Privacy Policy

1. Introduction

This Privacy Policy explains how Intellibre collects, uses, and protects your personal data in accordance with UK data protection laws, including the UK GDPR, and the EU GDPR where it applies to you.

2. Data Controller

Intellibre is the data controller responsible for your personal data.

Contact: info@intellibre.com

3. Information We Collect

• Your email address and the username you choose
• Your account and subscription status
• Your library, reading paths, ratings, reviews, and progress
• User-generated content — circle posts, comments, claims, and published reading paths
• Your interactions with other users (follows, circle membership, mutes)
• Usage and device data, if you consent to analytics (see section 7)

4. How We Use Your Data

• To provide and operate the service
• To personalise your recommendations and reading paths
• To enable social features such as circles and challenges
• To process subscriptions
• To communicate with you about your account
• To understand how the service is used and improve it, where you have consented

5. Legal Basis for Processing

• Contract: to provide the service you have signed up for
• Consent: for analytics and any non-essential storage on your device. You can withdraw consent at any time (see section 7)
• Legitimate interests: to secure the service, prevent abuse, and moderate user-generated content
• Legal obligation: where we are required to retain or disclose data

6. Public and Private Information

Your email address and the display name from your sign-in provider (for example, your Google account name) are private and are never shown to other users.

Anything you publish — a shared path, a circle post, a comment, a public review, a leaderboard entry — is attributed to your chosen username, never your real name.

7. Analytics and Your Consent

We use Google Analytics to understand how the service is used so we can improve it. This is off by default on both the website and the mobile apps, and nothing is collected unless you actively opt in.

When you have consented, we send Google Analytics:

• A randomly generated identifier for your browser or device. It is created locally, is not derived from your name, email, or any device or advertising identifier, and is deleted if you withdraw consent
• Your account identifier, so your activity is consistent across your devices
• The names of actions you take — for example that you added a book to your library — together with non-identifying details such as counts, categories, and how long something took

We do not send the text you write. Circle posts, comments, reviews, notes, and messages to the AI coach are never included in analytics data. We do not use advertising cookies, we do not allow the data to be used for ad personalisation, and we do not track you across other websites or apps.

To change your choice: on the website, use the cookie banner or Settings → Privacy & data. In the mobile app, use Settings → Anonymous usage data. Turning analytics off stops collection immediately and discards the identifier described above.

8. Cookies and Local Storage

We use first-party cookies and local storage that are strictly necessary to keep you signed in and to remember your privacy choice. These do not require consent.

Analytics cookies are only set after you opt in, and are never set beforehand. We do not use advertising cookies or cross-site trackers.

9. Payments

Subscriptions are handled by RevenueCat. Payments made in the mobile apps are processed by Apple or Google; payments made on the website are processed by RevenueCat's payment provider. Intellibre never receives or stores your card details.

10. External Services

We use a small number of third parties, each receiving only the data necessary for its function:

• Google Firebase — authentication, database, hosting, and push notifications
• OpenAI — generating reading paths, recommendations, and coaching. OpenAI receives the text of your request but not your email address or account identifier
• Google Analytics — usage analytics, only with your consent
• RevenueCat — subscription management
• Sentry — error diagnostics
• Google Books, Hardcover, and ISBNdb for book metadata, and the New York Times and Guardian for editorial book lists

11. Sharing Your Data

We do not sell your personal data, and we do not share it for advertising. We share data only with the service providers listed above, and with legal authorities where we are legally required to.

12. International Transfers

Some of our service providers are based in the United States. Where personal data is transferred outside the UK or EEA, it is protected by an approved safeguard — the UK extension to the EU–US Data Privacy Framework, or Standard Contractual Clauses.

13. Data Retention

We keep your account data for as long as your account exists. If you delete your account, it is removed as described in section 15.

Analytics data is retained by Google Analytics for a limited period set in our Analytics configuration, after which it is deleted automatically.

14. Your Rights

Under UK and EU GDPR you have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Request deletion
• Restrict or object to processing
• Withdraw consent at any time, without affecting processing already carried out
• Data portability
• Complain to a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk)

To exercise any of these, contact info@intellibre.com.

15. Deleting Your Account

You can delete your account at any time from the Settings page. Deletion removes every record we hold about you — your library, reading paths, ratings, reviews, posts, follows, profile, username reservation, and sign-in account — within minutes. See the account deletion page for details.

16. Data Security

We use appropriate technical and organisational measures to protect your data. No system is completely secure, and we cannot guarantee absolute security.

17. Children's Data

Intellibre is available to users aged 12 and over. We do not knowingly collect data from children under 12. If you believe a child under 12 has given us personal data, contact us and we will delete it.

18. Third-Party Links

The service may link to third-party sites. We are not responsible for their privacy practices.

19. Changes to This Policy

We may update this policy from time to time. If we make a material change to how we use your data, we will ask for your consent again where the law requires it.

20. Contact

For any privacy-related query, contact info@intellibre.com.