Booky Booky Nar Nar
Booky Booky Nar Nar ("Booky", "the app", "we") is a reading tracker. This policy explains what we collect, why, and what control you have.
We built Booky because reading apps had become advertising businesses. So the short version: we show no ads, we run no analytics or tracking SDKs, and we do not sell or share your data with data brokers. The details below are the long version of that sentence.
Contact: matthew@boughanlabs.com
Data controller: Matthew Boughan, an individual developer trading
as Boughan Labs, United States
When you create an account we store your email address and a display name. Passwords are handled by Google Firebase Authentication and are never visible to us.
Everything you record in the app, stored under your account:
Reviews are private by default. A review you write is visible only to you unless you explicitly publish it on that book's page.
If you publish one, the following becomes visible to other signed-in Booky users: your public handle, the review text, your rating, and the date. Your email address and display name are never shown publicly — the handle exists specifically so that publishing a review does not reveal the name you signed up with.
You can unpublish a review at any time. Unpublishing deletes the public copy; your private review text is unaffected.
If you report a review, we store which review you reported, the reason, and your account ID, so that the same review is not reported twice by one person and so we can act on reports. If you block another reader, we store that block on your account. Blocked users are not notified.
If you subscribe to Booky Plus, Apple processes the payment. We never receive or store your card number, billing address, or any payment credential.
We use RevenueCat to tell us whether your subscription is active. RevenueCat receives your Booky account identifier and your subscription status and history.
To be explicit, Booky contains no advertising SDKs, no analytics or product-measurement SDKs, no crash-reporting SDKs, and no social network SDKs. We do not build advertising profiles, we do not track you across other apps or websites, and we do not sell personal information or share it for cross-context behavioural advertising as those terms are used in California law.
We use your information only to:
We do not use your reading data for advertising or profiling, and we do not use it to train machine learning models.
We use a small number of service providers who process data on our behalf. We do not share your data with anyone else.
| Provider | What they receive | Why |
|---|---|---|
| Google (Firebase) | Account details and all reading data | Authentication and database hosting |
| Google Books API | Your search terms and IP address | Looking up book details and covers |
| RevenueCat | Account identifier, subscription status | Managing subscriptions |
| Apple | Purchase and billing information | Processing payments and subscriptions |
Book searches are sent to the Google Books API to fetch titles, covers, and descriptions. Google receives the search text and your IP address, and handles it under its own privacy policy.
We may also disclose information if legally required to do so, or to protect the rights and safety of our users.
We keep your data for as long as your account exists.
You can delete your account at any time from Profile → Account Settings → Delete Account. Deleting your account permanently removes:
Deletion is immediate and cannot be undone. Backups held by our hosting provider may persist for a short period before being overwritten.
Reports you have filed against other reviews are retained without your account record, so that moderation decisions remain reviewable.
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to lodge a complaint with your data protection authority.
Most of these are available directly in the app: your data is visible and editable throughout, and account deletion is immediate and complete. For anything else — including a copy of your data in portable form — contact us at the address above and we will respond within 30 days.
If you are in the European Economic Area or the United Kingdom, our lawful basis for processing is performance of a contract (providing the app you signed up for) and, for optional features such as reminders and publishing reviews, your consent, which you may withdraw at any time.
If you are a California resident, you have the rights described under the CCPA and CPRA. We do not sell personal information or share it for cross-context behavioural advertising, and we do not discriminate against users who exercise their rights.
Our service providers store and process data in the United States and other countries. Where personal data is transferred out of the EEA or the UK, it is covered by the standard contractual clauses or an equivalent safeguard offered by the provider concerned.
Booky is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.
Data is transmitted over encrypted connections and stored by Google Firebase with access restricted to your own account by server-side security rules. Passwords are hashed and managed by Firebase Authentication; we never see them.
No system is perfectly secure, but we do not retain anything we do not need, and we have deliberately kept the amount of personal data in Booky small.
If we change this policy we will update the date at the top and, for significant changes, notify you in the app before they take effect.
Questions, requests, or complaints: matthew@boughanlabs.com
We aim to respond within 30 days.