Privacy policy
Bookties is operated by Appsibly, Czech Republic. This policy covers the website at bookties.app and the Bookties Android app. Questions or requests: hello@bookties.app.
What we store
- Account. When you sign in with Google or Apple we receive and store your email address, display name and avatar URL. We never receive your password.
- What you put in. Books on your shelf, reading progress, notes, replies, reactions, and who you share a book with.
- Sessions. A signed session cookie on the web, and on Android a device record (device name, platform, app version, last-used time) so you can see and revoke your signed-in devices.
- Traffic. Standard server logs (IP address, request, user agent) retained short-term for security and debugging, plus Cloudflare Web Analytics, which is cookieless and does not fingerprint or track individuals.
Why
To run the service you asked for: signing you in, storing your library and notes, unlocking friends' notes at the right chapter, and keeping the service secure. That is contract performance and, for the security parts, our legitimate interest. We do not profile you and we do not sell data.
Who else touches it
- Oracle Cloud - hosting (servers in the EU).
- Google / Apple - only for the sign-in you choose.
- Open Library and Hardcover - queried for book metadata and covers. They receive the search terms and book identifiers needed to answer, never your notes or account.
- Cloudflare - cookieless traffic analytics.
Who can see your notes
Only you and the people you explicitly share a book with, and only once their reading progress reaches the chapter a note belongs to. The unlock rule is enforced on the server: a note you have not reached is not sent to your device at all.
How long we keep it
Your account data lives as long as your account does. Delete your account and it is removed, along with your books, notes and sessions. Server logs roll over within 30 days. Backups are purged on their own schedule and never restored selectively to bring deleted data back.
Your rights
Under the GDPR you can request access, correction, export, deletion, and restriction of processing, and you can object to processing. Account deletion is available in the app; for anything else write to hello@bookties.app and we will answer within 30 days. You may also complain to the Czech supervisory authority (Úřad pro ochranu osobních údajů).
Cookies
Bookties sets one cookie: the httpOnly session cookie that keeps you signed in. It is strictly necessary and cannot be turned off while you are signed in. There are no advertising or cross-site tracking cookies. If we ever add non-essential tracking, it will be behind an explicit opt-in.
Children
Bookties is not directed at children under 13, and we do not knowingly collect their data.
Changes
Material changes will be announced in the app before they take effect. The date at the top always reflects the current version.