Privacy Policy — Bookplate

App: Bookplate (com.nulmen.bookplate)
Developer: Sergei Mironov
Effective date: 10 August 2026

In short

The developer does not collect or receive data about you. There are no accounts, ads, analytics or trackers, and no advertising, analytics or tracking SDKs. The developer never receives your books, reading activity or usage statistics.

What the app stores, and where

Everything below is kept in the app's private folder on your device and is never sent anywhere on its own:

• the book files you added and their covers;
• reading position, percent read, the "finished" mark;
• bookmarks, quotes and notes;
• shelves, book genre, layout settings and interface language;
• a random device number — twelve characters generated on the device itself. It exists only so that during sync each device writes its own file and two devices never overwrite each other. It is not tied to you, your account or your hardware.

Internet access

The network permission is used in two cases, and you switch on both of them yourself:

1. Sync. If you enable it, the app writes reading data and book files to a folder you pick or to a WebDAV server you specify — for example, Nextcloud, ownCloud or a home server. The state can contain book title and author, technical fingerprints used to match the same book, reading position, bookmarks, quotes and notes, shelf names and membership, genre, a custom cover, a random sync identifier and the device model. The original book files are uploaded as well so they can be downloaded by your other devices. You choose and control the destination; the developer has no access to it and receives no copy. Sync is off by default. The selected storage or WebDAV provider processes these files under its own terms and privacy policy.
2. A link inside a book. If you tap an external link in the text, the page opens in an in-app browser window. The site then receives an ordinary web request, including connection data such as your IP address and browser information, and may use cookies or similar web storage under its own privacy policy.

Outside the sync destination and sites that you explicitly open, the app makes no network requests. Book content is rendered in an isolated view where network requests are blocked: an image or script inside a book file cannot reach out on its own.

The WebDAV password

The password is stored on the device encrypted; the encryption key lives in the Android system keystore and never leaves the device. The password is sent only to the server address you entered, and only over HTTPS — the app does not open unencrypted connections.

Backup

If Android backup is enabled on your device, the operating system may back up local reading-state records such as positions, shelves, bookmarks, quotes and layout settings. Book files, covers, the WebDAV password and the random device number are excluded. Restoring that state is managed by Android and may also require you to add the corresponding books again. The backup, its retention and its deletion are governed by Google or your device maker under their own terms; the developer has no access to it.

Sharing with third parties

No data is shared with the developer, advertisers, analytics providers or data brokers. Data leaves the device only when you direct the app to your chosen sync destination or open an external website, as described above.

Children

The app is intended for readers aged 13 and over and is not directed to children under 13. It collects no data about anyone, children included: there are no accounts, ads, analytics or trackers, and nothing is sent to the developer.

Books, covers and shelves are added by the user, so what a young reader can open is determined by whoever puts the files on the device. A link inside a book opens a web page in an in-app browser window; that site is outside the app and is governed by its own terms and privacy policy, so parental supervision is advised.

Your rights

Uninstalling the app removes its local data, including in-app browser data. Individual books, quotes and shelves can be deleted inside the app. Android backup copies are controlled and deleted through Google or your device maker. Deleting a synced book inside Bookplate removes its shared book file during the next successful sync. Other files at the sync destination, including files left after uninstalling the app, can be deleted by you there. The developer cannot reach either location and therefore cannot delete those copies on your behalf.

Changes

A new version of this policy will be published at the same address with a new effective date. Material changes will be noted in the release notes.

Contact

Questions about this policy or about data handling — Sergei Mironov, bookplate_app@icloud.com.