Who is responsible
Kapi is a personal reading tracker app created by Adrià Solé Cecilia (Molins de Rei, Barcelona). For anything about your data: [email protected].
What data we process
- Your account: name, email and password (stored encrypted). If you log in with Google or Apple, the identifier that service gives us. If you choose to hide your email with Apple, we only see Apple’s forwarding address.
- Your preferences: language, theme and appearance.
- Your reading: the books on your shelf, their status, the pages you log each day, your ratings, reviews and goals.
- Cover photos you take or choose for a book. The app only uses the camera and photos when you ask it to, for that purpose.
- Searches: what you type in Search is sent, through our server, to Google Books and Open Library to find the book. They only receive the search text, never your account. We store how many searches you make each day, to set a limit that protects the service. Your recent searches stay on your phone only.
What we use it for
To make the app work: saving your reading, having it on all your devices and sending you a code if you forget your password. And to keep the service secure (usage limits, security notices about your account).
There’s no advertising and no analytics. We don’t sell your data or build profiles with it.
Legal basis
By using the app you accept the service we provide: we process your data to provide it (Art. 6(1)(b) GDPR). The security of the service is based on our legitimate interest (Art. 6(1)(f)).
Something we share without identifying you
When you add a book from the catalogue that doesn’t list its pages and you enter them, that number may help other people who add the same book. It’s stored with no link to your account.
Who helps us provide the service
- Supabase: database, accounts and photos, hosted in the European Union (Frankfurt).
- Resend: sending the app’s emails.
- Google and Apple: only if you choose to log in with them.
- Google Books and Open Library: book search (only the search text).
- Cloudflare: hosting this website and forwarding the contact email.
Some of these services may process data outside the European Union, with the safeguards required by the GDPR (standard contractual clauses or the EU-US Data Privacy Framework).
How long we keep it
For as long as you have an account. If you delete it, everything is erased immediately. A copy may remain in the provider’s backups for a few days, until they are renewed.
Your rights
You can ask to access, correct, delete or take your data with you, restrict its use or object to it, by writing to [email protected]. If you think we aren’t handling it properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Minimum age
Kapi is for people aged 14 and over.
Changes
If we change this policy, we’ll update the date above and, if the change is significant, we’ll let you know in the app.