Privacy Policy

Information we collect

• Account information — your name, email address and authentication identifiers. If you sign in with Google or Apple we receive the name, email address and profile picture those providers share.
• Library and marketplace data — the books you add, your shelves, listings, orders, loans, and messages you send through the app.
• Payment information — subscriptions are processed by Stripe (web) and the Apple App Store or Google Play (mobile); payouts to sellers are handled by Stripe Connect. We never store your full card details.
• Device and usage data — basic diagnostics, error reports and security logs used to keep the service reliable.
• Session and preference data — cookies and local storage hold your signed-in session, your theme and your feature preferences.

How we use information

• To provide and operate your library and the marketplace.
• To authenticate you and keep your account secure.
• To process subscriptions, payouts and shipping.
• To send transactional emails (invitations, receipts, account notices).
• To detect abuse and fraud, and to diagnose faults.

Google user data

When you choose Google sign-in we request only the basic OpenID Connect scopes: `openid`, your email address and your profile. That data — your name, email address and profile picture — is used solely to create your account, sign you in, and show your name and avatar inside BiblioSnap.

We do not sell Google user data, we do not use it for advertising or retargeting, and we do not use it to determine credit-worthiness. BiblioSnap's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke our access at any time from your Google account permissions, or delete your BiblioSnap account as described under "Your choices".

Apple sign-in

If you use Sign in with Apple we receive the name and email address you choose to share, which may be an Apple private relay address. We use it only to create and secure your account; email sent to a relay address is forwarded to you by Apple.

Sharing

We share data only with the service providers needed to run BiblioSnap — Supabase (database, authentication, storage), Stripe (payments and seller payouts), RevenueCat (mobile subscriptions), EasyPost (shipping), Resend (transactional email) and Sentry (error monitoring) — and where required by law or to protect the service and its users.

We do not sell your personal information.

Retention and deletion

We retain data while your account is active. You can delete your account from inside the app (Profile → Delete Account); deletion is immediate and removes your personal data, subject to records we must retain for legal, tax or accounting reasons.

Security

We use industry-standard safeguards, including encrypted transport, row-level security in the database, and least-privilege access to production systems. If you believe you have found a security issue, please contact us.

Your choices

• You can update your profile and delete your account from within the app.
• You can revoke Google or Apple access from your account settings with those providers.
• You can ask us for a copy of your data, or ask us to correct it, by emailing us.
• We only send transactional email; we do not run marketing lists.

Children

BiblioSnap is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy. The date at the top of the page shows the current version, and material changes are notified in the app. Continued use after a change means you accept the updated policy.

Contact

Questions about privacy? Email support@bibliosnap.com.