Privacy PolicyLast Updated: 14 February 2026Bookmark ("Bookmark", "we", "our", or "us") values your privacy. This Privacy Policy explains how your information is collected, used, and protected when you use the Bookmark mobile application (the "App") and our website at bookmarkapp.com.au.In short: Bookmark is designed to be privacy-first. Your book library, notes, and reading data stay on your device. Optional social features require an account and sync limited data to our servers. Analytics are aggregated and never identify you personally.Information We CollectOn-Device Data (Local Only)The core of Bookmark operates entirely on your device. The following data is stored locally and is never transmitted to our servers:Your book library (titles, authors, ISBNs, descriptions, page counts, publishers)
Reading status, progress, and history
Reading sessions (time spent reading, pages read)
Personal notes, ratings, and reviews
Tags and custom categories
Reading goals and streaks
Wish list items and preorder tracking
Book subscription/series tracking
Book loan records
Purchase information (price, currency, date, location)
Custom cover photos and book photo galleries
App preferences and settingsThis data is stored in a local database on your device. It is not synced to iCloud or any cloud service.Sign in with Apple (Optional)If you choose to create a Bookmark account using Sign in with Apple, Apple may provide us with:A unique, app-specific user identifier
Your email address (which may be a private relay address)
Your nameYour email and name are stored locally on your device to personalise your experience. Your unique identifier is used to authenticate with our backend service (Supabase) for social features and feature requests.You can use Bookmark's core features without creating an account.Social Profile and Activity (Optional)If you create a social profile, the following data is stored on our servers (hosted by Supabase):Profile Information:
Username and display name (chosen by you)
Profile photo (uploaded to secure cloud storage)
Privacy setting (public or private profile)
Invite codeAggregate Reading Statistics:
Total book counts, pages read, and reading streaks (aggregate numbers only)
Average rating and favourite genres
A reading activity heatmap (dates and page counts)
Currently reading books (title, author, cover image, and progress percentage for up to a few books)Social Interactions:
Follow/follower relationships and follow requests
Activity feed posts (e.g. "started reading", "finished", "rated a book") including book title, author, and cover image
Likes and comments on activity posts
Block and mute listsBook Clubs:
Club memberships, roles, and club details
Proposed books (title, author, cover image)
Votes, reading schedules, discussions, and messagesBooks in Common:
To enable the "books in common" feature, we store a one-way cryptographic hash (SHA-256) of your book ISBNs. This allows matching without revealing your actual books. The original ISBNs are never sent to our servers.Feature Requests:
Feature request submissions, descriptions, and votesAnalyticsBookmark uses TelemetryDeck, a privacy-focused analytics service, to understand how the App is used in aggregate. Analytics data:Does not include your name, email, Apple ID, or any personal identifier
Does not include book titles, ISBNs, or the contents of your library
Does not include your notes, ratings text, or any user-generated content
Is aggregated using bucketised ranges (e.g. "11-25 books" rather than exact counts)Examples of what is tracked in aggregate:
App launches and feature usage patterns
Onboarding completion rates
Reading milestone achievements (e.g. "completed 10 books")
Subscription purchase events (plan type and price, for revenue reporting)
Error rates for troubleshootingTelemetryDeck does not use advertising identifiers or cross-app tracking. For more information, see TelemetryDeck's privacy policy.Book Metadata LookupsWhen you search for a book or scan a barcode, Bookmark sends the search query or ISBN to our API proxy (hosted on Cloudflare Workers) to retrieve publicly available book information (titles, authors, descriptions, cover images, page counts) from ISBNdb.These requests contain only the search term or ISBN. No personal data, device identifiers, or account information is transmitted. Results are cached on the proxy to reduce repeated lookups.Currency Exchange RatesIf you track book purchase prices in multiple currencies, Bookmark retrieves current exchange rates from our API proxy (which sources data from Open Exchange Rates). No personal or device data is included in these requests.In-App PurchasesBookmark offers optional premium subscriptions (monthly, annual, and lifetime) managed entirely through Apple's App Store and StoreKit. We do not process or store payment information. Apple handles all billing, receipts, and payment data according to Apple's privacy policy.Aggregate purchase events (plan type, price, and currency) are reported to TelemetryDeck for revenue analytics. No transaction IDs, Apple IDs, or personal billing details are included.Goodreads ImportBookmark can import your reading data from a Goodreads CSV export file. This file is processed entirely on your device. Book data from the import (titles, ISBNs) may be sent to our API proxy solely to retrieve cover images. No Goodreads data is sent to our servers or any third party beyond these cover lookups.Camera and Photo LibraryBookmark may request access to:Your camera to scan book barcodes for ISBN lookup
Your photo library to set custom book covers or a profile photoPhotos are stored locally on your device (for book covers) or uploaded to secure cloud storage (for your profile photo and activity feed cover images, if you use social features). Camera and photo access is only used when you initiate these actions.NotificationsBookmark may request permission to send local notifications for:Daily reading reminders
Reading streak alerts
Goal completion celebrations
Preorder release date reminders
Book subscription renewal reminders
Social activity (new followers, likes, comments, follow requests)
Book club deadline remindersAll notifications are scheduled locally on your device. You can enable or disable notification categories individually in the App's settings.WidgetsBookmark offers home screen widgets displaying reading streaks, daily goal progress, and upcoming preorders. Widgets read data from a shared on-device database and do not make network requests or transmit any data.How We Use Your InformationWe use the information described above to:Provide and improve the App's functionality
Enable optional social and community features
Display book metadata and cover images
Process feature requests and votes
Understand aggregate usage patterns to improve the App
Send notifications you have opted intoWe do not use your information for:Advertising or ad targeting
Selling or renting to third parties
Building behavioural profiles for marketing
Cross-app or cross-website trackingThird-Party ServicesSupabase — Authentication, social features, and feature requests. Data shared: account identifier, profile info, social interactions, aggregate reading stats, and hashed ISBNs.TelemetryDeck — Privacy-focused analytics. Data shared: aggregated, non-identifying usage metrics.Cloudflare Workers — API proxy for book metadata and currency rates. Data shared: search queries and ISBNs (no personal data).ISBNdb (via proxy) — Book metadata source. Data shared: search queries and ISBNs (no personal data).Open Exchange Rates (via proxy) — Currency conversion rates. Data shared: none (no personal data).Apple StoreKit — In-app purchases. Managed entirely by Apple.Apple Sign In — Authentication. Managed by Apple; we receive a user identifier, and optionally email and name.No third-party advertising networks, tracking SDKs, or data brokers are used.Data Storage and SecurityOn-device data is stored in a local database within the App's secure container.
Remote data (social features) is stored on Supabase's infrastructure with row-level security policies ensuring users can only access their own data or data explicitly shared with them.
Uploaded images (profile photos, activity cover images) are stored in Supabase's secure cloud storage.
API communications use HTTPS encryption in transit.
Authentication uses Apple's secure Sign in with Apple flow with cryptographic nonce verification.Data Retention and DeletionLocal Data
You control all local data. You can delete individual books, clear your reading history, or remove all app data by deleting the App from your device.Remote Data (Social Features)
If you delete your social profile within the App:Your profile, display name, and avatar are permanently deleted
All uploaded images are removed from cloud storage
All follow relationships, activity posts, likes, and comments are deleted
All book club memberships and messages are removed
All feature requests and votes are deleted
Hashed book data used for matching is deletedThis deletion is immediate and permanent. You can also request account deletion by contacting us.Children's PrivacyBookmark is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App, please contact us and we will take steps to delete such information.Your Privacy RightsYou may:Use Bookmark without creating an account (core features work without sign-in)
Control your profile visibility (public or private)
Block or mute other users
Delete your social profile and all associated remote data at any time
Remove all local data by deleting the App
Manage notification preferences within the App
Request information about your data by contacting usChanges to This Privacy PolicyWe may update this Privacy Policy from time to time. Changes will be published on our website and will take effect immediately upon posting. We encourage you to review this policy periodically. Continued use of the App after changes are posted constitutes acceptance of the updated Privacy Policy.Contact UsIf you have any questions about this Privacy Policy or how Bookmark handles your data, you can contact us at:[email protected]