Privacy Policy

📖 1. Privacy Overview

Pageleaf ("the App", "we", "us", "our") is committed to protecting the privacy and security of our users. This Privacy Policy describes our practices regarding the collection, use, storage, and disclosure of information when you use our mobile application.

Our Core Privacy Principles:

• Minimal Collection: We collect only the data necessary to provide and improve the App's functionality
• Local First: Your personal reading data is stored locally on your device, not on our servers
• No Account Required: Pageleaf does not require account creation, reducing the personal data we handle
• Transparency: We clearly describe what data we collect and how it is used
• User Control: You maintain control over your data and can delete it at any time

By using Pageleaf, you consent to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the App immediately.

This Privacy Policy applies to all users of Pageleaf worldwide. Where local laws provide additional protections, those protections supplement (and do not replace) the rights described herein.

📊 2. Information We Collect

We have designed Pageleaf to operate with minimal data collection. The types of information we may collect are limited to the following categories:

2.1 Information You Provide Directly

2.2 Automatically Collected Information

2.3 Information We Do NOT Collect

We want to be explicitly clear about what we do not collect:

• Real name, email address, phone number, or any personal identifiers
• Precise geolocation data (GPS coordinates)
• Contacts, calendar, or other personal data from your device
• Browsing history or activity outside the App
• Financial information (processed entirely by Apple)
• Biometric data
• Social media profiles or connections

💾 3. Local Data Storage

Pageleaf employs a local-first architecture. Your personal data — including book entries, reading notes, photographs, ratings, and collection preferences — is stored exclusively on your device using secure local databases and storage mechanisms.

Key aspects of our local storage approach:

• On-Device Database: All reading data is stored in a local SQLite database on your device
• Local Image Storage: Photos and images you capture or import are stored in the App's local document directory
• Preferences: App settings and user preferences are stored using the device's local preferences system
• No Cloud Sync: We do not currently offer or operate any cloud synchronization service
• No Server Upload: Your reading data is never transmitted to our servers or any third-party servers

The local-first approach means that we, as the App developers, cannot access, view, read, or recover your personal reading data. Your library is truly private.

⚙ 4. How We Use Information

The limited information we collect is used solely for the following purposes:

1. Providing Core Functionality: To enable the App's features such as book tracking, note-taking, photo capture, and collection management
2. Processing Transactions: To facilitate in-app purchases through Apple's payment infrastructure
3. Improving the App: To analyze aggregate usage patterns (not individual behavior) that help us improve stability and usability
4. Technical Support: To diagnose and resolve technical issues when you contact us for assistance
5. Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests
6. Safety & Security: To detect, prevent, and address fraud, abuse, security breaches, or technical issues

We will never use your information for purposes that are incompatible with those described in this Privacy Policy without first obtaining your consent.

We do not engage in automated decision-making or profiling based on your usage of the App.

🔗 5. Information Sharing & Disclosure

We do not sell, rent, trade, or otherwise commercially exploit any user information. We may share limited information only in the following circumstances:

We do not share information with:

• Advertising networks or data brokers
• Social media platforms
• Data analytics companies (beyond Apple's built-in services)
• Third-party marketing services
• Any entity for the purpose of targeted advertising

In the event of a merger, acquisition, or sale of assets, any user data would be transferred under the same privacy protections described in this policy, and users would be notified of any such change.

💰 6. In-App Purchase Data

Pageleaf offers optional in-app purchases, including virtual currency and premium features. All payment processing is handled entirely by Apple through the App Store.

What we receive:

• Transaction confirmation (receipt) from Apple
• Product identifier for the purchased item
• Transaction status (success, failure, pending)

What we do NOT receive:

• Your credit card number, bank account, or financial details
• Your Apple ID password or authentication credentials
• Your billing address or contact information

Transaction records are processed by Apple and subject to Apple's Privacy Policy. We encourage you to review Apple's privacy practices for complete information on how they handle your payment data.

Virtual currency balances and purchase history within the App are stored locally on your device and are not transmitted to our servers.

🔎 7. App Tracking & Transparency

In compliance with Apple's App Tracking Transparency (ATT) framework and applicable regulations, Pageleaf requests permission before engaging in any cross-app or cross-website tracking.

Our Tracking Practices:

• No Cross-App Tracking: We do not track your activity across other apps or websites
• No Advertising ID Usage: We do not access or use your device's advertising identifier (IDFA)
• No Fingerprinting: We do not use device fingerprinting techniques to identify you across services
• No Data Linking: We do not link App usage data with data from third parties for advertising purposes

The ATT permission dialog you may see upon first launch is an iOS system requirement. Even if you grant tracking permission, Pageleaf does not currently engage in any tracking activities. The permission is requested as a precautionary measure and to maintain compliance with Apple's guidelines.

You can review and modify your tracking preferences at any time through your device's Settings > Privacy & Security > Tracking.

👶 8. Children's Privacy (COPPA Compliance)

Pageleaf is designed for users aged thirteen (13) and older. We do not knowingly collect personal information from children under the age of thirteen (13) in compliance with the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe that your child under the age of 13 has used Pageleaf or provided personal information through the App, please contact us immediately at the email address provided in the Contact section of this policy.

Upon receiving such notification, we will take the following actions:

1. Verify the report and identify any data associated with the minor
2. Immediately delete any personal information collected from the child
3. Take steps to prevent further collection from the child
4. Respond to the parent or guardian within five (5) business days

For users between the ages of thirteen (13) and eighteen (18), we recommend that a parent or guardian review this Privacy Policy and monitor the minor's use of the App.

🔒 9. Data Security Measures

We take the security of your information seriously and implement appropriate technical and organizational measures to protect against unauthorized access, alteration, disclosure, or destruction of data.

Our security measures include:

• Local Encryption: Your data is stored in the device's sandboxed environment, protected by iOS security features including hardware encryption
• Secure Communication: Any network communication (e.g., for in-app purchases) uses encrypted HTTPS/TLS protocols
• No Server Storage: By not storing personal data on servers, we eliminate the risk of server-side data breaches
• Regular Updates: We release updates to address security vulnerabilities and improve protections
• Code Review: Our codebase undergoes regular security review to identify and address potential vulnerabilities

In the unlikely event of a security breach that affects your data, we will notify affected users and relevant authorities in accordance with applicable laws and regulations.

⏱ 10. Data Retention & Deletion

Since your personal reading data is stored locally on your device, you have complete control over data retention and deletion.

How to manage your data:

• Delete Individual Items: You can delete individual book entries, notes, photos, and other content within the App at any time
• Clear All Data: You can delete all App data by removing Pageleaf from your device
• Export Data: Before deletion, you may export or back up your data through the App's export features or by backing up your device

Data retained by Apple:

• App Store purchase records are retained by Apple according to their data retention policies
• Crash reports and analytics data collected by Apple are subject to Apple's retention policies

If you contact us for support, we may retain correspondence records for up to two (2) years to provide continuity of service and for quality assurance purposes.

Aggregate, de-identified analytics data that cannot be linked to any individual user may be retained indefinitely for product improvement purposes.

⚖ 11. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. These rights may include:

• Right to Access: The right to request information about the personal data we hold about you
• Right to Rectification: The right to request correction of inaccurate personal data
• Right to Deletion: The right to request deletion of your personal data
• Right to Restrict Processing: The right to request that we limit how we use your data
• Right to Data Portability: The right to receive your data in a structured, commonly used format
• Right to Object: The right to object to certain types of data processing
• Right to Withdraw Consent: The right to withdraw previously given consent at any time

To exercise any of these rights, please contact us using the email address provided in the Contact section. We will respond to your request within thirty (30) days, as required by applicable law.

Please note that since most of your data is stored locally on your device, you can exercise many of these rights directly through the App without contacting us.

🌇 12. California Consumer Privacy Act (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

Your CCPA Rights:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: You have the right to request deletion of personal information we have collected
• Right to Opt-Out: You have the right to opt-out of the sale of your personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Correct: You have the right to request correction of inaccurate personal information
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use of sensitive personal information

Categories of Personal Information Collected (last 12 months):

To exercise your CCPA rights, contact us at the email below with "CCPA Request" in the subject line. We will verify your identity before processing your request.

👶 13. Children's Online Privacy (COPPA)

The Children's Online Privacy Protection Act (COPPA) requires that we inform parents and guardians about our practices regarding the collection, use, and disclosure of personal information from children under thirteen (13) years of age.

Our COPPA Commitments:

• We do not knowingly collect personal information from children under 13
• The App is not directed at children under 13
• We do not condition a child's participation on providing more information than is reasonably necessary
• If we learn we have collected information from a child under 13, we will delete it promptly

Parents and guardians can contact us to:

• Review any personal information collected from their child
• Request deletion of their child's personal information
• Refuse further collection or use of their child's information

🏛 14. California "Shine the Light" Law

Under California Civil Code Section 1798.83 ("Shine the Light" law), California residents have the right to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.

We do not share personal information with third parties for their direct marketing purposes. If this practice changes in the future, we will update this Privacy Policy and provide California residents with the opportunity to opt-out of such sharing.

To make a request under the "Shine the Light" law, please contact us at the email address listed in the Contact section with "California Shine the Light Request" in the subject line.

🌎 15. International Data Transfers

Pageleaf is available to users worldwide. If you access the App from outside the United States, please be aware that your information may be processed in the United States, where data protection laws may differ from those in your country of residence.

For European Economic Area (EEA) and United Kingdom (UK) Users:

• Any data transfer to the United States is conducted in compliance with applicable data protection frameworks
• We rely on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses where applicable
• You have the right to lodge a complaint with your local data protection authority

For Users in Other Jurisdictions:

• We comply with applicable local data protection laws
• Data transfers are limited to what is necessary for the App's functionality
• By using the App, you consent to the transfer of your information as described in this policy

If you have questions about international data transfers or your specific rights under local law, please contact us.

🔄 16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the bottom of this policy.

For material changes that significantly affect your privacy rights, we will make reasonable efforts to provide notice, such as:

• Displaying a prominent notice within the App
• Updating the effective date at the top of this policy
• Providing a summary of key changes

We encourage you to review this Privacy Policy periodically. Your continued use of Pageleaf after any changes to this policy constitutes your acceptance of the updated terms.

If you disagree with any changes to this Privacy Policy, you should stop using the App and contact us regarding data deletion.

📧 17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us. We are committed to addressing your privacy-related inquiries promptly and transparently.

Response Times:

• General privacy inquiries: within five (5) business days
• Data access or deletion requests: within thirty (30) days
• CCPA requests: within forty-five (45) days (extendable by an additional 45 days with notice)
• Urgent security or child privacy matters: within two (2) business days

When contacting us regarding a data request, please provide sufficient information to verify your identity and specify the nature of your request.

Thank you for trusting Pageleaf with your reading journey. We are committed to protecting your privacy every step of the way.