Privacy Policy

Account information

When you create an account, we collect your email address, display name, and password (stored as a secure hash). You may optionally provide a date of birth and phone number.

Reading data

We store your reading sessions, book shelves, reviews, highlights, ratings, and reading goals. This data is created by you and belongs to you.

Diagnostics and product analytics

We collect data about how the app performs and how features are used, so we can fix crashes and decide what to build next. This includes crashes and errors, screen views, app open and close events, and device information such as model, operating system version, and language.

These records are linked to a persistent identifier for your installation and to your account, and they include your IP address. They are therefore pseudonymous rather than anonymous. To diagnose crashes we also use a session replay tool that can record a small sample of sessions, and sessions where an error occurred; text and images on screen are masked in those recordings.

We do not use advertising trackers, we do not serve you ads, and we do not track you across other companies’ apps or websites.

• To provide, maintain, and improve the Service
• To personalize your experience (e.g., book recommendations based on your reading history)
• To display your activity to friends you’ve connected with
• To send transactional emails (account verification, password resets)
• To respond to support requests
• To detect and prevent fraud or abuse

We do not sell your personal data. We do not use your data for advertising. We do not share your reading history with third parties for marketing purposes.

Your data is stored on secure, encrypted servers. We use industry-standard security measures including TLS encryption in transit and encryption at rest. Access to production data is restricted to essential personnel only.

We share your data only in these limited circumstances:

• With your consent: Social features (activity feed, friend lists) share data you choose to make visible
• Service providers:We use a small number of third-party services to run Bookish — hosting, email delivery (Resend), error monitoring and session replay (Sentry), and product analytics (PostHog). They process data only on our instructions and are contractually bound to protect it. If you send us feedback from inside the app, that message is handled by Sentry
• International transfers: Our analytics provider stores data in the United States. If you use Bookish from the UK or the European Economic Area, your data is transferred outside your home country. We rely on Standard Contractual Clauses, and the UK International Data Transfer Addendum where it applies, as the legal basis for that transfer
• Book cover images: Covers on our website are loaded directly from Open Library. Your browser contacts them to fetch the image, so they receive your IP address and the page you are viewing
• Legal requirements: We may disclose data if required by law, court order, or to protect the safety of our users

You have the right to:

• Access: Request a copy of all data we hold about you
• Correct: Update or correct your personal information
• Delete: Request deletion of your account. It is disabled immediately and your data is removed within 30 days. You can cancel during that window, which starts again if you make a new request
• Restrict: Limit how we process your data

To exercise any of these rights, contact us at the email below or use the settings in your account.

We keep your account and reading data for as long as your account is active. If you ask us to delete your account, we remove your personal data within 30 days.

Diagnostic and analytics records are kept for a limited period and then deleted automatically: error reports and session replays for 30 days, and product analytics events for 12 months.

Bookish is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or via email. Your continued use after notification constitutes acceptance.

If you have questions about this Privacy Policy or how we handle your data, please contact us at privacy@bookish-app.com.