Privacy Policy
This Privacy Policy explains how the BookAtlas mobile app (“BookAtlas”, the “App”) handles your personal data. BookAtlas is operated by Furkan Oruçoğlu, who is the data controller.
Data controller: Furkan Oruçoğlu
Email: destek@bookatlas.info
In short: we store what you put into the App so we can show it back to you as a map, a list and statistics. We do not show ads, we do not use third-party analytics, and we do not sell your data. You can export your books and delete your account at any time.
1. Data we process
- Identity: full name, username, date of birth.
- Contact: email address.
- Image: your profile photo, if you upload one.
- Your content and activity: the books you log (title, author, ISBN, country, city, reader name, finish date and your notes), your reading list, reading goals, reading statistics, the short bio on your profile, a record of map cards you share, the requests you type to the AI assistant, and the history of book and movie recommendations you receive.
- Subscription: Premium status, plan, purchased product, store, start and end dates. We never receive your payment card details; payments are taken by the App Store or Google Play.
- Security: IP address, session and access logs, and daily usage counts for the AI and search features.
- Preferences: your language preference and app settings, which are stored locally on your device together with your session.
The App does not request location permission; you type the country and city yourself. The camera is used only to scan a book barcode or, if you choose, take a profile photo. The photo library is used only to pick a profile photo.
Book notes are free text. Please do not enter sensitive information about yourself (such as health, beliefs or political views) or personal data about other people.
2. Why we process it
- To create and manage your account and verify your identity.
- To store your book entries and build your world map, reading list, goals and statistics.
- To search for books, look up ISBNs and show cover images.
- To prepare AI book and movie recommendations based on your reading history and your request.
- To run Premium subscriptions and free trials.
- To prevent abuse, apply daily usage limits and keep the service secure.
- To answer your requests and complaints.
- To fix bugs and improve the service.
- To comply with legal obligations.
We do not use your data for advertising or sell it to third parties.
3. Legal bases
- Performance of a contract: your account and all core features, including AI recommendations and subscriptions.
- Legitimate interests: preventing abuse, security, fixing bugs and improving the service.
- Legal obligation: responding to lawful requests from authorities and meeting retention duties.
- Consent: the transfer of your data to service providers outside Türkiye, as described in the Turkish Explicit Consent Statement.
4. Who we share it with
We share personal data only with the service providers that are needed to run the App. Their servers are located outside Türkiye and, for some users, outside their own country.
| Recipient | Country | Data | Purpose |
|---|---|---|---|
| Supabase Inc. | USA | Account, profile, book entries, reading list, goals, recommendation history, profile photo, session and access logs | Database, authentication, file storage and server functions |
| Anthropic PBC | USA | Title, author and country of the books you have read; previously recommended works; the request you type to the assistant. Your name, email address and user ID are not sent. | Generating AI book and movie recommendations |
| Google LLC (Google Books) | USA | Your book search query or ISBN (relayed through our server); your IP address when a cover image loads | Book details and cover images |
| Internet Archive (Open Library) | USA | Your book search query or ISBN (relayed through our server); your IP address when a cover image loads | Book details and cover images |
| OpenStreetMap Foundation (Nominatim) | United Kingdom | The city and country name you enter on a book entry (relayed through our server) | Placing the city on the map |
| OMDb API | USA | Title and year of a recommended movie (relayed through our server) | Movie poster image |
| RevenueCat, Inc. | USA | Your user ID, purchased product, subscription status and period | Managing Premium subscriptions |
| Apple Inc. / Google LLC (app stores) | USA | Purchase and subscription transactions. Your payment card details are handled only by the store and are never shared with us. | Taking payment |
We may also disclose data to public authorities when we are legally required to do so.
5. AI recommendations
Book and movie recommendations are generated by an AI model and may contain mistakes. They are suggestions only and have no legal or similarly significant effect on you. To prepare a recommendation we send the titles, authors and countries of books you have read, plus any request you type; we do not send your name, email address or user ID. You can send feedback or objections about recommendations to destek@bookatlas.info.
6. How long we keep it
We keep your data for as long as your account exists or until you ask us to delete it. Access and activity logs are kept for no more than 12 months. When you delete your account, your account details, book entries, reading list, goals, recommendation history and profile photo are deleted. Records we are legally required to keep, or that are needed to establish or defend a legal claim, are kept for the relevant statutory period and then deleted or anonymised. See Account Deletion.
7. Security
- Data is transmitted over TLS/SSL encryption.
- Access to records is controlled with Supabase Row Level Security (RLS).
- Passwords are stored as hashes.
- Keys for third-party services are held on the server, not in the App.
- Security updates are applied regularly.
8. Children
BookAtlas is not directed at children under 13, and you must be at least 13 to create an account. If you are under 18, you may use the App only with the consent of a parent or guardian. If you believe a child under 13 has created an account, contact us and we will delete it.
9. Your rights
Under the Turkish Personal Data Protection Law No. 6698 you have the right to learn whether your data is processed, request information about it, learn the purpose of processing, know the third parties it is transferred to, request correction or deletion, object to results arising from solely automated analysis, and claim compensation for unlawful processing.
If you are in the European Economic Area or the United Kingdom, you also have the right to access, rectify, erase and port your data, to restrict or object to processing, to withdraw consent at any time, and to lodge a complaint with your local data protection authority.
To exercise your rights, write to destek@bookatlas.info from the email address registered to your account. We respond within 30 days at the latest.
10. Changes
We may update this policy when our processing or the law changes. The current version is always published on this page, and we announce significant changes in the App.