Privacy Policy

Learn how we protect your privacy and handle your data in My Little Shelf.

Effective: 2026-08-26

1. Introduction

This Privacy Policy describes how the developer of My Little Shelf ("we," "us," or "the Developer") collects, uses, and protects your information when you use our application ("the App").

My Little Shelf is a personal reading journal. It records the books you have read, are reading, or intend to read, together with anything you choose to write about them.

2. Information We Collect

2.1 Information You Provide

• Account details: your email address and password
• Your name, as entered during onboarding
• Your library: each book's status, rating, start, finish and set-down dates, reading format, tags, discovery source, and recommendation
• Your writing: private notes, favourite quotes, reasons for saving a book, and reasons for putting one down
• Your settings: monthly reading goal, celebrated months, chime and check-in preferences, and shelf arrangement

2.2 Automatically Collected Information

• Timestamps recording when each entry was created and last updated
• An account identifier generated when you sign up
• Standard network information, such as your IP address, received by the services listed in section 4.3 when the App contacts them

2.3 Information We Do NOT Collect

• Analytics or usage data of any kind
• Crash reports or performance monitoring data
• Advertising identifiers, including the IDFA
• Location data
• Contacts, calendar, photos, camera, or microphone data
• Your book searches, which are never stored on your device or on our servers
• Any behavioural profile of how you use the App

The App contains no analytics SDK, no advertising SDK, no attribution SDK, and no crash reporting SDK.

3. How We Use Your Information

3.1 App Functionality

• Display your library, your reading progress, and your reading statistics
• Keep your library available across sign-ins and after a lost or replaced device
• Provide book information and cover images through Open Library
• Track your monthly reading goal and weekly reading streak

3.2 Account and Sign-In

• Create and authenticate your account
• Send a six-digit sign-in code to your email address
• Maintain your signed-in session on your device

4. Data Storage and Sync

4.1 Local Storage

Your library is stored on your device so that the App opens immediately and works without a network connection. This local copy includes your private notes and favourite quotes. It is held in the App's private storage, protected by the iOS sandbox and your device passcode. Your session token is stored separately in the iOS keychain.

4.2 Account Sync

Your library is also stored in a database so that it survives the loss of your device. Access is enforced by row-level security within the database itself, rather than by filtering in the App, so your records are reachable only by your account.

Book titles, authors, cover images and publication details are held in a shared catalogue common to all readers. That catalogue contains no user identifiers and nothing about you.

4.3 Third-Party Services

• Supabase: hosts the database and handles authentication
• Resend: delivers your sign-in code, and processes your email address in order to do so
• Open Library (Internet Archive): provides book information and cover images, and receives your search terms and IP address when you search

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We never sell, rent, or trade your personal information to third parties. We do not share it with advertisers, data brokers, or marketing partners.

5.2 Service Providers

We share data only with the providers listed in section 4.3, and only to the extent required for the App to function. None of them receives your reading journal, your notes, or your quotes, with the exception of Supabase, which hosts them on our behalf.

5.3 Legal Requirements

We may disclose information if required by law or to protect our rights and safety.

6. Notifications

The weekly check-in is a local notification, scheduled on your device by your device.

• It is not a push notification, and no server is involved
• The message never leaves your device
• It is disabled unless you enable it, and may be disabled at any time

7. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect personal information from them.

8. Your Privacy Rights

8.1 Data Control

• Review or edit any entry in your library at any time within the App
• Sign out to remove the local copy from your device; your library remains in your account and returns when you sign in again
• Depending on where you live, you may have rights of access, correction, and erasure. Everything the App holds about you is visible inside it, and section 8.2 explains how to erase it. For anything else, contact us at the address in section 12

8.2 Account Deletion

You may delete your account from within the App, under Profile → Account.

• Your library and notes are removed from your device immediately
• Your account and its contents are deleted seven days later
• Signing in during those seven days cancels the deletion
• After seven days the data is permanently deleted and cannot be recovered

The shared catalogue records described in section 4.2 remain, as they contain nothing about you.

9. Data Security

9.1 Protection Measures

• All network traffic is encrypted in transit using HTTPS
• Passwords are stored only as salted hashes and are never readable, including by us
• Session tokens are stored in the iOS keychain
• Separation between accounts is enforced within the database, not by the App

9.2 Data Retention

• Local data persists until you sign out, delete your account, or uninstall the App
• Account data is retained until you delete your account
• Deleted accounts are permanently removed seven days after the request

10. International Data Transfers

• Supabase: your account data is stored in Japan. Japan is recognised by the European Commission as providing an adequate level of data protection, so transfers from the European Economic Area require no additional safeguards
• Resend: processes your email address to deliver sign-in codes
• Open Library: operated by the Internet Archive, based in the United States

11. Changes to Privacy Policy

We may update this Privacy Policy periodically. For material changes that substantially affect how your data is collected or used, we will notify you in advance through the App or other reasonable means. Non-material changes, such as clarifications or formatting updates, take effect immediately upon posting. Your continued use of the App after any changes take effect constitutes acceptance of the updated Privacy Policy.

12. Contact Information

For privacy questions or to exercise your rights:

• Email: hello@my-little-shelf.com

13. Third-Party Privacy Policies

13.1 Supabase

Review Supabase's privacy policy at: https://supabase.com/privacy

13.2 Resend

Review Resend's privacy policy at: https://resend.com/legal/privacy-policy

13.3 Open Library

Review the Internet Archive's privacy policy at: https://archive.org/about/terms.php

Last updated: 2026-08-26