Privacy Policy
Inktrail · Last updated 26 August 2026
Inktrail (“we”, “our”) is a social reading tracker. This policy explains what we collect, why, and your choices.
Data we collect
- Account: email address, password (stored hashed), display name, optional bio.
- Library: books you add, reading status (want / reading / read), page progress, dates.
- Social: friend connections, feed activities (started, progress, finished), reactions you send.
- Device: authentication token stored securely on your device. We do not collect device advertising IDs.
Data we do not collect
- Photos or camera images — the camera is used only on-device to scan ISBN barcodes; images are not uploaded.
- Precise location, contacts, or payment information.
How we use data
- Provide the service: library, friends, feed, achievements, share cards.
- Look up book metadata (title, author, cover, ISBN) from third-party catalogs when you search or scan.
- Operate and secure our API (authentication, abuse prevention).
Third-party services
- Open Library — book search and metadata.
- Google Books — ISBN and search metadata (when API key configured).
- ISBNdb — optional ISBN lookup.
- Book cover images may be loaded from these providers’ URLs and shown in the app.
Where data is stored
Account and library data are stored on our servers (cloud-hosted Microsoft SQL database). The API runs on encrypted HTTPS. Infrastructure may use providers in the EU (e.g. AWS eu-west-1).
Sharing with others
Your display name, reading activities, and library events may be visible to friends you connect with on Inktrail. We do not sell your personal data.
Retention
We keep your data while your account is active. When you delete your account in the app (Profile → Delete account), we permanently remove your user record, library, friendships, and activities from our database.
Your rights
- Access and update your profile in the app.
- Delete your account in the app at any time.
- Contact us for privacy requests: a.vicol.mail@gmail.com
Children
Inktrail is intended for users aged 13 and older. We do not knowingly collect data from children under 13.
Changes
We may update this policy. The “Last updated” date will change. Continued use after updates means you accept the revised policy.