BooksMy privacy policy

Scope and contact

BooksMy is an iOS app that lets you manage your library and reading records. You don’t need a BooksMy account. This text explains the app’s local data, the external services it uses, and your privacy rights.

Data controller: the developer of the BooksMy app (the person shown as the seller/developer name on the App Store)
Contact: lezzet@gmail.com

What data is processed, and why?

Library and preferences

Book details, lists, notes, quotes, reading progress and sessions, goals, reminders, reading profiles, collection, loan, and series information, and preferences are stored on your device. They are used to show your library and run the features you choose. The app has no developer-operated library server; it does not upload your library content to the developer, sell it, or send it for ad targeting. Exporting and sharing are actions you start; the copy sent to the recipient or app you choose is subject to their terms.

Online search and covers

When you search for a book, your search term or ISBN is sent to Google Books, and when book details or a cover are fetched, the book identifier is sent to Google Books. The search language setting may also be included in the request. Google can see the request’s IP address and, in API requests, the app identifier. BooksMy does not ask you to sign in to a Google account for this. Google’s server records are subject to its own policy; the app cannot determine their retention period. If Google Books doesn’t respond, finds no results, or reaches its daily usage limit, the same search term or ISBN is sent to Open Library (Internet Archive); cover images may be downloaded via covers.openlibrary.org and archive.org. Open Library can also see the request’s IP address and is subject to its own policy. Results of recent online searches are cached only on your device for up to 24 hours. Searching your local library is separate from searching the online catalog. When you import a Goodreads export with cover or book-detail downloads turned on, the ISBNs of the newly imported books are sent to Open Library in the background to fill in covers and details; no other library content is sent.

Camera, photos, and speech

The camera is used to read barcodes, take cover photos, or scan page text. The ISBN is read from the barcode image on your device; if it is looked up in the catalog, the ISBN goes to Google Books and, if needed, to Open Library. Page text is recognized on your device with Apple Vision; the scanned image is not stored by the app, and the text you review and save is kept. A photo you choose or take as a cover may be kept in the book record. Dictation asks for microphone and speech recognition permission. Audio may be sent to Apple’s speech recognition service; processing only on your device is not guaranteed, and this possibility is explained before you begin. BooksMy does not save raw audio to a file; it keeps the text you save.

Notifications and other Apple surfaces

Reading reminders are scheduled on your device when you give permission; no data is sent to a developer notification server for this feature. Widgets and Live Activities may show reading summaries on system screens. A reading summary may be passed to a paired Apple Watch. App Lock uses the result of Apple’s authentication; Face ID or Touch ID biometric data is not given to BooksMy.

Purchases

Pro transactions are handled through Apple’s App Store services. The app processes StoreKit transaction and entitlement information to verify your purchase entitlement; it does not receive card or bank details. Lifetime Pro removes the 10-book total limit in the free add-book flow and the ads. An earlier purchase doesn’t require paying again for the same entitlement; it can be restored with the Apple Account you bought it with.

Support

If you send an email, your address, your message, and any files you attach are processed for support. The email draft in the app adds the app version, iOS version, and device model; you can edit it before sending. Your library or backup is not attached to this draft automatically. Email providers also take part in delivering and storing the correspondence.

iCloud backups and retention

Your library, the covers you saved, and the library preferences included in the backup may be written to the app’s area in your own account on Apple’s iCloud service. Backup information includes the device name, the app’s device identifier, the date, the data model version, and the size. The developer does not take these backups onto its own server.

Automatic backup is set to Daily by default. If you are signed in to iCloud and the required system conditions are met, a backup can be made without tapping a button each time. You can change the frequency under Settings › Back Up and Restore › Backup Frequency, or choose Off. Turning it off does not delete existing backups. There is no live library sync; to use your library on another device, you need to restore from a backup.

Local records are kept until you delete them or the app’s local data is removed. A new backup from the same installation replaces the previous backup; a separate copy of every date is not kept. Changing the library or deleting a local record does not by itself delete its copy in an older iCloud backup. Delete iCloud Backup on the backup screen also deletes the backup in the cloud; Remove Backup Copy from Device removes only the downloaded copy. Files you export or share are managed separately.

Support emails and attachments are kept for a reasonable period needed to follow up on the same issue after your request is resolved, for at most two years; if they are no longer needed they are deleted earlier. You can ask for earlier deletion at lezzet@gmail.com. If there are records that must be kept because of a legal retention obligation or an ongoing legal dispute, only the necessary part is kept for as long as the relevant obligation continues; this exception and its reason are explained in the reply to your request. This period applies to support correspondence managed by the developer; email providers’ own service records are subject to their retention rules.

Ads, consent, and analytics

In the free version, Google AdMob may show an app-open ad (at most once every 15 minutes). When you add a new book at the 10-book limit, you can choose to watch one rewarded ad for each new book; this ad opens only when you choose it. Banner and interstitial ads are currently turned off. Pro blocks ad display and ad requests. However, Pro does not mean that no request is ever made to Google’s consent service or that the ad SDK is never started.

According to Google’s disclosure, the ad SDK may process the IP address and the approximate location inferred from it, device identifiers, ad views and interactions, and performance and crash data. The purposes are ad delivery, measurement, and improving the operation of the SDK; advertising data may be shared with other participants in the advertising service. Google Mobile Ads data disclosure.

Google UMP checks consent information and presents the required form. The current app does not request Apple’s ATT permission. This does not mean other device identifiers are not processed; it cannot be said that all ads are only non-personalized. In the EEA, the United Kingdom, and Switzerland, you can change or withdraw your ad consent choice at any time in the app with the Ad Privacy Choices button on the Settings › Privacy screen. You can write to the contact address about your privacy choice or a request to withdraw your consent.

BooksMy’s separate usage statistics and crash reporting channels are currently not sending data. The switches in Settings › General store your preference for these channels; they do not turn off AdMob or Google Books traffic. Book titles, notes, and progress are not added to these separate analytics events.

Service providers and international transfers

Google provides the book search and advertising services; Apple provides iCloud, speech recognition, and purchase services. Google provides the Gmail service used for support, and the email provider you use may also take part in delivering the correspondence. These services may process data outside the country where you are, including outside Türkiye or the European Economic Area. Processing locations and the service providers’ retention periods depend on the terms of the relevant service. No assurance is given that data stays only in Türkiye or the European Economic Area.

The safeguards for international transfers relating to Apple’s and Google’s own services are described in Apple’s privacy policy and in Google’s data transfer frameworks; which safeguard applies depends on the service, the organization concerned, and the direction of the transfer. These descriptions do not mean that a contract was made or consent obtained on behalf of the developer for every transfer. Applicable transfers are subject to the conditions in Article 9 of the KVKK and Chapter V of the GDPR; giving a link to a service provider’s policy or using the app does not by itself make a legal basis or explicit consent for a transfer. You can send a request for information about transfer safeguards to lezzet@gmail.com. KVKK guide on transfers abroad (Turkish).

The service providers named in this policy receive only the data needed for the feature you use, and BooksMy uses them in line with this policy; it does not share your data with any other third party. These providers are required to give your data the same or equal protection as described in this policy. External sites that you open from the app are subject to their own policies. Amazon links may contain an ISBN; in some country links, a purchase may be attributed through an affiliate tag. BooksMy does not receive card or payment details on these sites. Google’s privacy policy and Apple’s privacy policy give information about the services concerned.

Legal grounds

Data processing necessary to provide the library, reading record, online catalog, backup, and Pro entitlement verification features you choose is limited to the basis of entering into or performing a contract (KVKK Art. 5/2-c; where applicable, GDPR Art. 6/1-b). This basis does not cover ad personalization or tracking that the feature you chose does not require.

Answering your support request and following up on a resolved request within the limited period above rests on the developer’s legitimate interest in providing support, provided that it does not harm your fundamental rights and freedoms and uses only the necessary data (KVKK Art. 5/2-f; where applicable, GDPR Art. 6/1-f). If there is a legally mandatory record or a binding request from a competent authority, only the data needed for that obligation is processed on the basis of a legal obligation (KVKK Art. 5/2-ç; where applicable, GDPR Art. 6/1-c).

The basis for processing that requires consent, such as ad personalization or tracking, is explicit consent (KVKK Art. 5/1; where applicable, GDPR Art. 6/1-a). The Google UMP consent flow is described above; a system permission, using the app, or reading this text does not count as consent for all data processing or international transfers. You can withdraw your consent and, under the applicable conditions, object to processing based on legitimate interest. The legal bases that Apple and Google state for processing in their own services are in their own policies. KVKK processing conditions (Turkish) and the text of the GDPR.

Your rights and requests

Under the applicable KVKK and GDPR provisions, you have the right to learn whether your data is processed, for what purpose, and who the recipients are, and to ask to access, correct, or delete your data. When the conditions are met, you can ask for restriction of processing, portability of your data, and notification to recipients of corrections or deletions made; you can object to processing, or to a result against you arising solely from automated assessment. For processing based on consent, you can withdraw your consent; this does not retroactively affect earlier lawful processing. Under the conditions in the law, you can ask for compensation for damage and lodge a complaint with the competent data protection authority. These rights are subject to statutory conditions and exceptions. KVKK transparency guidance (Turkish) and GDPR rights.

Send your requests to lezzet@gmail.com; say which data or processing they concern. Only the extra information needed to verify your request and identity may be requested. The developer cannot remotely see or delete the library on your device or your private iCloud backup. You can edit your local records in the app and use the export and backup management options. You can manage camera, microphone, speech recognition, and notification permissions in iOS Settings. For support correspondence managed by the developer, you can send an access or deletion request to this address; for Apple’s and Google’s own records, to the privacy request channel of the service concerned.

Applications under the KVKK are concluded as soon as possible and within 30 days at the latest. Where the GDPR applies, a reply is in principle given within one month; for complex or numerous requests, the extension the law allows and its reason are notified within the first month. The application conditions and exceptions of the relevant law apply. Under the KVKK you can first apply to the data controller and, under the legal conditions, complain to the Personal Data Protection Authority; under the GDPR, you can complain to the competent data protection authority. KVKK application and complaint explanation (Turkish).

Children

BooksMy is a general-audience app and is not directed primarily at children. It does not knowingly collect personal data from children, and it has no account or profile that a child would need to create. If you believe a child has sent personal data to the developer, for example in a support email, contact lezzet@gmail.com and it will be deleted.

Changes

When data flows change, this text and its update date are renewed. If a change requires new consent, changing only the policy text does not replace consent.