, along with an identifier for the comment and the post.

We use that information for one purpose only: to send you the single automated direct message you asked for, which normally contains a link, and to keep an internal log of what we sent so we can tell whether the automation worked. We do not add your Instagram information to a marketing list, we do not sell or share it, and we do not use it to build a profile of you. If you later follow the link and give us your email address, that is handled under the rest of this policy.

We send at most one automated direct message per comment. If the same comment is delivered to us twice by Meta, our log prevents a second message. We also apply a cooldown so repeat commenters are not messaged repeatedly, and a daily limit on total automated messages.

We keep the send log (Instagram user ID, username, comment text, what we sent, and whether it succeeded) for up to 12 months, so we can troubleshoot failures and honor the one-message-per-comment rule, and then delete it.

To have this data deleted sooner, email support@the-read.app from any address and include your Instagram username (you can also send the request as a direct message from the Instagram account in question). We will delete your Instagram user ID, username, and comment text from our send log and confirm when it is done. Deleting a comment on Instagram removes it from Instagram, but does not by itself remove it from our log, so please write to us if you want the log entry removed.

7. Data retention

We keep coach account data and reports for as long as the account exists, including when a subscription lapses (lapsed accounts keep read-only access to their reports). If you want your account or specific reports deleted, email support@the-read.app and we will delete them, except for records we need to keep for legal, billing, or security reasons.

8. Security

Data is encrypted in transit, stored with a hosting provider that encrypts data at rest, and protected by access controls so that coaches can only see their own clients' reports. No system is perfectly secure, but we take the sensitivity of assessment data seriously and review our security practices regularly.

9. Your rights

You can ask us to access, correct, or delete your personal information, or to stop sending you marketing email, by writing to support@the-read.app. We will respond to every request, and we honor rights granted by the laws that apply to you (such as the GDPR if you are in the EU/EEA or UK, or state privacy laws if you are in the US). We will never treat you differently for exercising a privacy right.

10. Children

The Service is not directed at children under 13, and we do not knowingly collect information from them. Coaches who assess clients under 18 are required to obtain a parent or guardian's consent first. If you believe a child's information was collected without proper consent, contact us and we will delete it.

11. Where data is processed

We are a US company and our service providers process data in the United States. If you use the Service from outside the US, your information will be transferred to and processed in the US.

12. Cookies

The Service uses cookies and similar storage only for essential purposes: keeping coaches signed in and protecting the site against spam and abuse. We do not use advertising or cross-site tracking cookies.

13. Changes to this policy

If we make material changes, we will notify coaches by email or through the Service before the changes take effect, and we will update the effective date above.

14. Contact

Privacy questions or requests: support@the-read.app

Deep Roots Physio LLC, d/b/a The Read