Privacy Policy
Shelfling (“we,” “us”) provides a reading companion app and related website for families. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to our mobile app, shelfling.app, and related services that link to this policy.
1. Who this is for
Shelfling is designed for parents and caregivers to use with children. If you are a parent or guardian, you are responsible for creating and managing child profiles and for deciding how the app is used with young readers. Our COPPA notice summarizes how we treat children’s information under U.S. law.
2. Information we collect
2.1 You provide
- Family / reader profile data. Such as names or nicknames, child birthdates or ages (for recommendations and display), avatars or theme choices, reading interests, and similar profile details you enter.
- Reading activity and content. Books you add or scan, reactions, notes, quotes, reading sessions, streaks, achievements (“XP”), library or classroom details you choose to log, and other content you save in the app.
- Account information. If you sign in or use cloud features, we may collect email address, authentication identifiers, and family membership data associated with your account.
- Communications. Messages you send us (for example at hello@shelfling.app), waitlist or support forms, and similar contact information.
2.2 Automatically
- Device and app data. Such as device type, OS version, app version, coarse diagnostics needed to run the app, and similar technical data. We do not use this policy to authorize invasive tracking across unrelated apps or sites.
- Local storage. Much of your library and reading history may be stored on your device (for example with Apple SwiftData) until or unless you enable cloud sync.
2.3 Optional cloud, AI, and discovery features
- Hosted infrastructure. If you use account or sync features, data you choose to sync may be stored with our database and authentication providers (for example Supabase or comparable services). Only the data you sync or submit leaves your device for those features.
- Catalog and discovery. We may operate hosted book catalog or “discover” services that your app queries (for example metadata and curated lists). Optional feedback you submit about catalog items (such as interest signals) may be stored to improve recommendations.
- AI features (“Magic Storyteller,” “Ask Pip,” and similar). When you use AI features, your prompts and related context you submit are sent over HTTPS to an application server we operate (for example a Cloudflare Worker) and forwarded to our AI provider (for example Anthropic) solely to generate a response. We do not use those requests to train third-party models. Do not submit sensitive personal data in free-text prompts unless you are comfortable with it being processed by our subprocessors for that request.
3. How we use information
We use information to provide, maintain, and improve Shelfling; personalize reading suggestions and the growth experience; operate optional cloud sync and educator or classroom features you enable; process transactions or subscriptions where offered; detect abuse; comply with law; and communicate with you about the service. Push notifications or email are only used according to your device and account settings.
4. Legal bases (EEA / UK visitors)
If data protection law in your region requires a “legal basis,” we rely on performance of a contract (providing the service), legitimate interests (for example security, product improvement, and optional analytics that are not intrusive), consent where required (such as certain cookies or marketing), and legal obligation where applicable.
5. Sharing and subprocessors
We share information with vendors who help us run Shelfling (“subprocessors”), such as cloud hosting, authentication, email delivery, analytics consistent with this policy, payment processing for paid plans, and AI inference providers for optional AI features. They are permitted to use data only to provide services to us. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger or asset sale (with notice where required).
6. Children’s privacy
We do not knowingly collect personal information from children under 13 except as part of a parent-created family account and with appropriate parental involvement, consistent with the U.S. Children’s Online Privacy Protection Act (COPPA). See our COPPA notice for details and parental rights.
7. Retention
We retain information as long as your account is active or as needed to provide the service. You may delete data in the app or request deletion as described below. Backups may persist for a limited period before erasure. Aggregated or de-identified data may be retained for analytics.
8. Security
We use reasonable technical and organizational measures to protect information, including encryption in transit for network requests and industry-standard access controls for cloud systems. No method of storage or transmission is 100% secure.
9. Your choices and rights
- Access and correction. Much of your data can be viewed or edited in the app.
- Deletion. You may request deletion of cloud-held personal data by contacting hello@shelfling.app. Local-only data is removed when you delete the app or use in-app deletion where available.
- California residents. You may have additional rights under the CCPA/CPRA (for example to know, delete, and opt out of certain “sales” or “sharing” — we do not sell personal information for money as traditionally defined). Contact us to exercise rights.
- EEA / UK residents. You may have rights to object, restrict processing, or port data. Contact us or your supervisory authority.
10. International transfers
If you access Shelfling from outside the United States, your information may be processed in the United States or other countries where we or our vendors operate. Where required, we use appropriate safeguards (such as standard contractual clauses).
11. Changes
We may update this policy from time to time. We will post the new version here and update the “Last updated” date. For material changes, we may provide additional notice (for example in-app or by email).
12. Contact
Privacy questions and requests: hello@shelfling.app
For EU/UK data protection inquiries you may also contact us at the same address; we will respond within the timeframes required by law when applicable.