Privacy Notice for Libreya
Last Updated: February 2026
1. Identity and Contact Details
Libreya is the "Data Controller" for your information.
Company Name: libreya.app
Contact/DPO Email: hello@libreya.app
2. Information We Collect
We collect information only to provide and improve your reading experience:
- Account Data: Email address, display name, and profile image (for registered users).
- Activity Data: Reading progress, favorite books, and highlights (stored locally for guests; synced for registered users).
- Device Data: IP address and device identifiers (used for security and ad delivery).
- Minor Data: If we have actual knowledge a user is under 16, their data is classified as Sensitive Personal Information and receives extra protections.
3. Legal Basis for Processing (GDPR)
We process your data based on:
- Performance of a Contract: To provide the reading service you requested.
- Legitimate Interests: To prevent fraud, secure the app, and deliver relevant ad banners.
- Consent: For push notifications and personalized advertising (which you can withdraw at any time).
4. Third-Party Sharing and Data Transfers
We do not sell your personal information. We share data with:
- Service Providers: Supabase for authentication and database storage.
- Ad Partners: Google AdMob for displaying banner ads.
- International Transfers: Data may be transferred to servers outside the EEA (e.g., USA). We use Standard Contractual Clauses (SCCs) to ensure data safety.
5. Data Retention and Erasure
- Retention: We keep your data as long as your account is active. Guest data is kept as long as the app remains on your device.
- Right to Erasure: You can delete your account and all associated data (highlights, favorites, and profile) immediately via the "Delete Account" button in Settings.
6. Your Rights
Under global privacy laws, you have the following rights:
- Access & Portability: Request a copy of all data we have collected since January 1, 2022.
- Correction: Fix any inaccurate personal information.
- Opt-Out: Stop the "sharing" of data for targeted ads and limit the use of sensitive information.
- Right to Complain: You have the right to lodge a complaint with your local Data Protection Authority.
7. Modern Compliance (2026 Updates)
- No Dark Patterns: Our consent and opt-out buttons are designed with equal prominence.
- Opt-Out Confirmation: If you opt out of data sharing, our settings will clearly display "Opt-Out Request Honored".