Privacy Policy — Bookxie

This Privacy Policy explains what data Bookxie ("the app", "we") collects, how we use it, and the third parties involved. Bookxie is intended for users aged 13 and over. We do not knowingly collect data from children under 13.

1. What we collect

Data	Source	Why
Email address, display name, profile photo URL	Google Sign-In	Account identification, sign-in across devices
EPUB files you import	You (uploaded by you)	To display your books across your devices
Reading position, highlights, notes, quotes, reactions	Created by you while reading	To sync your progress and annotations across devices
Vocabulary cards (word, definition, sentence context, your reviews)	Created by you when you tap a word	To power the spaced-repetition review system
Reading time per book per day	Measured by the app while you read	Stats and streak tracking
App preferences (theme, font, reminders schedule)	Set by you in Settings	To restore your settings on every device
Device timezone	Read from the OS at app start	To schedule reading reminders at the correct local time

We do not collect: location, contacts, photos, microphone or camera data, advertising IDs, or any third-party analytics or tracking data.

2. How we use the data

To provide the core functionality of the app (reading, sync, reviews, reminders).
To synchronise your library across devices you sign in to.
To generate vocabulary card enrichment (definitions, examples) when you save a word — see Section 3.
To translate words you tap in the reader — see Section 3.

We do not sell, rent, or share your personal data with advertisers, data brokers, or any third party for marketing purposes.

3. Third-party services

Bookxie uses the following third parties to deliver the service. Each operates under its own privacy policy.

Service	What we send	Purpose
Supabase	All account data, books, reading data, settings	Authentication, database, file storage, real-time sync
Google Sign-In	Standard OAuth profile (email, name, photo URL)	Sign-in
Google Generative AI (Gemini)	The single word you saved + the sentence and paragraph it appeared in + the book/chapter title	Generate definition, examples, and related-word suggestions for vocabulary cards
Google Translate	A word or selected phrase you tap in the reader	In-app translation

We do not send the full text of your books, your reading position, your reviews, or your highlights to any AI service. Only the specific word or phrase you save / tap is sent, plus its immediate sentence/paragraph context for vocabulary enrichment.

4. Data storage and security

Your data is stored in Supabase's managed PostgreSQL and Storage services. Connections to Supabase use TLS. Access to your data is restricted by row-level security policies that scope every row to your own user account.

A complete copy of your library, reading data, and reviews is also kept on each of your devices in a local SQLite database, so the app works offline. This local copy is removed when you uninstall the app.

5. Your rights

Access your data — sign in to the app to view it at any time.
Export your data — open Settings → Account → Export my data inside the app. This produces a JSON file containing your full library, highlights, vocabulary cards, review history, reading sessions, and settings, which you can save anywhere or send to yourself via the system share sheet. (Imported EPUB files are not bundled, but their metadata is — you already have local copies of any books you imported.)
Delete your account — email us at hello@bookxie.com and we will remove your account and all associated data from Supabase within 30 days.

Users in the EU/UK have additional rights under the GDPR (rectification, restriction, portability, objection, lodging a complaint with a supervisory authority). Users in California have rights under the CCPA (know, delete, opt-out of sale — note we do not sell data). Email the contact address above to exercise any of these rights.

6. Data retention

We retain your data for as long as your account exists. When you request deletion, all personal data is removed from our active systems within 30 days, and from backups within 90 days.

7. Children

Bookxie is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided personal data to us, contact us at hello@bookxie.com and we will delete it.

8. Changes to this policy

We may update this policy from time to time. The "Effective" date at the top of this page reflects the latest revision. Material changes will be surfaced inside the app on next launch.

9. Contact

For privacy questions, deletion requests, or data export questions: hello@bookxie.com