Privacy Policy
Effective date: 12 November 2026
## 1. Who we are
ARKI LAB LIMITED (hereinafter "the Company", "We", "Us", "Our") develops and publishes the mobile application My Reads — Reading Journal (hereinafter "the App"). This Privacy Policy (hereinafter "this Policy") explains what information the App processes, where it is stored, who it is shared with and what rights you, the user (hereinafter "the User", "you", "your"), have.
ARKI LAB LIMITED
Suite C, Level 7, World Trust Tower, 50 Stanley Street, Central, Hong Kong
Registry number: 76463925
E-mail: support@arkilab.tech
ARKI LAB LIMITED is the controller of the personal data described in this Policy. If you do not agree with this Policy, please do not use the App.
## 2. The short version
**Your library stays with you.** The books you add, your ratings, notes, reading dates, covers, reading goal and progress are stored on your device and, if you use iCloud, in your own private iCloud database. We do not have a server that receives them, and we cannot see them.
**No account, no sign-in.** You do not create an account with Us.
**Book search sends only your search text.** When you search for a book, the words you type (or the ISBN you scan) are sent to Open Library and Google Books to find the book and its cover. Nothing else about you or your library is sent with the search.
**Nothing from your library is sent to analytics.** We collect anonymous usage statistics (for example, "a book was added", "a search returned results") and crash reports to improve the App — never the titles, authors, notes or ratings of your books.
**No ads, no tracking.** We do not show advertising in the App, we do not track you across other companies' apps and websites, and we do not sell your data.
## 3. Information that stays on your device
To work as a reading journal, the App stores the information you enter:
- **books:** title, author, genre, source (for example, library or e-reader), reading status (want to read, reading, read), dates, rating, favourite mark, notes, page count and current page;
- **book covers:** photos you choose for your books and covers downloaded from book search;
- **your lists:** the genres and sources you create;
- **App settings:** your yearly reading goal, celebrated milestones and similar preferences.
This information is stored in the App's protected storage on your device. We do not receive it.
**Photos.** When you choose a cover, iOS shows you its photo picker and the App receives only the photo you select; it cannot see the rest of your library. When you save a reading card, the App only adds that image to Photos and does not read your photos.
**Camera.** If you scan a book's barcode, the camera image is processed on your device only to read the ISBN number. Images are not saved or sent anywhere.
## 4. Information that leaves your device
### 4.1. iCloud sync
If you are signed in to iCloud on your device, your library and covers are synchronised through your private Apple iCloud (CloudKit) database so that they are available on your other devices. This data is processed by Apple under Apple's privacy policy, is tied to your Apple ID and is not accessible to Us. You can turn iCloud off for the App in iOS Settings → [your name] → iCloud.
### 4.2. Book search
When you search for a book by title, author or ISBN (typed or scanned), the App sends the text of your search to:
- **Open Library**, operated by the Internet Archive, and
- **Google Books**, operated by Google.
These services return matching books and covers. When you pick a result, its cover image is downloaded from the same service. We do not send your name, an identifier, your library or any other information with these requests. As with any internet request, these services receive your device's IP address and the search text, and process them under their own privacy policies. We do not store your searches.
### 4.3. Sharing
Reading cards and book details leave your device only when you choose to share or save them (for example, post them to social media, send them in a message or save them to Photos). You decide who receives them; We do not receive a copy.
### 4.4. Messages to support
If you write to us, We receive your e-mail address and whatever you include in your message.
## 5. Information We collect automatically
### 5.1. Usage analytics (Google Firebase Analytics)
We collect anonymous information about how the App is used: which screens are opened, which features are used (for example, "a book was added from search", "a reading goal was set", "a milestone was shown"), App version, device model, operating system version, language, country/region derived from the IP address, an app-instance identifier generated by Firebase and an anonymous identifier generated by the App.
We never send to analytics: book titles, authors, notes, ratings, the text of your searches, cover images or any other content of your library.
### 5.2. Crash reports (Google Firebase Crashlytics)
If the App crashes, a crash report is sent so that We can fix the error. It contains technical information (stack trace, device model, OS version, App version, an installation identifier) and does not contain the content of your library.
### 5.3. Tips (Apple)
The App is free. You can leave an optional tip to support its development. Payments are processed by Apple through the App Store; We never receive your payment card details. A tip does not unlock any features.
## 6. Why We process data and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Providing the reading journal, goal, statistics and sharing | Library data on your device | Performance of the service you requested |
| iCloud sync | Library data in your iCloud | Performance of the service; you control it in iOS Settings |
| Book search | Search text sent to Open Library and Google Books | Performance of the service you requested (you start the search) |
| Processing tips | Purchase information processed by Apple | Performance of a contract |
| Improving the App and fixing errors | Anonymous usage analytics, crash reports | Our legitimate interest in a working and useful App |
| Answering your requests | E-mail correspondence | Our legitimate interest / performance of a contract |
| Complying with the law | Data required by authorities | Legal obligation |
We do not use your data for advertising or profiling, and We do not sell or rent personal data to anyone.
## 7. Who We share data with
- **Apple** — App Store distribution and payments, iCloud sync (if you use iCloud).
- **Google (Firebase Analytics, Firebase Crashlytics)** — anonymous usage analytics and crash reports as described in section 5.
- **Google Books and Open Library (Internet Archive)** — the text of your book searches, as described in section 4.2.
- **Authorities, courts and our legal advisers** — only where required by law or to establish, exercise or defend legal claims.
These providers may process data outside your country, including in the United States. Where required, such transfers are protected by appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission.
Their privacy policies:
- Apple: https://www.apple.com/legal/privacy/
- Google Firebase: https://firebase.google.com/support/privacy
- Google: https://policies.google.com/privacy
- Internet Archive (Open Library): https://archive.org/about/terms
## 8. How long data is kept
- **Library data** stays on your device (and in your iCloud, if you use it) until you delete it. You can delete books in the App at any time, or delete the App. iCloud data can also be removed in iOS Settings → [your name] → iCloud → Manage Account Storage.
- **Search text** is not stored by Us. Open Library and Google Books keep request logs under their own policies.
- **Analytics data** is kept by Firebase for up to 14 months and then deleted.
- **Crash reports** are kept by Firebase Crashlytics for up to 90 days.
- **Support correspondence** is kept as long as needed to resolve your request and for a reasonable period afterwards.
## 9. Security
Your library is protected by iOS data protection on your device; iCloud data is protected by Apple. All network requests made by the App use encrypted connections (HTTPS). We limit the data We collect to what is described in this Policy and require our providers to protect it.
No method of storage or transmission is 100% secure. You are responsible for keeping your device, its passcode and your Apple ID secure.
## 10. Children
The App is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided personal data to Us (for example, by e-mail), contact us and We will delete it.
## 11. Your rights
Depending on where you live (including under the EU and UK GDPR and the California Consumer Privacy Act), you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time.
- **Your library** is under your control on your device: you can view, edit and delete it in the App without contacting us.
- **Analytics and crash data** — to exercise your rights, write to support@arkilab.tech. Because this data is not linked to your name or e-mail, we may ask for information needed to find it.
We respond within one month; where a request is complex, this period may be extended by two further months, and We will tell you why.
**California residents.** We do not sell or share personal information for cross-context behavioural advertising as defined by the CCPA. The App does not process precise location.
You also have the right to lodge a complaint with the data protection supervisory authority in your country.
## 12. Changes to this Policy
We may update this Policy when the App, the law or our providers change. The current version is always available in the App and on our website, with its effective date at the top. If changes are significant, We will tell you in the App.