Privacy Policy

Last updated: June 9, 2026

This Privacy Policy explains what information BookStay ("we", "us", "our") collects, how we use it, and the choices you have. We aim to collect as little as we need to run a calm reading community.

1. Information we collect

Account information — your email address and, if you sign in with Google, the basic profile your Google account shares.
Profile & reading data — your display name, handle, bio, avatar, the books in your library, reading status and progress, ratings, reading goals, and the notes/reviews you write.
Usage data — basic technical information such as device/browser type and activity needed to operate and secure the Service.
Payment information — handled by our payment provider (see below). We do not receive or store your full card details.

2. How we use information

To provide and personalize the Service (your library, feed, stats, and notes).
To operate the community features you choose to use (publishing notes, following, comments).
To process subscriptions and prevent fraud and abuse.
To communicate with you about your account and important changes.

3. Service providers we share data with

We use a small number of trusted providers to run BookStay. They process data on our behalf:

Provider	Purpose
Supabase	Authentication, database, file storage, and hosting of your account and reading data.
Paddle (Paddle.com Market Ltd)	Merchant of Record for subscriptions — processes payments, billing, and taxes. See Paddle's privacy notice.
Google	Optional "Sign in with Google" authentication.
Anthropic	When the community is quiet, the text of a public note may be sent to an AI model to generate a short reply from a community persona. Notes are not used to train third-party models.
Vercel	Application hosting and content delivery.

We also fetch public book metadata and cover images from catalogues such as Open Library and Google Books; this does not involve sharing your personal data.

4. Cookies & local storage

We use essential browser storage (such as local storage and authentication cookies) to keep you signed in and remember preferences like your theme. We do not use advertising trackers.

5. Data retention

We keep your information for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain limited records (for example, transaction records kept by our payment provider for legal and tax purposes).

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can edit much of your data directly in the app, or contact us to exercise these rights.

7. International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

8. Children

BookStay is not directed to children under 16 (or the age of digital consent in your country). We do not knowingly collect their personal data.

9. Changes

We may update this policy from time to time. We will update the date above and, where appropriate, notify you within the Service.

10. Contact

For privacy questions or to exercise your rights, contact us at support@bookstay.app.

This document is a general template provided for transparency and is not legal advice. We recommend having a qualified professional review it for your jurisdiction and business.