Draft. This policy will be finalised before ClickyLit launches.
Privacy policy
Last updated: [[EFFECTIVE_DATE]]
This policy explains what personal data ClickyLit collects, why, where it is kept, and how you can have it deleted. ClickyLit is run by [[CONTROLLER_NAME]], based in the United Kingdom, who is the data controller. You can contact us at privacy@CLICKYLIT_DOMAIN.
What we collect
| Data | Why we need it |
|---|---|
| Email address, and your Apple or Google account identifier if you sign in with them | To create your account and sign you in. |
| Display name and optional profile picture | So other members of your clubs can see who they are talking to. |
| Genre interests | To suggest books you might enjoy. |
| Reviews, posts and comments you write, and the clubs you belong to | To provide the app's reviews and club features. |
| Activity history: books you have viewed, buy links you have tapped, and invites you have sent | To show you your own history in the app. See below. |
| Reports that you could not buy a book | To fix broken buy links. |
We do not show adverts, we do not sell your data, and the app does not send analytics events about how you use it.
Your activity history
ClickyLit keeps a private history of the books you view, the buy links you tap, and the people who join through your invites, so you can find them again. Only you can see it, except that the person who invited you can see that you joined through their invite. Your reading interests can be personal, so we never show this history to other members, never share it, and never use it for anything else.
You can clear your history, or switch it off completely, in Profile and settings. While it is switched off, nothing is recorded.
Crash reports
If the app crashes or hits an error, a report is sent to Sentry, our crash reporting service, so we can fix the problem. Reports contain technical details such as the device model, operating system version and what went wrong. They do not contain your name, email address, account identifier, or anything you have written, and Sentry is set not to store IP addresses.
Usage totals
We keep simple running totals, such as the number of accounts created or clubs started each day. These are counted on our servers from actions you take anyway, and contain nothing that identifies you.
Buying books
Buy buttons take you to retailers such as Amazon. Some of these are affiliate links, which means we may earn a commission if you buy something, at no extra cost to you. Once you are on a retailer's site or app, their own privacy policy applies, and they may use cookies to record that you came from ClickyLit.
Who processes your data
| Service | What it does | Where |
|---|---|---|
| Supabase | Hosts our database and handles sign-in | [[SUPABASE_REGION]] |
| Sentry | Crash and error reports | European Union |
| [[EMAIL_PROVIDER]] | Sends sign-in codes and account emails | [[EMAIL_PROVIDER_REGION]] |
| Apple and Google | Sign in with Apple and Sign in with Google, if you use them | Under their own privacy policies |
Book details and cover images come from Google Books and Open Library. Cover images are loaded directly from their servers, which will see your device's IP address when they do.
Deleting your account
You can delete your account in the app, under Profile and settings, or by following the steps on our support page.
- Your account is closed straight away, and you have 30 days to restore it by signing in again.
- After 30 days we permanently delete your account, email address, sign-in details, profile, profile picture, genre interests, activity history, club memberships and invites.
- Reviews, posts and comments you wrote are kept so club conversations still make sense, but they are no longer linked to you in any way and are shown as written by a deleted user.
- Deleted data can remain in our database backups for up to [[BACKUP_RETENTION]] until those backups expire. Our email provider keeps its own logs of emails sent for [[EMAIL_LOG_RETENTION]].
If you sign up again later with the same email address, you will get a new account with nothing carried over.
Your rights
Under UK data protection law you have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to receive a copy of it. Email privacy@CLICKYLIT_DOMAIN to make a request.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
ClickyLit is not intended for anyone under [[MINIMUM_AGE]].
Changes to this policy
If we make significant changes, we will tell you in the app before they take effect.