Privacy policy

Who is responsible

Endpapers is made by an independent developer and is still in development. For this policy, the person responsible for your data is the developer of Endpapers, reachable at support@endpapers.app. This page covers the Endpapers app, the waitlist at endpapers.app and the Endpapers servers.

What stays on your phone

Endpapers writes everything to your phone first, and it keeps working offline. These never leave the phone:

• the voice recordings and the photos of pages attached to your notes;
• the photos you take of a cover or a shelf to find books;
• your reminders, which are scheduled on the phone.

Reading the text in a photo (OCR), turning a voice note into text, and finding books in a photo of a shelf all happen on your phone. The photo or the audio is not sent to us or to anyone else for this.

What we collect on our servers

• Your sign-in: your e-mail address and, if you sign in with Apple or Google, the identifier and the name that service gives us. We use them to recognise your account and to send a one-time sign-in code. We do not use them for advertising.
• Your profile: the name, handle and bio you choose, your reading goal and your visibility choices.
• Your library, once you are signed in, so that it is backed up and can be restored: your books and shelves, ratings and reviews, reading sessions and pages, your streak, and the text of your notes. Recordings and photos are not uploaded.
• What you do in the community: the people you follow and block, the clubs you join, the posts and replies you write, the reactions you give, and the reports you send.
• Your sign-in sessions: the name and kind of your device (for example the phone model) and when each session was last used, so that you can be signed out and stolen sessions can be detected.
• Your network address (IP), stored briefly with sign-in code requests to stop abuse such as someone requesting thousands of codes. Sign-in codes and these records are deleted automatically after at most a day.
• Technical logs of requests to our servers (time, route, status, a request number), kept by our hosting provider for a short period to keep the service working and to fix problems. They do not contain your notes or your library.
• Waitlist: if you joined the waitlist on the website, your e-mail address and the time you confirmed it, used only to confirm your place and to tell you when Endpapers is ready.

What other readers can see

Your reading is private until you choose otherwise. Other signed-in readers can find your profile by your name or handle and see your name, handle and bio. Beyond that:

• A post or a reply is shown to the audience you pick when you write it: everyone, the people who follow you, or the members of one club.
• Reading sessions and finished books appear in the feed only if you turn on Settings → Privacy → Share my reading. It is off by default.
• Your shelf, your four favourite books and the number of books you finished are shown on your profile only as far as Settings → Public profile allows: to nobody, to readers you follow who follow you back, or to everyone. It starts as nobody.
• In a club you joined, members see your name and, unless you leave the ranking, the time you read that week.
• Someone you block cannot see your profile or your posts, and you do not see theirs.

You can report a person, a post, a reply or a club. We read the report and what it points to in order to decide what to do, and the person you report is not told who sent it.

Usage analytics

To learn which parts of the app are useful, Endpapers sends a short list of events (for example that a book was added, a reading session finished, or a card was shared) and the names of the screens you open. The events carry numbers and short fixed words only. They never include a book title, an author, a note, your name or your e-mail address, and they are linked to a random identifier made by the app instead. The analytics provider is PostHog (United States). The switch Settings → Privacy → Share analytics to improve the app turns this off at any time, and it is on by default.

Other services the app talks to

When you search for a book, type a title or scan a barcode or a cover, the words or the ISBN are sent to public book catalogues (Open Library, run by the Internet Archive, and Google Books when it is enabled) to find the book. Cover pictures are loaded from them. These requests are not tied to your account, but those services can see your network address as any website does. Their own policies apply to what they receive.

We use these companies to run the service. They handle data for us and only for that purpose:

• Vercel: hosts the Endpapers servers and the website (functions run in Brazil, São Paulo).
• Neon: the database that holds your account, your library and your posts, in Brazil (São Paulo).
• Resend: sends the sign-in code and waitlist e-mails.
• Apple and Google: confirm who you are, if you choose to sign in with them.
• PostHog: usage analytics, described above.

Some of these companies process data in the United States or elsewhere. When your data is moved to another country we rely on the protections these providers commit to in their data processing terms. We do not sell your data and we do not use it for advertising or to track you across other apps.

Permissions the app asks for

• Camera: to scan barcodes and covers, to photograph shelves, and to photograph a page for a note.
• Photos: to choose a picture, and to save a card you made to your library when you ask.
• Microphone and speech recognition: to record a voice note and turn it into text on your phone.
• Notifications: to remind you to read, only if you allow it.

How long we keep it

We keep your account for as long as you have one. Sign-in codes and abuse-protection records are deleted within a day, and expired sessions are cleaned up automatically. When you delete your account, we delete your e-mail address, your sign-in sessions, your profile, the copy of your library, and your posts, replies and reactions, and we ask our providers to do the same. A report you sent is kept without your name. Backups kept by our database provider expire on their own schedule, which is short.

Your choices and rights

You can ask to see the data we hold about you, to correct it, to move it to another service, to limit or object to how it is used, and to delete it. Under the Brazilian LGPD and the European GDPR these are legal rights, and we honour them wherever you live. You can also turn off analytics in the app at any time and withdraw any permission in the iPhone settings.

To delete your account, use Settings → Account → Delete account in the app, or write to support@endpapers.app from the e-mail address you signed in with. We act on it within 30 days. Deleting the app removes the copy of your library that is on the phone.

Children

Endpapers is not directed at children under 13, and we do not knowingly collect data from them. If you think a child gave us their data, write to support@endpapers.app and we will delete it.

Security

Connections to our servers are encrypted. Sign-in codes and sessions are stored in a form that cannot be reused if our database leaked, and the app keeps your session in the iPhone Keychain. No system is perfectly secure, so if something goes wrong that affects you, we will tell you and the authorities as the law requires.

Changes and contact

We will change this page when the app changes and show the new date at the top. For anything about your data, write to support@endpapers.app.