Privacy Policy for Bibliophile

2.1 Account Information

Bibliophile supports anonymous accounts (no information required) as well as email/password and Google sign-in. Depending on how you sign up, we may collect:

• Email address (for email/password accounts and Google sign-in)
• A display name you choose (optional)
• An avatar image you upload (optional)
• A unique account identifier we generate to associate your data with your account

If you use an anonymous account, no personally identifying information is collected at sign-up; an internal identifier is generated to associate your data with that local account. Anonymous accounts are not eligible for cross-device sync (see Section 4.2).

2.2 Your Library and Activity

When you use the App's features, the following information is stored on your device. If you have an active premium subscription, it is also synced to our servers so it is available across your devices (see Section 4.2):

• Books you add to your library, including title, author, ISBN, cover image URL, page count, and genre metadata
• Reading state (currently reading, completed, wishlist), progress, and start/finish timestamps
• Ratings you give to books
• Custom reading lists you create, including titles and descriptions
• Reading goals and reading-history activity
• App preferences (theme, haptics, notifications, analytics opt-in)
• Conversations you have with the in-app AI "Librarian" (your messages and the responses you receive)
• Books you dismiss or interact with in the "Discover" feed so we can personalize future recommendations

2.3 Subscription and Purchase Information

If you purchase a premium subscription, the purchase is processed by Apple, Google, or our payments partner RevenueCat. We do not see or store your payment card details. We receive and store:

• Whether you have an active premium entitlement
• Subscription metadata such as renewal status, expiration date, and the platform store managing your subscription

2.4 Automatically Collected Information

When you use our App, we may automatically collect certain information about your device and usage patterns, including:

• Device information (model, operating system, app version, language, and a unique installation identifier)
• App usage events such as screens viewed, features used, books added or removed, lists created, and searches performed
• Crash reports, stack traces, and performance data
• IP address and approximate (city/country-level) location derived from it by our service providers

You can opt out of analytics event collection at any time in the App's settings. Crash reports are collected to keep the App stable and cannot currently be disabled separately.

2.5 Information from Third-Party Sources

When you search for a book, the App queries an external book metadata provider (currently Google Books) through our servers, and stores the metadata you choose to add. If you sign in with Google, we receive your email address and basic profile information from Google.

4.1 Local Storage

Your library, lists, preferences, and reading activity are stored locally on your device in the App's database so the App works offline.

4.2 Remote Storage and Sync

Cross-device sync is a premium feature. Your library and related data are stored on our servers and synchronized across your devices only when both of the following are true:

• You are signed in with a non-anonymous account (email/password or Google sign-in)
• You have an active premium subscription

Anonymous accounts and signed-in free accounts do not sync; their library data stays on the device. Simply creating an account or signing in does not upload your library to our servers.

We currently host synced data using PocketBase on infrastructure we operate. Specifically:

• Data is encrypted in transit using TLS between the App and our servers
• Data is stored on servers protected by access controls and standard operational security practices
• If your premium subscription lapses, your data remains on your device and the most recent synced copy remains on our servers until you delete your account
• Deleting your account removes your account record and the data we hold against it from our active systems (see Section 5)

4.3 Data Retention

• Local data: Remains on your device until you sign out, delete the App, or clear its data.
• Server-stored data: Retained for as long as your account is active. When you delete your account, we delete or anonymize your account and library data from our active databases within a reasonable period; residual copies may persist in backups for a limited time before being overwritten.
• Crash and analytics data: Retained by our service providers (Sentry and Mixpanel) according to their standard retention periods.
• Subscription records: Retained as required for tax, accounting, and dispute-resolution purposes.

5.1 Access and Portability

• Request access to your personal data
• Request a copy of your data in a portable format
• Export your reading lists, ratings, and reviews

5.2 Correction and Update

• Update or correct your personal information
• Modify your reading preferences and settings

5.3 Deletion and Right to be Forgotten

• Delete your account from within the App, which removes your account record and associated library data from our active servers
• Request removal of specific information
• Uninstall the App or clear its local data to remove the on-device copy
• Note: Aggregated or anonymized data that no longer identifies you may be retained for analytical purposes, and residual copies may persist in backups for a limited time.

5.4 Data Control

• Opt out of analytics event collection at any time from the App's settings
• Stop sync by cancelling your premium subscription or signing out; existing local data stays on your device, and no new data will be uploaded
• Manage your subscription through the Apple App Store or Google Play subscription settings

6.1 Service Providers

We rely on a small number of trusted third-party service providers to operate the App. Each receives only the information needed for its specific function:

• Mixpanel — product analytics. Receives App usage events, a device identifier, app version, and your account identifier when you have not opted out of analytics.
• Sentry — crash and error reporting. Receives crash stack traces, device and OS information, app version, and, if you submit feedback through a crash dialog, any contact details you choose to provide.
• RevenueCat — subscription management. Receives your account identifier and purchase information from the platform store to verify and manage your subscription. Payment card details are handled directly by Apple or Google and are never received by us or RevenueCat.
• Google (Books API and OAuth) — book metadata and optional sign-in. Book searches are proxied through our servers; if you choose to sign in with Google, Google shares your email and basic profile with us.
• AI providers — when you use the AI Librarian, your messages and limited conversation history are processed by a large-language-model provider through our servers to generate responses. These messages are not used by us to advertise to you.
• Hosting infrastructure — our PocketBase server and supporting infrastructure are hosted with reputable cloud providers subject to their own security and privacy commitments.

6.2 Shared Reading Lists

If you choose to share a reading list, we generate a public link containing a random share token. Anyone with the link can view the contents of that list (the list title, description, and the books in it) without signing in. You can stop sharing a list at any time, which invalidates the link.

6.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Court orders or legal process
• Government requests
• Protection of our rights, property, or safety
• Prevention of fraud or security threats

6.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.