Privacy Policy

Effective date: July 6, 2026

This policy explains what information Bibli collects, how we use it, and the choices you have. The short version: we collect what we need to run a social book-ranking service, we don't sell your data, and you can ask us to delete your account and data at any time.

1. Information we collect

Account information. When you sign in with Google, we receive your name, email address, and profile picture from your Google account. When you sign in with an email magic link, we collect your email address. We use this to create your account, suggest a handle, and set your initial display name and avatar — all of which you can change in settings.

Content you create. Your book rankings and comparisons, shelves, notes, comments, likes, follows, blocks, and profile details.

Imported reading history. If you upload a Goodreads export, we store the rows needed to match books to your library. You choose whether to import; you can remove imported books like any other.

Usage analytics. We use PostHog to understand how the product is used (for example, which features are used and where people drop off). This includes device and interaction data associated with your account.

Logs and diagnostics. Our hosting providers keep standard server logs (IP address, browser type, pages requested), and we may collect error reports to fix bugs.

2. How we use Google user data

Bibli's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We request only basic profile scopes (your name, email address, and profile picture) — nothing else.
  • We use this data solely to authenticate you and set up your Bibli profile.
  • We do not sell Google user data, use it for advertising, or transfer it to third parties except as needed to provide the Service (see section 4) or as required by law.
  • Humans do not read this data except with your consent, for security purposes, to comply with law, or when aggregated and anonymized.

3. How we use your information

  • To provide the Service: your rankings, profile, and feed.
  • To power social features: your public profile, rankings, and activity are visible to other users; taste-match scores are computed from your rankings.
  • To send you sign-in emails (magic links).
  • To understand usage and improve the product.
  • To keep the Service safe: moderation, spam and abuse prevention.

We do not sell your personal information, and we do not use it for third-party advertising.

4. Who we share it with

We share data only with the service providers that run Bibli, and only so they can provide their services to us:

  • Supabase — database, authentication, and file storage.
  • Vercel — application hosting.
  • PostHog — product analytics.

We may also disclose information if required by law, or to protect the rights, safety, or security of Bibli and its users. Content you post publicly (rankings, comments, your profile) is visible to other users and to anyone you share links or share cards with.

5. Cookies

We use cookies to keep you signed in (authentication session cookies) and, via PostHog, to measure product usage. We do not use third-party advertising cookies.

6. Data retention and deletion

We keep your data for as long as your account exists. You can delete individual content (rankings, comments, imports) in the app. To delete your entire account and its data — including data obtained from Google — email biblisupport@gmail.com and we will delete it within 30 days, except where we must retain records to comply with law. You can also revoke Bibli's access to your Google account at any time in your Google account settings.

7. Security

Your data is stored with Supabase and protected by access controls including row-level security, and all traffic to Bibli is encrypted in transit (HTTPS). No system is perfectly secure, but we work to protect your information and will notify you of any breach as required by law.

8. Children

Bibli is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has an account, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the effective date above and, where practical, notify you in the app.

10. Contact

Questions or requests about your data? Email biblisupport@gmail.com.

See also our Terms of Use.