Privacy Policy — SpotMyBook

Effective date: 20 October 2026

SpotMyBook is an app for keeping a catalogue of the physical books you own: where each one sits on your shelves, who you lent it to, and what you've read. This policy explains what the app stores, where, and how you can delete it. "We" means the developer of SpotMyBook.

In short

• Without an account, your library stays on your phone; we don't receive it.
• With an account (SpotMyBook Pro), we store your library so it syncs across your devices and with the people you share it with.
• The free version shows ads from Google AdMob, which uses information about your device to show them. SpotMyBook Pro has no ads. We have no analytics or tracking of our own.
• Crash reports (no names, emails or books in them) help us fix bugs.
• You can export everything, and delete your account and all its data from inside the app.

1. What we collect

Using the app without an account

• Everything you add stays in the app's private storage on your phone. We don't receive it; only ads (below) and crash reports involve our service providers.

Your account

• Your email address and an account ID.
• If you sign in with Google: the name and profile picture Google shares with us.
• If you sign in with email: your password, which our sign-in provider stores only in hashed (non-readable) form.

The library you create

• Book details you enter: title, authors, publisher, type, ISBN and notes.
• Shelves, the names you give to shelf cells, and where each book sits.
• Tags.
• Lending: the name you type for the person who borrowed a book, and when.
• Your reading status for each book (unread, reading, read) and when you finished it.
• Cover photos you take or pick. Each photo is turned into a new image (cropped and resized) before it is stored, which removes its metadata, such as where the photo was taken.

Online backups (SpotMyBook Pro, if turned on)

• Once a week, a copy of your library (the details above and your cover photos) is saved to your account. The last 4 copies are kept; older ones are deleted automatically. You can turn this off in Profile → Your data.

Households (only if you share your library)

• When you invite someone or join a household, its members see your email address, the shared library, who added each book, and how many books each member has read.

Crash reports

• If the app crashes, or syncing fails for an unexpected reason, a report is sent to us with: the technical details of the error, your device model, Android version, app version and a random installation ID. It does not include your name, email address or library.

Ads (free version only)

• The free version shows ads from Google AdMob. To show and measure them, AdMob receives information about your device: the advertising ID, approximate location (from your IP address), how you interact with the ads, and diagnostic information. It doesn't receive your library, name or email address.
• In the EU, UK and some other places, you're asked first whether ads may be personalised. You can change your choice any time in Profile → Ad privacy choices. You can also reset or delete your advertising ID in Android's settings (Privacy → Ads).
• With SpotMyBook Pro there are no ads.

Purchases

• Google Play handles payments; we never see your card or bank details. To unlock Pro on your account we receive the purchase's order number and a purchase token from Google Play.

What we don't collect

• No precise location, contacts or browsing activity.
• No analytics or tracking of our own of how you use the app.

2. How we use it

• To run the app: sign you in, store your library and keep it in sync on your devices.
• To let the people you invite into your household see and edit the shared library.
• To find and fix crashes and errors.
• In the free version, to show ads (through Google AdMob, as described above).

We don't sell your library or your account details to anyone.

3. Where it's stored

• On your device, in the app's private storage. It is removed when you sign out.
• Supabase (supabase.com) stores your account, your library and your cover photos, so they can sync, and your online backups if you use them. Supabase privacy policy
• Google Firebase Crashlytics receives crash reports. Firebase privacy information
• Google AdMob shows the ads in the free version. How Google uses information from apps that use its services
• Google Play handles purchases. Google privacy policy

These companies process the data on our behalf to provide their services. All data travels over encrypted connections (HTTPS). Access rules on the server let only you, and members of a household you share with, read your library.

The app doesn't use Android's automatic backup to Google Drive. Your library is kept by the sync service, and you can make your own backup file (see section 5).

4. Who we share it with

• The service providers above, to run the app.
• Google AdMob, in the free version: the device and ad information described in section 1, to show ads.
• People you choose to share your library with (your household).
• Authorities, only if the law requires it.

5. Backup files you export

Profile → Export library saves your whole library, including cover photos, as a file in a place you choose. We never receive these files. Anyone who has the file can read what's in it, so keep it somewhere safe.

6. How long we keep it, and deleting it

• Your data is kept as long as you have an account.
• When you delete a book, shelf or tag, it disappears from the app. A small record that it was deleted is kept, so your other devices remove it too. These records go when your account does.
• Delete your account in the app: Profile → Delete account. This permanently deletes your sign-in and your library: books, shelves, tags, cover photos and reading history, on all your devices, and your online backups. If you are a member of someone else's household, the books you added stay with that household (without your name); your sign-in and reading history are deleted. The owner of a household with other members must remove them first.
• You can also ask us by email to delete your account (see the account deletion page). We do it within 30 days.
• Copies may remain in our providers' internal backups for a limited time before they are overwritten. Crash reports are kept by Firebase for up to 90 days.

7. Your choices and rights

• See and take your data: export your library at any time (section 5).
• Correct it: edit anything in the app.
• Delete it: delete books, or your whole account (section 6).
• For any other request, email us.

8. Children

SpotMyBook is not directed at children under 13, and we don't knowingly collect data from them.

9. Changes to this policy

If this policy changes, we'll update this page and the effective date above.

10. Contact

Questions or requests: ellog.care@gmail.com