Privacy Policy
Bookplate is built so that your reading stays yours.
What we process, and where
- Page photos. When you scan a page, the photo is analyzed on your device to recognize text. The photo is not saved and never leaves your device.
- Recognized text. Used in memory to verify the page and, when comprehension questions are enabled, a bounded excerpt is sent over an encrypted connection to our question service (a Cloudflare Worker), which forwards it to Anthropic's API to generate one question. The excerpt is not stored or logged by our service and is discarded after the question is generated. What remains on your device is only a cryptographic hash (used to detect duplicate pages), a word count, and the result.
- Your library and stats. Books, verified page counts, earned minutes, and streaks are stored on your device.
- Book lookups. Searches and ISBNs are sent to Open Library (openlibrary.org) to find titles and covers.
- Shielded apps. Chosen through Apple's Family Controls; Bookplate receives only opaque tokens and cannot see which apps you selected.
- Rate limiting. A random installation identifier accompanies question requests so we can limit abuse. It is not tied to your identity.
What we don't do
- No accounts. No ads. No third-party trackers. No sale of data.
- We do not store your page text — on our servers or your device.
Anonymous usage analytics
To understand which features are used, the app sends a small set of anonymous usage events (for example “onboarding completed” or “paywall viewed”) to our own server, tagged with a random identifier created on your device. This identifier is not connected to your name, Apple Account, or anything that identifies you, and it is never used for advertising or tracking. It never includes what you read or which apps you shield. No third-party analytics SDKs are involved.
Subscriptions
Purchases are processed by Apple. We receive no payment details. Subscription status and receipt validation are handled by RevenueCat, our subscription infrastructure provider, which receives an anonymous app-generated identifier and purchase information — never your name, email, or anything else about you. See RevenueCat's privacy policy.
Contact
Changes
We'll update this page when the policy changes.