Privacy Policy

This privacy policy describes how Bukku collects, uses, stores and protects the personal data of its users.

Bukku is a mobile reading tracker available on Android. We are committed to respecting your privacy in compliance with the GDPR (EU Regulation 2016/679) and the French Data Protection Act.

3.1 Data provided by the User

• Account data: email, username, password (encrypted)
• Profile picture (avatar): optional image
• Reading preferences: favorite genres
• Library data: books added, reading status, ratings

3.2 Automatically collected data

• Technical data: device type, OS, app version, language
• Usage data: usage frequency, features accessed
• Advertising data: Google Advertising ID, via Google AdMob

3.3 Data NOT collected

• No geolocation data
• No biometric data
• No payment data
• No contacts or address book

• Contract execution (Art. 6.1.b): account management, app features, personalization
• Consent (Art. 6.1.a): marketing emails (via Brevo)
• Legitimate interest (Art. 6.1.f): advertising (Google AdMob), app improvement
• Legal obligation (Art. 6.1.c): legal compliance

• Supabase: database and file storage (avatars), on AWS. GDPR compliant with SCCs.
• AsyncStorage (local): user preferences stored locally.
• Brevo: email and language for marketing. French company, GDPR compliant.
• ISBNdb: book search. Only search terms are transmitted.
• Google Analytics: web analytics for bukku.app. Anonymized browsing cookies. Google LLC (DPF compliant).

We never sell your personal data. Service providers:

• Supabase (AWS): hosting and database
• Google AdMob: advertising
• ISBNdb API: book search
• Brevo: email marketing
• Google Analytics: website analytics

Bukku uses Google AdMob for ads. You can disable ad personalization in your Android settings. As a native mobile app, Bukku does not use cookies in the traditional sense.

7.3 Google Analytics (website)

The website bukku.app uses Google Analytics for audience measurement. You can disable these cookies via the Google Analytics opt-out add-on or your browser settings.

• Account and library data: kept while account is active. Deleted within 30 days after account deletion.
• Avatar: deleted immediately upon account deletion.
• Local data: deleted when uninstalling the app.
• Brevo data: deleted within 30 days after unsubscription.

Under GDPR, you have the right to: access, rectification, erasure, restriction, portability, opposition, and withdrawal of consent.

Contact: contact@bukku.app. Response within 30 days.

Complaint: CNIL.

• Secure authentication via Supabase (bcrypt)
• Encrypted communications via HTTPS/TLS
• Row Level Security (Supabase)
• Restricted access to production data

Some data may be transferred outside the EU (USA), governed by Standard Contractual Clauses (SCCs) and the Data Privacy Framework (DPF).

Bukku is not intended for children under 16. Contact us at contact@bukku.app if you believe a child has provided personal data.

We reserve the right to modify this policy at any time. Significant changes will be communicated via the Application or email.