Niovela is a personal book tracking app ('the developer', 'we'). This policy explains what data we collect, how we use it and what your rights are.
By using Niovela you accept this policy. If you do not accept it, please do not use the app.
Niovela. Contact: privacy@niovela.com
Users without an account (local mode)
Library data: books added, status, progress, ratings, notes and quotes. Stored exclusively on your device (localStorage).
Your library is never sent to our servers. We do collect aggregated, cookie-free usage statistics, described in section 5.
Users with an account (sync enabled)
Email address and profile name (optional).
Library data, reviews, quotes and reading lists.
Timestamps of activity logs (progress updates, etc.).
If you use 'Continue with Google': we receive your name, email address and Google profile photo.
If you use “Continue with Apple” (in the iPhone app): Apple gives us an identifier for your account and your email address, either your real one or, if you choose to hide it, a private Apple address that forwards to yours. Apple only gives us your name the first time you sign in, and we keep only your first name. If you delete your account from the app, we ask Apple to remove Niovela’s access to your Apple ID.
If you report content or block someone
When you report a review, quote, list or profile, we store which content you report and who posted it, the reason you choose, the note you write if you add one, the date and, if you are signed in, your account; without signing in, the report is anonymous. Only we can see reports, and the person reported does not know who sent it.
If the account of the person who reported or of the person reported is deleted, the report is kept with no link to that account, so that we can detect repeated abuse.
When you block someone, we store in your account who you blocked and when. Only you can see it, in Settings → Privacy → Blocked users, and the other person receives no notice. The record is deleted when you unblock them or when either account is deleted.
Service provision (contract):
sync your library across devices, manage your account and give you access to your data.
Legitimate interest:
improve the technical stability of the app and keep the community safe: reviewing reports, removing content that breaches the terms of use and applying blocks between users.
Consent:
sending reading reminder notifications (only if you explicitly enable them).
We do not use your data for advertising, commercial profiling, or sell it to third parties under any circumstances.
Google Books API:
book searches are sent to Google's API to retrieve metadata (titles, authors, covers). See Google's Privacy Policy.
ISBNdb:
a book catalogue we use as a backup to Google Books. We send it the text of a search only when Google can't find what you're looking for, when you tap “Search more catalogues” or, together with your language, when Google's results include few editions in your language, to look for more; the name of an author you follow, read or look up, together with your language, when Google has few of their books in your language; the ISBN, when you open the page of a book we only know by that number or scan one Google can't find; the title and author of a book Google has no cover for, to look for one; and, when you import a Goodreads or StoryGraph library, the ISBNs of the books in the file, to fill in covers, page counts and other details. These requests come from our server and use our key: ISBNdb does not receive your IP address or any data from your account, and does not know who is asking. Many never reach it, because we cache its answers. ISBNdb may keep the requests it receives in its logs. More information at isbndb.com/privacy-policy.
Supabase:
database and authentication provider. Registered users' data is stored on Supabase servers (EU or US). Supabase is GDPR-compliant and has Standard Contractual Clauses. More information at supabase.com/privacy.
Cloudflare:
the content delivery network that serves the site and protects it from abuse. It processes your IP address to deliver content and tells us the country and, where available, the approximate region and city of the connection. We do not store the IP address. See cloudflare.com/privacypolicy.
Google ML Kit (iOS and Android app only):
the app's ISBN scanner uses this Google library to read the barcode, and it does so on your phone: under the ML Kit terms, neither the camera image nor the scanned code is sent to Google. The ISBN is then looked up like any other book search (see Google Books API). ML Kit does send Google technical metrics about how it runs — such as the device manufacturer, model and OS version, the app's identifier and version, a per-installation identifier that is not intended to uniquely identify you or your phone, latency, image format and resolution, and the scanner's events and error codes — and it may contact Google to receive bug fixes and updated models. Google uses these metrics to measure performance, debug, maintain and improve ML Kit, and detect abuse. Niovela does not pass it any data from your account or your library. More information at developers.google.com/ml-kit/terms and policies.google.com/privacy.
Reports also reach us as a notice through Telegram (telegram.org/privacy), so we can review them in time: the notice includes the reason, the note, an excerpt of the reported content and the name and identifier of its author and, if the report was sent by someone signed in, of the person who reported. Apart from the services listed here and that notice, we do not share your data with any other third party.
Niovela does not use tracking or advertising cookies. We use the browser's localStorage to save your library locally and app preferences (theme, language). This storage is strictly necessary for the app to function and does not require consent under GDPR.
To understand which parts of the app are used and to spot failures we use Umami, an analytics tool we host on our own infrastructure (analytics.niovela.com). It sets no cookies, creates no permanent identifiers, does not follow you across websites and sends nothing to third parties.
We record: the page visited and the referring page, the language, the browser, the operating system and device type, the country and, where available, the approximate region and city reported by Cloudflare, technical loading metrics (response time, rendering speed and visual stability) and certain usage events. Some of those events include the title of the book you add or finish, the author you start following, and the text you type into the book search.
We do not store your IP address and we do not link it to your account or email. Umami groups activity into anonymous sessions recalculated daily from technical data, with no permanent identifiers. The legal basis is our legitimate interest in understanding and improving the product (Art. 6(1)(f) GDPR). If you would rather stay out of these statistics, write to privacy@niovela.com and we will apply it.
If you reside in the European Union, your data may be transferred to countries outside the European Economic Area (e.g., the US, where Supabase operates). These transfers are carried out with appropriate safeguards (European Commission Standard Contractual Clauses).
We keep your data while your account is active. When you delete your account, your data is deleted from our database right away; the next section explains how to do it and what is kept. Data in local mode (no account) remains on your device until you delete it or clear your browser data.
You can delete your Niovela account and the data linked to it at any time, from the app or from the website. Deletion happens right away and cannot be undone. If you want to keep a copy, download it first from Settings → Export history.
Deleting your account only clears the device where you do it. If you use Niovela on other devices, first go on each of them to Settings → Account → Sign out and choose “Sign out and wipe this device”. Otherwise they keep their local copy until you clear the site data or uninstall the app.
Questions about deleting your data: privacy@niovela.com.
If you reside in the European Economic Area, you have the following rights:
Access:
request a copy of your data (available in Settings → Export).
Rectification:
correct inaccurate data from your profile.
Erasure:
delete your account and your data (Settings → Danger zone → Delete account; see “Deleting your Niovela account” above).
Portability:
download your data in JSON or CSV format (available in Settings → Export).
Objection and restriction:
contact us by email.
To exercise any right not directly available in the app, write to us at privacy@niovela.com. We will respond within a maximum of 30 days. You may also lodge a complaint with your national data protection authority.
We take reasonable technical measures to protect your data: encrypted communications (HTTPS/TLS), secure authentication via Supabase Auth and restricted access to production data. However, no system is 100% secure.
Niovela is not intended for children under 13. If you are under 13, you must not use the app. If we become aware that we have collected data from a minor without appropriate parental consent, we will delete it immediately.
We may update this policy occasionally. We will notify you of significant changes through the app or by email. Continued use of Niovela after notification implies acceptance of the new policy.
For any privacy queries: privacy@niovela.com
This policy is written in Spanish. In case of discrepancy between versions in other languages, the Spanish version prevails.