Back to Home
Bookly security & privacy

Privacy Policy.

We believe your notes and thoughts belong to you. This policy explains what information we collect, how it is stored securely through Supabase, and your choices regarding your personal data.

Effective date: October 12, 2026 Data Protection

Bookly ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of information when you use our mobile application, website, and related services (collectively, the "Services").

By accessing or using Bookly, you agree to the collection and use of information in accordance with this policy.

1. Overview

Bookly operates on a simple principle: minimize data collection and maximize security. We do not sell your personal notes, track your web browsing habits outside the app, or inject advertisements into your workflow.

2. Information We Collect

To provide core synchronization and account features, we may collect:

  • Account Credentials: Your email address and securely hashed authentication passwords managed via Supabase Auth.
  • User Content: Notes, books, tasks, calendar events, and metadata (such as custom colors and tags) that you explicitly create and save in Bookly.
  • Shared Book Links: Metadata associated with books you choose to publish or share via temporary deep-links (bookly://b/...).
  • Technical Diagnostics: Basic anonymized crash logs and version numbers to help us fix bugs and improve stability.

3. How Personal Data is Collected

Data enters the Bookly ecosystem through two primary pathways:

  • Direct Input: Information you provide when registering an account, resetting your password, or typing notes into the editor.
  • Automated Sync: When connected to the internet, the Bookly mobile and web client automatically communicates with our database to synchronize your notebooks across your verified devices.

4. Storage and Supabase Backend

Your account data and synced notes are stored securely using Supabase, which provides enterprise-grade cloud infrastructure, row-level security (RLS) policies, and encrypted database storage.

Transactional recovery and authentication emails (such as password resets) are dispatched securely via Brevo.

Depending on your configuration, certain cache files and drafts may also reside locally in encrypted device storage on your hardware.

5. How We Use Your Data

We use the collected information strictly to:

  • Authenticate your identity and maintain your account state.
  • Synchronize your notes and tasks across your authorized devices.
  • Process password recovery requests and deliver essential service announcements.
  • Detect, prevent, and resolve technical bugs or security threats.

6. Data Sharing and Third-Party Services

We do not rent, trade, or sell your personal data. We only share data with trusted infrastructure partners necessary to operate the Services:

  • Supabase: For secure database hosting and user authentication token management.
  • Brevo: For transactional email delivery.
  • Vercel: For hosting our web frontend and clean URL routing.

These providers are bound by strict security obligations and may only process your data on our explicit instructions.

7. Your Rights and Choices

You maintain full control over your information:

  • Access & Export: You can view and export your notes directly from the application interface at any time.
  • Account Deletion: You may request complete deletion of your account and associated cloud data by navigating to your account settings or contacting our support team.
  • Local-Only Mode: Where supported, you can utilize Bookly locally without linking a cloud account.

8. Children's Privacy

Bookly is not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us so we can take steps to remove it.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any modifications by posting the new Privacy Policy on this page and updating the effective date at the top.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to the Bookly team through our official support channels.

Your Security Matters Never share your Supabase authentication tokens, passwords, or account backup keys with anyone. Bookly staff will never ask for your password.