Last Update: 19/07/26
Welcome to Bookfolks, an application developed and maintained by MICHEL FELIPE DE SENA NASSIF LTDA (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Bookfolks application (“the App”), wherever you are in the world. We act as the data controller for the personal data described in this Policy.
1. Information We Collect
Account Information: When you create an account, we collect your email address and name. Your login credentials are managed through Firebase Authentication. If you sign in with Google or Apple, we receive your name and email address from that provider.
Profile Information: Your username, display name, bio, avatar and banner images, country, language, and profile privacy setting (public or private).
Reading Activity: The books you add, your reading progress and sessions, reading goals, streaks, quests, and league points and rankings.
Community Content: Discussion posts you create (including text and any images you attach), likes, comments, the accounts you follow and that follow you, and any reports or feedback you submit.
Automatically Collected Information: Device type, unique device identifiers, IP address, operating system, device language and country, how you interact with the App, and crash data. We collect only coarse location (derived from your device settings or IP address); we do not collect precise real-time location.
Payment Information: Subscriptions are processed by the Apple App Store or Google Play together with RevenueCat. We receive information about your subscription status, but never your full payment card details.
2. How We Use Your Information (and Legal Bases)
We use your information to:
- Provide and operate the App, sync your data across devices, and manage your account (performance of our contract with you);
- Enable community features such as profiles, posts, likes, comments, and following (performance of our contract);
- Send push notifications, which you can disable at any time in the App settings or your device settings (consent);
- Process subscriptions and verify entitlements (performance of our contract);
- Analyze usage and crashes to improve the App (our legitimate interest in improving our services);
- Keep the community safe, review reports, and enforce our Terms of Use (our legitimate interest and our legal obligations);
- Send important notices and, where permitted, marketing communications (consent or legitimate interest, depending on your region);
- Comply with legal obligations.
3. What Other Users Can See
Bookfolks includes social features. If your profile is set to public, any user can see your username, name, avatar, bio, country, reading streak, number of books finished this year, league tier, follower and following counts, your recent reading activity, and your discussion posts. If your profile is set to private, this information is visible only to followers you approve. Your profile can also be shared through a public link (bookfolks.app/profile/your-username). If you participate in leagues, other league members can see your display name, avatar, country, points, and ranking. Please do not include personal information you do not want others to see in your profile or posts.
4. Third-Party Services
We share data with service providers that help us operate the App. Their privacy policies:
- Google Play Services: https://policies.google.com/privacy
- Firebase (Authentication, Google Analytics for Firebase, Crashlytics, Remote Config): https://firebase.google.com/support/privacy
- OneSignal (push notifications): https://onesignal.com/privacy_policy
- RevenueCat (subscriptions): https://www.revenuecat.com/privacy/
- Meta / Facebook App Events (app analytics; advertiser tracking is disabled): https://www.facebook.com/privacy/policy/
- Google Sign-In: https://policies.google.com/privacy
- Apple Sign-In: https://www.apple.com/legal/privacy/
Your data is stored on our backend infrastructure hosted by cloud providers, and support requests, feedback, and user reports are processed through our internal workflow tools. We may share anonymized or aggregated data with third parties to improve our services. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. International Data Transfers
We operate from Brazil and use service providers located in other countries, including the United States. Your information may therefore be transferred to and processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers, such as standard contractual clauses or the recipient’s participation in recognized adequacy frameworks.
6. Data Retention
We keep your personal data while your account is active and for a reasonable period afterwards where necessary for legal, security, or operational purposes. When your account is deleted, we delete or anonymize your personal data, except where we are required to retain it by law. Anonymized and aggregated data may be retained.
7. Your Privacy Rights
Depending on where you live — including under the EU/UK General Data Protection Regulation (GDPR), the Brazilian General Data Protection Law (LGPD), and the California Consumer Privacy Act (CCPA/CPRA) — you have the right to:
- Access the personal data we hold about you and receive a copy of it (portability);
- Correct inaccurate or incomplete data;
- Delete your data;
- Restrict or object to certain processing;
- Withdraw consent at any time, where processing is based on consent;
- Know the categories of personal information we collect and disclose (California);
- Not be discriminated against for exercising your rights.
To delete your account and data, use “Delete my account” in the App settings or email us at michel.nassif@bookfolks.io. In-app deletion is processed as a request: we will confirm it by email and then delete your account and associated data. For any other request, contact us at michel.nassif@bookfolks.io. You also have the right to lodge a complaint with your data protection authority, such as your local EU supervisory authority, the UK Information Commissioner’s Office (ICO), or the Brazilian National Data Protection Authority (ANPD).
8. Security
We protect your data through physical, electronic, and procedural safeguards. However, no system is entirely secure, and we cannot guarantee absolute protection against breaches.
9. Children’s Privacy
Bookfolks is intended for users aged 16 and older. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has provided us with personal information, contact us at michel.nassif@bookfolks.io and we will delete it.
10. Updates to This Policy
We may update this Privacy Policy periodically. Changes will be posted within the App and the “Last Updated” date will be revised. Where changes are material, we will provide more prominent notice.
Contact Us
For questions, concerns, or to exercise your privacy rights, please contact us at michel.nassif@bookfolks.io.