1. Who we are
BookLoop ("BookLoop," "we," "us," or "our") provides the BookLoop mobile application and the website bookloop.app (together, the "Service"). We are the data controller for the personal information described in this policy. You can reach us any time at hello@bookloop.app.
2. Information we collect
We collect only what the Service needs to work. In the current version of BookLoop, that is:
- Account information. Your email address, your chosen username, and a securely hashed password (we never store your password in readable form). You may optionally add a display name and an avatar color.
- Reading activity. The books you add to your shelves, your reading progress (chapters or pages), reading sessions, streaks, finished dates, and achievements. This is the heart of the app — it exists so your shelf, streaks, and spoiler locks work.
- User content. Posts, comments, club discussions, book notes, and reactions you create in the app.
- Basic technical information. Standard logs generated when your device talks to our servers (such as IP address, device type, operating system version, timestamps, and error reports). We use these solely to keep the Service secure, diagnose problems, and prevent abuse.
We do not collect your precise location, your contacts, your photos (unless you explicitly attach one), or anything from other apps on your device.
3. How we use your information
- To create and operate your account and sync your shelves, progress, streaks, and clubs across devices.
- To power social features you choose to use — showing your bookshelf room to friends, placing your comments in club threads, and enforcing spoiler locks based on reading position.
- To send essential service emails, such as verification, password resets, and important account or policy notices. We do not send marketing email without your separate consent.
- To keep the Service safe: preventing spam, abuse, and unauthorized access, and enforcing our Terms of Service.
- To understand aggregate, de-identified usage (for example, "how many books were finished this month") so we can improve the app.
4. What we don't do
- We do not sell your personal information. Not to advertisers, not to data brokers, not to anyone. We also do not "share" personal information for cross-context behavioral advertising as defined by the CCPA/CPRA.
- No advertising or tracking SDKs. The current version of BookLoop contains no third-party advertising networks, no cross-app tracking, and no social-media tracking pixels. If that ever changes, we will update this policy and ask for any consent the law requires (including the iOS App Tracking Transparency prompt) before anything new happens.
- No profiling for ads. Your reading life is yours.
5. Who can see what you share
BookLoop is social by invitation, not by broadcast. Your username, bookshelf room, reading activity, and posts are visible to other BookLoop users according to the audience of the space you post in (for example, a club's discussion is visible to that club's members). Your email address is never shown to other users. Please post with the understanding that content shared in clubs is visible to the people in them.
6. Service providers and disclosures
We use a small number of infrastructure providers to run BookLoop, acting on our instructions under contract:
- Microsoft Azure — hosting, databases, and file storage.
- A transactional email provider — solely to deliver the service emails described above.
Beyond these processors, we disclose personal information only if required by law or legal process, to protect the rights and safety of our users or the public, or as part of a merger or acquisition (in which case this policy will continue to apply to your data and we will notify you of any change).
Affiliate links. Book pages in the app may include links to buy books from third-party retailers such as Amazon, Bookshop.org, and Libro.fm. These links carry a referral code that tells the retailer the visit came from BookLoop, and we may earn a commission on qualifying purchases — at no extra cost to you. We do not send retailers your name, email address, or reading history; anything a retailer collects on its own site is governed by that retailer's privacy policy. As an Amazon Associate, BookLoop earns from qualifying purchases.
7. Where your data is stored
Your data is stored on Microsoft Azure servers located in the United States. If you use BookLoop from outside the US (including the EEA, UK, or Switzerland), your information is transferred to and processed in the US. For transfers from the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses implemented by our providers. Data is encrypted in transit (TLS) and at rest.
8. How long we keep it
We keep your information for as long as your account exists. When you delete your account, your profile, shelves, reading activity, and personal details are deleted from our production systems within 30 days, and from encrypted backups within 90 days. Server logs are retained for up to 90 days for security purposes. We may retain content you posted in shared spaces in de-identified form (with your account removed) where it is inseparable from other users' conversations, and minimal records where the law requires it.
9. Deleting your account
You can delete your account at any time, and we make it easy:
- In the app: Settings → Account → Delete account.
- By email: write to hello@bookloop.app from your account email and we will complete the deletion within 30 days.
10. Children
BookLoop is for readers aged 13 and older (or the higher minimum age required in your country, such as 16 in parts of the EEA without parental consent). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us at hello@bookloop.app and we will delete it promptly.
11. Your rights — everyone
Regardless of where you live, you can: access the information in your account, correct it in the app, export your reading data by asking us, and delete your account as described above. We will never discriminate against you for exercising any privacy right.
12. Your rights — GDPR (EEA, UK, Switzerland)
If you are in the EEA, UK, or Switzerland, you have the right to:
- Access the personal data we hold about you and receive a copy;
- Rectify inaccurate data and complete incomplete data;
- Erase your data ("right to be forgotten");
- Restrict or object to certain processing;
- Data portability — receive your data in a structured, machine-readable format;
- Withdraw consent at any time, where processing is based on consent;
- Lodge a complaint with your local supervisory authority.
Our legal bases are: performance of a contract (running your account and the app's core features), legitimate interests (security, abuse prevention, service improvement), consent (optional marketing email, if you opt in), and legal obligation. To exercise any right, email hello@bookloop.app; we respond within one month.
13. Your rights — CCPA/CPRA (California)
If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; and to opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined in the CCPA/CPRA, and we have not done so in the preceding 12 months. We do not use or disclose sensitive personal information for purposes requiring a right to limit. To exercise your rights, email hello@bookloop.app. You may use an authorized agent; we will verify requests using your account email. We will not discriminate against you for exercising your rights.
14. Security
We protect your information with industry-standard measures: TLS encryption in transit, encryption at rest, hashed passwords, least-privilege access controls, and monitoring. No service can promise perfect security, but if a breach ever affects your personal data we will notify you and the relevant authorities as the law requires.
15. Changes to this policy
If we make material changes, we will notify you in the app or by email before they take effect, and update the effective date above. Earlier versions are available on request.
16. Contact us
Questions, requests, or concerns about privacy? Write to hello@bookloop.app — a human reads every message.