Niovela is a personal book tracking app ('the developer', 'we'). This policy explains what data we collect, how we use it and what your rights are.
By using Niovela you accept this policy. If you do not accept it, please do not use the app.
Niovela. Contact: privacy@niovela.com
Users without an account (local mode)
Library data: books added, status, progress, ratings, notes and quotes. Stored exclusively on your device (localStorage).
Your library is never sent to our servers. We do collect aggregated, cookie-free usage statistics, described in section 5.
Users with an account (sync enabled)
Email address and profile name (optional).
Library data, reviews, quotes and reading lists.
Timestamps of activity logs (progress updates, etc.).
If you use 'Continue with Google': we receive your name, email address and Google profile photo.
Service provision (contract):
sync your library across devices, manage your account and give you access to your data.
Legitimate interest:
improve the technical stability of the app.
Consent:
sending reading reminder notifications (only if you explicitly enable them).
We do not use your data for advertising, commercial profiling, or sell it to third parties under any circumstances.
Google Books API:
book searches are sent to Google's API to retrieve metadata (titles, authors, covers). See Google's Privacy Policy.
Supabase:
database and authentication provider. Registered users' data is stored on Supabase servers (EU or US). Supabase is GDPR-compliant and has Standard Contractual Clauses. More information at supabase.com/privacy.
Cloudflare:
the content delivery network that serves the site and protects it from abuse. It processes your IP address to deliver content and tells us the country and, where available, the approximate region and city of the connection. We do not store the IP address. See cloudflare.com/privacypolicy.
We do not share your data with any other third party.
Niovela does not use tracking or advertising cookies. We use the browser's localStorage to save your library locally and app preferences (theme, language). This storage is strictly necessary for the app to function and does not require consent under GDPR.
To understand which parts of the app are used and to spot failures we use Umami, an analytics tool we host on our own infrastructure (analytics.niovela.com). It sets no cookies, creates no permanent identifiers, does not follow you across websites and sends nothing to third parties.
We record: the page visited and the referring page, the language, the browser, the operating system and device type, the country and, where available, the approximate region and city reported by Cloudflare, technical loading metrics (response time, rendering speed and visual stability) and certain usage events. Some of those events include the title of the book you add or finish, the author you start following, and the text you type into the book search.
We do not store your IP address and we do not link it to your account or email. Umami groups activity into anonymous sessions recalculated daily from technical data, with no permanent identifiers. The legal basis is our legitimate interest in understanding and improving the product (Art. 6(1)(f) GDPR). If you would rather stay out of these statistics, write to privacy@niovela.com and we will apply it.
If you reside in the European Union, your data may be transferred to countries outside the European Economic Area (e.g., the US, where Supabase operates). These transfers are carried out with appropriate safeguards (European Commission Standard Contractual Clauses).
We retain your data while your account is active. If you delete your account, we delete all your data from our servers upon request. Data in local mode (no account) remains on your device until you delete it or clear your browser data.
If you reside in the European Economic Area, you have the following rights:
Access:
request a copy of your data (available in Settings → Export).
Rectification:
correct inaccurate data from your profile.
Erasure:
delete your account and all your data (available in Settings → Delete account).
Portability:
download your data in JSON or CSV format (available in Settings → Export).
Objection and restriction:
contact us by email.
To exercise any right not directly available in the app, write to us at privacy@niovela.com. We will respond within a maximum of 30 days. You may also lodge a complaint with your national data protection authority.
We take reasonable technical measures to protect your data: encrypted communications (HTTPS/TLS), secure authentication via Supabase Auth and restricted access to production data. However, no system is 100% secure.
Niovela is not intended for children under 13. If you are under 13, you must not use the app. If we become aware that we have collected data from a minor without appropriate parental consent, we will delete it immediately.
We may update this policy occasionally. We will notify you of significant changes through the app or by email. Continued use of Niovela after notification implies acceptance of the new policy.
For any privacy queries: privacy@niovela.com
This policy is written in Spanish. In case of discrepancy between versions in other languages, the Spanish version prevails.