Privacy Policy

Last updated: 2026-08-21

This Privacy Policy explains how Bookella (“we”, “us”, “our”) collects, uses, shares, and protects information when you use Bookella (the “App”). By using the App you agree to this Policy.

1. Who we are & how to contact us

The App is provided by Bookella. For any privacy question or request (access, correction, deletion), contact us through the support page.

2. Scope

This Policy covers the Bookella mobile app and this website. It does not cover third-party services that operate under their own policies (see Section 4).

3. Information we collect

• Account data. When you create an account or sign in, our authentication provider (Firebase Authentication) processes your sign-in identifier — an email address, or a provider user ID from Google, Apple, or Facebook Login — and an app-specific user ID. You may also use the App anonymously (an anonymous user ID, with no personal identifier).
• Content you create. Data and files you save in the App are stored in our cloud database (Cloud Firestore) and cloud file storage (Firebase Cloud Storage).
• Purchases. If you buy a subscription or in-app purchase, purchase and entitlement status is processed by our billing provider (RevenueCat) together with the App Store / Google Play. We do not receive or store your full payment card details.
• Diagnostics & usage. We collect crash reports and basic usage data (Firebase Crashlytics and Analytics) — e.g. device model, OS and app version, a random installation identifier, IP-derived approximate region, and in-app events — to keep the App reliable and improve it.

4. Third-party services we use

We rely on the following providers, each acting on our behalf or under its own policy. We encourage you to review their policies:

• Google Firebase — Authentication, Cloud Firestore, Cloud Storage, Crashlytics, Analytics (policy).
• RevenueCat — purchases (policy).
• Meta Platforms — Facebook Login (policy).
• Apple App Store and Google Play — distribution and billing.

5. Why we use your data & legal bases

We process data to operate the App and your account (performance of a contract); process purchases (contract); show and measure ads where applicable (consent, where required); and keep the App secure and diagnose problems (legitimate interests and, where applicable, legal obligation). Where we rely on consent, you can withdraw it at any time.

6. Advertising & tracking

The App shows no ads and we do not use your data for advertising. We do not build advertising profiles about you and we do not track you across other apps or websites.

On iOS 14.5 and later you may still see Apple’s App Tracking Transparency (ATT) prompt. It appears for one reason only: signing in with Facebook. The Facebook SDK requires that permission to complete a full sign-in; if you decline, sign-in with Facebook is unavailable, and every other way to sign in keeps working. Declining changes nothing else in the App. You can change this choice at any time in your device settings.

7. Sharing & sale of personal data

We share personal data only with the providers listed in Section 4 (acting on our behalf) and where required by law. We do not sell your personal data, and we do not “share” it for cross-context behavioural advertising as defined under California law. If this ever changes, we will provide a clear opt-out.

8. Data retention

We keep your account data and content while your account is active. Diagnostic data is kept for a limited period (for example, crash data for up to 90 days). When you delete your account (Section 9), your data is deleted as described there. We may retain a limited amount of data only where required by law, to resolve disputes, or to prevent fraud and abuse, and only for as long as necessary.

9. Deleting your account & data

You can delete your account and associated data:

• In the App — open Settings and choose Delete account.
• On the web — visit https://bookella.app/legal/deletion/.

When you request deletion, your account is immediately deactivated and scheduled for permanent deletion. For 30 days you can cancel the request by signing in again and restoring your account. After that period, your personal data — your account, your content and files, purchase records, and diagnostic identifiers — is permanently deleted from our live systems and removed from backups within our normal backup cycle (up to 90 days). If you signed in with Facebook, this also deletes the data our App obtained from Facebook about you. We may keep a limited amount of data only where the law requires it. Deleting your account does not cancel an active store subscription — cancel it in your App Store or Google Play account to stop future charges.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, export (portability), or restrict the processing of your personal data, to object to certain processing, and to opt out of the sale or sharing of personal data. To exercise any right, contact us (see section 15); we will respond within the time required by applicable law. You may also complain to your local data protection authority.

11. International data transfers

Our providers (for example Google, Apple, RevenueCat, Meta) may process data on servers in the United States and other countries. Where required, such transfers rely on appropriate safeguards, such as Standard Contractual Clauses.

12. Children

The App is not directed to children under 13 (or the higher minimum age required in your country, such as 16 in parts of the EEA). We do not knowingly collect personal data from children below that age. If you believe a child has provided us data, tell us and we will delete it.

13. Security

Data is encrypted in transit (HTTPS/TLS) and at rest by our cloud providers. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

14. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and change the “Last updated” date; significant changes may also be notified in the App.