← Back to site
Legal

Privacy Policy

Effective date: March 14, 2026  ·  Contact: privacy@marshmallowreading.com

Contents

  1. Who we are
  2. What we collect
  3. How we use it
  4. Bitcoin rewards
  5. Third-party services
  6. Children's privacy
  7. Your rights
  8. Data retention
  9. Security
  10. Changes
  11. Contact

1 Who we are

Marshmallow Reading operates the Marshmallow Reading website and Android application — a children's reading platform that rewards kids with bitcoin for logging books and audiobooks. The parent or guardian who creates an account is the account holder. Children do not create accounts and do not directly provide personal information to us.

2 What we collect

Information you provide

Information collected automatically

What we do not collect

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3 How we use it

4 Bitcoin rewards

Reading rewards are denominated in US dollars and fulfilled in bitcoin (satoshis) at the prevailing market rate at the time of payout. The number of satoshis you receive will vary with the bitcoin price. We use a live market price feed to calculate the sat equivalent at payout time.

Marshmallow Reading is not a financial institution. Rewards do not constitute investment advice.

5 Third-party services

6 Children's privacy (COPPA & PIPEDA)

The subscribing parent or guardian is the account holder. We do not knowingly collect personal information directly from children under 13 (or under 16 where applicable).

Book logs associated with your account may reflect a child's reading activity, but this information is provided by the parent or guardian and stored under the parent's account. Children do not have separate login credentials and we do not create profiles of children.

If you believe we have inadvertently collected personal information from a child without parental consent, contact us at privacy@marshmallowreading.com and we will delete it promptly.

7 Your rights

Canada (PIPEDA)

You have the right to access the personal information we hold about you and to request correction of inaccurate data. Contact privacy@marshmallowreading.com.

European Union (GDPR)

If you are in the EEA, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. Our legal basis for processing your email is performance of a contract. Contact us to exercise any right or to lodge a complaint with your supervisory authority.

United States (COPPA)

Parents may contact us to review, request deletion of, or refuse further collection of information associated with their account.

8 Data retention

Account information is retained while your subscription is active and for 90 days after cancellation. Server logs are retained for up to 30 days. You may request deletion at any time by emailing privacy@marshmallowreading.com.

9 Security

All data in transit is encrypted via HTTPS. Stripe handles payment card data under PCI-DSS compliance. We do not store passwords — account access is via email. We conduct periodic security reviews of our API and infrastructure.

10 Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email. Continued use of the service after notice constitutes acceptance of the updated policy.

11 Contact

For privacy questions, requests, or complaints:

Marshmallow Reading
privacy@marshmallowreading.com
We aim to respond within 10 business days.