Privacy Policy

Overview

Book Assembly is a personal book tracking application. We are committed to protecting your privacy and being transparent about how we handle your data. This policy explains what information we collect, how we use it, and your rights regarding your data.

Data We Collect

We collect only the data necessary to provide the service:

• Account information: Email address and password (encrypted)
• Book data: Books you add, including titles, authors, ISBNs, covers, genres, ratings, notes, and reading dates
• Wishlist data: Books you want to buy, including priority and notes
• Organisation data: Custom genres and series you create
• Preferences: Display settings and widget configurations

How We Store Your Data

Your data is stored securely using Google Firebase:

• Authentication: Firebase Authentication handles login securely
• Database: Cloud Firestore stores your books and settings
• Image storage: Firebase Storage stores book images you upload
• Location: Data is stored on Google Cloud servers

We also use your browser's local storage to cache data for faster loading and offline access. This cached data never leaves your device and can be cleared at any time from Settings → Preferences.

What We Don't Do

• Privacy-respecting analytics: We use Cloudflare Web Analytics which doesn't use cookies, doesn't track individuals, and doesn't collect personal information
• No advertising: We don't show ads or sell your data to advertisers
• No third-party sharing: Your data is never shared with or sold to third parties
• No profiling: We don't build profiles or analyse your reading habits for commercial purposes

External Services

We use the following external services:

• Cloudflare Web Analytics: Privacy-focused website analytics that measures page views and performance. It does not use cookies, does not track individuals across sites, and does not collect personal information. See Cloudflare's privacy commitment
• Google Books API: For book metadata and cover images when searching or scanning barcodes
• Open Library API: As a fallback for additional book data

Book searches include only the ISBN or search terms you enter, not your personal information.

Your Rights

You have full control over your data:

• Access: View all your data within the app at any time
• Export: Download all your data as a JSON file from Settings → Library → Backup & Restore
• Delete: Permanently delete your account and all associated data from Settings → Profile → Delete Account
• Clear cache: Remove locally stored data from your browser via Settings → Preferences → Clear Local Cache

Data Retention

Your data is retained for as long as you have an account. When you delete your account, all your data is permanently removed from our servers. Local cached data is cleared when you sign out or clear your browser data.

Deleted books: When you delete a book, it moves to a bin where it can be restored for 30 days. After 30 days, deleted books are permanently removed. You can also empty the bin manually from Settings → Bin.

Security

We take security seriously. Your password is never stored in plain text. All data transmission uses HTTPS encryption. Firebase provides enterprise-grade security for authentication and data storage.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Contact

If you have any questions about this privacy policy or how your data is handled, please contact us via the Support page.