Privacy Policy

Effective October 14, 2026

CozyShelf is a reading tracker for iPhone, Android and the web. This policy explains what we collect, why, who else sees it, and how you can delete it. "We" and "us" mean CozyShelf, operated by Joanna Leslie. You can reach us at hello@cozyshelf.app.

The short version: we collect what the app needs to keep your library and journal safe across your devices, plus basic usage events so we can fix and improve it. We do not sell your data, we do not show ads, and we do not track you across other apps or websites.

What we collect

Your account. If you create an account, we store your email address and a securely hashed password. An account is optional. If you use CozyShelf without one, your data stays on your device only and is not backed up.

Your reading data. The books in your library, their status and dates, ratings, rereads, shelves, journal entries, reading notes, habits, timer sessions and app settings. If you sign in, this is saved to our database so it syncs between your devices and survives a lost phone. If you add a profile photo, a small copy of it is saved with your account.

Files you import. When you import a Goodreads, StoryGraph or Kobo export, or restore a CozyShelf backup, the file is read on your device and the books in it become part of your library. We do not keep the original file.

The camera. The barcode scanner uses your camera to read a book's ISBN. Images are processed on your device and are never uploaded or stored.

Usage events. The app records events such as "book added", "paywall opened" or "scan failed", together with your platform (iOS, Android or web), app version, whether you are signed in, whether you have Pro, and a random session code that resets each time you open the app. If you are signed in, events are linked to your account ID. We use them to find bugs and understand which features help readers. We do not collect advertising identifiers or device identifiers.

Purchases. Subscriptions are sold and billed by Apple or Google. We never see your card or payment details. We receive confirmation that you subscribed and which plan you chose, so we can unlock Pro on your account.

Technical information. Like any internet service, the servers that answer the app's requests see your IP address and basic device information. We do not use it to identify you.

Who else sees your data

We use a small number of services to run CozyShelf. Each sees only what it needs:

We do not sell or rent your personal information, and we do not share it for advertising. We will disclose information only if required by law, or to protect the safety of our users or the integrity of the service.

Why we use it

How long we keep it

Deleting your data

You can delete your account at any time inside the app: open Profile and tap Delete account. This permanently removes your account and your synced library, journal and settings from our database. You can also email hello@cozyshelf.app and we will do it for you. Deleting the app alone does not delete your account. If you have a subscription, cancel it separately in your Apple or Google account settings.

Your rights

Depending on where you live, including the European Union, the United Kingdom and California, you have the right to access the personal data we hold about you, correct it, delete it, receive a copy of it, object to or restrict how we use it, and withdraw consent you have given. To use any of these rights, email hello@cozyshelf.app. We will respond within 30 days and will never treat you differently for asking. You can also export your library at any time from inside the app.

If you are in the EU or UK and are unhappy with how we handle your data, you can complain to your local data protection authority.

International transfers

Our service providers may store or process data in countries other than your own, including the United States. Where the law requires it, these transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Children

CozyShelf is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, email us and we will delete it.

Security

Your data travels over encrypted connections, and our database only allows each signed-in reader to read and change their own records. No system is perfectly secure. If a breach ever affects your personal data, we will notify you by email without undue delay, explain what happened and tell you what we are doing about it.

Changes to this policy

If we change this policy, we will update the date at the top. For significant changes, we will also tell you in the app or by email before they take effect.

Contact

Questions about privacy: hello@cozyshelf.app