Booklook Privacy Policy
Last updated: 14 September 2026
This policy explains what personal data Booklook collects, why, and what your rights are. Booklook is operated by Peter Main ("we", "us"). You can reach us at hello@booklook.io.
Who is responsible for your data
Peter Main is the data controller for the personal data described here, for the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018).
What we collect
You give us:
- Account details — the email address you sign in with, or the private identifier Apple gives us if you use Sign in with Apple.
- Profile — a username, an optional display name, an optional avatar image, and any bio you add. Your profile and its public shelves are visible to other readers unless you set your profile to private.
- Your library — the books you add, their reading status, your ratings, reviews, private notes, shelf locations, loan records, and the reading lists you create.
We collect automatically:
- Basic usage and device data needed to run the app reliably, such as app version and coarse diagnostics. We do not use third-party advertising or tracking SDKs.
From Apple, for purchases:
- If you subscribe to Booklook Pro, Apple processes the payment. We receive your subscription status, not your card number or full payment details.
How we use it, and our legal bases
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Create and run your account, sync your library across devices | Performance of our contract with you |
| Show your public profile, shelves and reviews to other readers | Performance of our contract; your choices (privacy setting) |
| Generate reading recommendations ("Ask Booklook", "Based on your collection") | Performance of our contract |
| Keep the service secure and prevent abuse | Our legitimate interests |
| Respond to your messages and support requests | Our legitimate interests |
| Send you sign-in codes and essential service emails | Performance of our contract |
We do not sell your personal data, and we do not use it for advertising.
Who we share it with
We use a small number of service providers ("processors") that handle data on our behalf under contract:
- Supabase — hosts our database, authentication and storage (your account, library, profile and any avatar you upload).
- together.ai — powers recommendations. When you ask for suggestions, a summary of your shelves (titles, authors, genres) is sent to generate them.
- Google Books and Open Library — looked up to fetch book details and covers from the ISBNs or titles you scan or type.
- Resend — delivers our emails, such as your sign-in codes.
- Apple — provides Sign in with Apple and processes Booklook Pro purchases.
Some of these providers process data outside the UK, including in the United States. Where they do, transfers are protected by appropriate safeguards such as the UK International Data Transfer Addendum or an adequacy decision.
We may also disclose data if the law requires it, or to protect the rights, safety and property of Booklook, our users, or others.
User-generated content and moderation
Profiles, avatars, usernames, reviews and reading lists are content you create. We may review, remove, or restrict content and accounts that break our Community Guidelines, and we may screen uploaded images automatically to detect objectionable material.
How long we keep it
We keep your data while your account is active. If you ask us to delete your account, we remove your personal data within 30 days, except where we must keep limited records to meet a legal obligation.
Your rights
Under UK data protection law you can ask us to: access your data; correct it; delete it; restrict or object to how we use it; and receive a portable copy. To exercise any of these, email hello@booklook.io. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk), though we hope you would contact us first.
Children
Booklook is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has given us personal data, contact us and we will delete it.
Security
We protect your data with access controls and encryption in transit, and we limit who and what can read it. No service can promise perfect security, but we work to keep yours safe.
Changes
If we change this policy we will update the date above and, for significant changes, let you know in the app.
Contact
Questions or requests: hello@booklook.io.