Politique de confidentialité

The short version

Your books, reading log, notes and lists are private and stay on your device unless you sign in, which syncs them to your account so they follow you. Anything you post in the community is public (or visible to your club). We don’t sell your data or show ads.

What we keep

Account: your email address, used only to send sign-in codes. It’s never shown to anyone.

Your age: the birth month and year (and country) you give once, on the age screen, to set up Spinebloom for your age. It’s private: never shown on a profile, and it can’t be changed in the app.

Your age range from the app store (iPhone and Android apps only): Apple or Google may tell the app an age range, such as 13 to 15, never your birthday. It’s used on your device only, to set up Spinebloom for your age, and is never saved or sent to us.

Your reading data (synced when signed in): book lists, reading progress, sessions, goals, quotes, notes, your reading journal and app settings.

Reading reminders, only if you turn them on: your browser’s push address, the reminder time, your time zone and days, and when the last one went. Nothing about your reading. Turning reminders off deletes it.

Community: your profile (username, optional display name, photo, bio, genres), posts, reviews, ratings, comments, likes, saves, follows, blocks, club memberships, reports you make, and notifications.

Optional sharing: reading stats and finished books on your profile only if you turn them on, at the privacy level you choose.

Content settings, including whether you turned on mature content (adults only).

Safety records: reports, moderation actions and suspensions.

Feedback you send from the menu, and, if you leave the box ticked, your app version, device type, browser and screen size. Only moderators read it. It’s deleted with your account.

Anonymous counts, only if you say yes (we ask once; change it any time in Settings → Privacy). We keep tallies by day, never linked to you: how many times each screen is opened (once a day each), images and videos made and shared (by style), daily puzzles played and won, Cozy Bookshop levels reached, puzzle results shared, books finished (not which), imports by kind (Goodreads, StoryGraph, Libby or another CSV file; never what was in them), how many devices use Spinebloom each day, and how many came back the next day, in week 2 and after a month, by the week they started. No account, no device id, no IP address, no book titles and nothing you type. Kids mode counts nothing, and teens aren’t asked. Kept for 400 days. If you answer the month’s question in What’s New, we count how many picked each answer, never who.

The monthly question in What’s New, if you answer it: only how many picked each answer.

Error reports: when something breaks, the error message (with any email address removed), where in the app it happened, the app version and the browser’s name. Nothing about you. Kept for 30 days.

Who helps us run Spinebloom

Supabase: database, sign-in and file storage (profile photos).

Resend: sends sign-in code emails.

Your browser’s push service (Google, Apple, Mozilla or Microsoft, depending on your browser): delivers reading reminders, if you turn them on.

OpenAI: checks the text of posts, comments and book clubs (name, description and rules) for harassment, hate, threats and similar, to keep the community safe. OpenAI’s API terms say they don’t use this data to train models and keep it for up to 30 days for abuse monitoring.

Your browser’s speech service (Apple or Google, depending on your device): turns your voice into text, only when you tap the mic in a message box. We never get the recording, only the words you send. Read Aloud uses your device’s own voices.

Google Cloud Vision: reads the text in a page photo, only when you use “copy text from a page photo”.

Google (MediaPipe models): the first time you cut yourself or an object out of a photo, your device downloads the model that does it from Google’s servers. The photo itself stays on your device.

Open Library: book search, covers and ratings. We send it what you search for, not who you are.

Cloudflare Turnstile: a bot check when you create share links or polls.

Links to Bookshop.org and other sites take you to them, under their own privacy policies.

What’s public

Your profile, posts, reviews, ratings, comments and public club activity. Posts in approval-only and private clubs are visible to members only. Reading progress in clubs is private; others only see totals.

Your choices

Edit or delete any post or comment, and change your profile and privacy settings, at any time.

Delete your account in the account menu: this permanently deletes your account and everything stored with it (clubs you run pass to another member).

Signed out, everything stays on your device only.

Download a copy of your data in Settings → Your data, or ask us at [email protected].

To delete your account without the app, see Delete Your Account (Menu → Help & Support).

Children and teens

Accounts are for people aged 13 and over. Younger readers can use Spinebloom on their device in kids mode, with no account: nothing about them is sent to us, there’s no community, and links to other websites, sharing and purchases ask a grown-up first.

If we learn that an account belongs to someone under 13, its community profile and posts are removed at once, and the account is deleted after 14 days.

Readers aged 13 to 17 can use the whole community. New teen profiles keep who they follow private to start with, and teens aren’t suggested to adults as reading buddies.

Mature (18+) content is only shown to signed-in adults who turn it on.

Contact

Spinebloom LLC, 502 W 7th St, Ste 100, Erie, PA 16502, USA · [email protected]