Privacy policy

The short version

• Your journal stays on your phone. Books, reading sessions, notes, covers, goals and shelves live in the app’s own storage. They are never sent to us.
• No account. You never sign up, and we never ask for your name or email.
• Finding a book sends only what you type. When you search, the words or ISBN you type go to our book-lookup service to find matches. Nothing else about you or your library goes with them.
• We count a few things, never your books. For example "a book was added" or "an import finished with 212 books", never a title, an author or a note.
• Payments go through Apple. RevenueCat tells the app whether Pro is active.
• No ads, no ad trackers, no AI.
• Back up, export and delete are always free, with or without Pro.

Who we are

Paperleaf is made by Botiksha AI, Bengaluru, India (botiksha.com), the "we" in this policy. Contact us at support@botiksha.com.

What stays on your phone

Everything you put into Paperleaf: your books, reading sessions and pages, ratings, notes, covers you add, shelves, your yearly goal, your reminder time and your answers to the setup questions. It is stored in the app’s private storage on your device, and a small summary (your goal and current book) is shared with Paperleaf’s own widgets on the same phone. We have no copy and no way to see it.

Your phone’s own backup (iCloud or your computer) may include the app’s data, following your Apple settings. We never receive that backup.

If you delete the app, everything stored inside it is deleted with it. A backup file or CSV you saved stays wherever you saved it.

Importing from Goodreads

When you import a Goodreads export, the file is read on your phone. It is not uploaded to us or to anyone else.

Finding a book

When you search for a book or enter an ISBN on the Add screen, the app sends what you typed and the app’s version number to our book-lookup service (run by us on Cloudflare). The service asks a book catalogue, Hardcover (hardcover.app), and returns the matches. No account ID, device ID or anything from your library is sent.

Our lookup service does not store your searches. Like any internet service it sees your IP address while answering, and uses it only briefly to stop abuse (a limit on how many searches one address can make per minute). Results for an ISBN may be cached by ISBN alone, so the next reader looking up the same book gets it faster; that cache contains book details, nothing about who asked.

If you pick a result with a cover, your phone downloads the cover picture directly from Hardcover’s image server, which sees your IP address like any website you visit. The picture is then saved on your phone.

What we collect

Usage counts (PostHog). To see whether the app works and where people get stuck, the app sends short events such as "onboarding completed", "book added", "reading logged", "import finished" or "paywall shown". Some carry a number or a fixed word, for example how many books an import added, whether you read in pages or minutes, your yearly goal number or which wrap style you shared. Events also carry the app version, the device model and operating system, and a random ID created on install. They never include a book title, an author, a note or your name. PostHog processes this for us on servers in the United States.

PostHog does not store your IP address.

Purchases (Apple and RevenueCat). Apple handles payment; we never see your card or Apple ID. RevenueCat receives a random app user ID, which products you bought, the price, your country and basic device information, and tells the app whether Pro is active.

Support. If you email us, we receive your email address and what you write, and use it only to reply.

What we never do

• Sell or rent your data, or share it for targeted advertising.
• Include advertising, attribution or data-broker SDKs in the app.
• Send your library, your notes or your reading history to anyone.
• Use anything you write to train AI.

How long we keep it

Your journal: on your phone, for as long as you keep it. Usage events: up to 12 months in PostHog, then deleted. Purchase records: as long as tax and accounting law requires. Support emails: up to 2 years after the conversation ends. Book searches: not kept.

Your choices and rights

• Back up everything (books, sessions and covers) into one file, and restore it on any phone: You › Back up / Restore.
• Export your books and your reading sessions as CSV files: You › Export.
• Delete everything on the phone at once: You › Delete all my data.
• Ask us about the usage and purchase data described above, or ask us to delete it: email support@botiksha.com. See Delete your data.

Depending on where you live (for example India, the EU, UK or California) you have rights to access, correct, delete and port your data and to object to processing. We answer within 30 days and never charge for it.

Children

Paperleaf is not directed to children under 13, and we do not knowingly collect data from them.

Changes

If we change this policy we update the date below and, for any important change, tell you in the app before it applies.