Privacy Policy

1. Introduction

BookWorm is a personal reading tracker app that helps you log books, track reading progress, build reading streaks, and set daily reading goals. It is available on iOS through the Apple App Store.

This Privacy Policy describes how your information is collected, used, and shared when you use BookWorm. It applies to all users worldwide, regardless of location.

Data Controller: Adam Markocki, based in Poland (European Union), is the Data Controller under GDPR for any personal data processed through BookWorm.

Contact: markockidev@icloud.com

2. Data We Collect and How

2.1 Data Stored Locally Only

Your book library, reading log, streaks, daily goals, profile photo, username, and app preferences are stored on your device. This data syncs to your private iCloud account via Apple CloudKit if you are signed in — it is never sent to the developer or any third-party server. Your profile photo is stored on-device only and explicitly excluded from iCloud backup.

2.2 Anonymous Analytics (PostHog)

The app sends anonymous behavioural events to PostHog's EU Cloud (Frankfurt, Germany). Events describe how you use the app — for example, that a book was added — but never include book titles, usernames, email addresses, or any personally identifiable information. A pseudonymous device-level ID is generated by the PostHog SDK. No identify() call is made.

Legal basis (GDPR): Legitimate interest (Article 6(1)(f)).

2.3 Book Search Queries (Google Books API)

When you search for a book by title, author, or ISBN (including via barcode), the search term is sent over HTTPS to the Google Books API. No user identifiers or personal information are included. The developer does not retain these queries.

2.4 Camera and Barcode Scanning

Camera frames are processed entirely on-device using Apple's AVFoundation. No images or video are stored or transmitted. Only the decoded ISBN is used, sent solely to Google Books for metadata lookup.

2.5 Push Notifications

All notifications are scheduled locally using Apple's UNUserNotificationCenter. No remote push service is used. Notification content is generated on your device and never transmitted anywhere.

2.6 Profile Photo

Your optional profile photo is stored as a JPEG on your device, excluded from iCloud backup, and never transmitted to any server.

3. Third-Party Service Providers

PostHog EU Analytics

PostHog, Inc. — AWS eu-central-1, Frankfurt, Germany. No IP addresses stored. PostHog Privacy Policy · DPA

Apple Inc.

App Store transactions, iCloud CloudKit sync, and local notification delivery. Your CloudKit data is stored under your Apple ID and is inaccessible to the developer. Apple Privacy Policy

Google LLC (Google Books API)

Book metadata queries (ISBN/title). No user identifiers included in any request. Google Privacy Policy

4. Your Rights Under GDPR (EU/EEA Users)

Supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa — uodo.gov.pl

5. Your Rights in Other Jurisdictions

Brazil (LGPD)

You have rights to access, correct, delete, and port your data. Contact: markockidev@icloud.com. Response within 15 days. Supervisory authority: ANPD.

South Korea (PIPA)

Rights to access, correct, delete, suspend processing, and port your data. Contact: markockidev@icloud.com. Supervisory authority: PIPC.

Japan (APPI)

Rights to disclosure, correction, cessation of use or deletion, and cessation of provision to third parties. Contact: markockidev@icloud.com. Supervisory authority: PPC.

India (DPDP Act 2023)

Rights to access, correct, erase, and withdraw consent. Contact: markockidev@icloud.com. Full enforcement expected 2027.

United States

BookWorm does not meet CCPA thresholds. The app does not collect personal information from children under 13 (COPPA compliance). California residents may contact markockidev@icloud.com.

6. Subscriptions and Payments

All payments are processed by Apple. The developer never receives, stores, or processes your payment card information or billing details. Manage or cancel via Settings → [your name] → Subscriptions.

7. Data Retention

8. Security

All local data is stored in iOS device-protected storage. Analytics and book search queries are transmitted over HTTPS/TLS. CloudKit data is encrypted in transit and at rest by Apple. The developer operates no servers — eliminating server-side breach risk for your reading data.

9. Children's Privacy

BookWorm is not directed at children under 13 (US) or 16 (EU). The app includes an age acknowledgment during onboarding. If you believe a child has provided personal information, contact markockidev@icloud.com immediately.

10. Changes to This Policy

Material changes will be communicated via in-app notice or App Store update notes at least 30 days before taking effect. The Effective Date at the top of this page will be updated.

11. Contact

Adam Markocki
Email: markockidev@icloud.com
GDPR requests: within 30 days · LGPD requests: within 15 days