Privacy Policy

Last updated: May 2026

BookCard is a local-first iOS app. Most users will never touch our servers. Here's exactly what we collect, why, and what we never do.

What we collect

• Nothing by default. Your library — every book, rating, mood tag, note, reading log entry — lives in SwiftData on your device. We do not see it, sync it, log it, or back it up unless you ask.
• If you turn on iCloud sync (Pro): your library mirrors via Apple's CloudKit private database into your iCloud account. We never see the contents. Apple stores it encrypted on your behalf.
• App Store purchase state. If you buy BookCard Pro, Apple tells your device "this Apple ID is entitled." We never see your card details, name, or email.

What we never do

• No third-party analytics SDKs (no Mixpanel / Amplitude / Firebase / PostHog).
• No advertising SDKs.
• No crash-reporting SDKs (we use Apple's built-in MetricKit only).
• No data brokers, no Amazon, no affiliate tracking.
• No selling, no sharing, no "anonymized aggregate" reselling.

Third-party services we DO touch

• Open Library (openlibrary.org). When you scan a barcode or search by title, your device queries the public Open Library API for cover and metadata. They see standard request metadata (IP, user-agent). They are a non-profit and do not share that data. Their policy: openlibrary.org/help/faq/about.
• Apple iCloud (only if you enable sync). Stores your shelf in Apple's CloudKit private DB. We never see it. Apple's policy: apple.com/legal/privacy.
• Apple App Store. Processes your one-time $4.99 unlock. We see a transaction identifier; never your card. Apple's policy applies.

How long we keep things

On-device: forever, until you delete the app or tap "Delete everything" in Settings. iCloud-synced (Pro): until you turn off sync or delete from iCloud. On our servers: nothing — we don't have user records.

Deleting your data

Settings → Delete everything wipes every book, log, and note on your device. If you've enabled iCloud sync, also sign in to iCloud.com → BookCard → delete the dataset to clear Apple's copy.

Children

BookCard is suitable for ages 4+. We do not knowingly collect data from anyone — adult or child — because we do not collect data at all by default.

Contact

Questions? hello@toolbelt.app. We answer.