BookwormPT

Privacy Policy

Last updated: October 2, 2026

Introduction

Bookworm ("we", "our", "us") operates the web application (app.bookwormtracker.com), the iOS and Android mobile applications, and this website. This policy explains how we collect, use, and protect your personal information when you use our services.

Data We Collect

Account Data

When you create an account, we collect: email address, display name, profile photo (if available via Google sign-in), language preference, and account creation date. Authentication is handled by Google's Firebase Authentication, including Sign in with Google and Sign in with Apple.

Reading Data

To provide the service, we store: books added to your library (title, author, cover, ISBN), reading progress (current page, status), reading sessions (pages read, date/time), book ratings and notes (up to 5,000 characters per note), and custom reading lists.

Payment Data

If you subscribe to a paid plan (Individual or Family), payment data is processed through third-party providers: Stripe (on the web), Apple's App Store (on iOS) and Google Play Billing (on Android). In-app purchases are managed by RevenueCat, which receives an identifier of your account and the purchase receipts to validate the subscription. We only store subscription status, billing cycle, and reference identifiers. We never have access to your full credit card details.

Advertising Data

For free-tier users, we display ads via Google AdMob in the apps and via Google AdSense on the web version. These services may collect device identifiers and usage data to personalize ads. You can opt out of personalized ads at any time. Paid plan subscribers see no ads.

How We Use Your Data

  • Provide and maintain the reading tracking service
  • Generate statistics and charts about your reading habits
  • Process payments and manage subscriptions
  • Send service-related communications (when necessary)
  • Improve and optimize our services
  • Display relevant ads for free-tier users

Third-Party Services

We use the following third-party services:

  • Firebase Authentication (Google) — user authentication, Sign in with Google and Sign in with Apple
  • Apple — Sign in with Apple and App Store purchases in the iOS app
  • Google Play Billing — in-app purchases on Android
  • RevenueCat — management of subscriptions bought in the apps (account identifier and purchase receipts)
  • Stripe — payment processing for web subscriptions
  • Google AdMob and Google AdSense — ad display in the apps and on the web (free tier only)
  • Google Analytics and Firebase Analytics — service usage metrics
  • Sentry — error monitoring
  • Brevo — transactional emails (welcome, password reset) and user communication
  • Cloudflare R2 — image storage (covers and uploaded photos)
  • Google Books API, Open Library and BrasilAPI (Brazilian ISBN agency records) — book metadata search (covers, authors, ISBN); only the search term is sent

Each third-party service has its own privacy policy. We recommend you review them.

Data Retention & Deletion

We retain your data as long as your account is active. You can request account deletion at any time, which will permanently remove all your personal data, books, notes, reading sessions, and lists. Payment data may be retained as required by legal and tax obligations.

Your Rights

Under the Brazilian General Data Protection Law (LGPD) and similar regulations, you have the right to:

  • Access the personal data we hold about you
  • Correct incomplete or outdated data
  • Request deletion of your personal data
  • Revoke consent for data processing
  • Request data portability (CSV export available on paid plans)
  • Opt out of personalized advertising

Security

We implement technical and organizational measures to protect your data, including: encryption in transit (HTTPS/TLS), secure authentication via Firebase, protection against CSRF and SQL injection, and role-based access controls.

Children's Privacy

Bookworm is intended for people aged 13 or older, and anyone under 18 needs the permission of a legal guardian to use it (see the Terms of Service). Our services are not directed to children under 13 and we do not knowingly collect their data. If we become aware that we have collected data from a child under 13, we will delete that information.

With the Family feature, a guardian creates the family and shares an invite code; the child joins with their own Bookworm account. From then on, that family's parents and co-parents can see the child's reading progress, recent sessions, notes and goals and create goals and rewards for them; whoever created the family is also notified when the child finishes a book or earns an achievement. The child can leave the family at any time. Otherwise, the child's account is handled like any other account, including by the third-party services listed above. We process teenagers' data in their best interest, as required by Article 14 of the LGPD.

Legal guardians can request access to, correction of, or deletion of the data of a minor in their care through the contact email below.

Changes to This Policy

We may update this policy periodically. We will notify you of significant changes through the app or by email. Continued use of the services after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or want to exercise your rights, contact us:

[email protected]