Privacy Policy

1. Controller (Verantwortlicher)

The controller responsible for processing personal data in connection with this app and website is:

2. What Data We Collect

When you create an account and use Booly, we collect and process the following personal data:

• Account data: email address and display name, provided by you during registration
• Profile data: optional profile picture and favorite genres
• Reading data: books you track, reading progress (current page), notes, voice recordings, and reviews
• Usage data: app interactions, timestamps of progress updates
• Device data (mobile only): advertising ID used by Google AdMob for personalized ads (see section 6)

3. Purpose and Legal Basis

We process your data for the following purposes:

• Providing the service: account management, club features, reading progress — legal basis: contract performance (Art. 6(1)(b) GDPR)
• Sending invitations: emailing club invites on your behalf — legal basis: legitimate interest (Art. 6(1)(f) GDPR)
• Advertising (mobile): displaying ads via Google AdMob — legal basis: consent (Art. 6(1)(a) GDPR) where required

4. Data Storage — Supabase

Your data is stored and processed using Supabase (Supabase Inc., 970 Toa Payoh North, Singapore). We use Supabase for authentication, database storage, and file storage. Supabase acts as a data processor on our behalf under a Data Processing Agreement. Data may be stored on servers in the European Union or United States (with appropriate safeguards under Standard Contractual Clauses).

More information: supabase.com/privacy

5. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, unless we are required by law to retain it longer. Reading progress and notes you have shared with a club will be anonymized upon account deletion.

6. Advertising — Google AdMob (Mobile Only)

The mobile version of Booly uses Google AdMob(Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to display ads. AdMob may collect your device's advertising identifier and usage data to show personalized ads. This does not apply to the web version.

You can opt out of personalized ads on iOS via Settings → Privacy & Security → Apple Advertising, or on Android via Settings → Google → Ads.

More information: policies.google.com/privacy

7. Cookies and Local Storage

The Booly web app uses minimal browser storage (localStorage / session cookies) strictly necessary for authentication and maintaining your session. No tracking cookies or third-party analytics are used on this website.

8. Your Rights (GDPR)

Under the General Data Protection Regulation, you have:

• Right of access (Art. 15 GDPR) — request a copy of your personal data
• Right to rectification (Art. 16 GDPR) — correct inaccurate data
• Right to erasure (Art. 17 GDPR) — request deletion of your data
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR) — object to processing based on legitimate interests
• Right to withdraw consent — at any time, without affecting prior processing

To exercise any of these rights, contact us at contact@booly.app. You also have the right to lodge a complaint with the competent supervisory authority. In Hamburg, that is:

9. Changes to This Policy

We may update this privacy policy from time to time. The current version is always available at booly.app/privacy. We will notify you of significant changes via the app or by email.