Privacy Policy
This privacy policy applies to the Endpaper: Book Tracker app (hereby referred to as "Application") for mobile devices that was created by Fernando Mendez (hereby referred to as "Service Provider") as a Commercial service. This service is intended for use "AS IS".
The short version: your library, reading sessions, notes and quotes stay on your device and, if you turn on sync, in your own private iCloud. There is no account, no ads, and we never sell your data.
What information does the Application obtain and how is it used?
Your reading data. The books, reading sessions, goals, streaks, lists, notes, quotes and cover photos you add are stored on your device. The Service Provider does not receive them and cannot see them. Registration is not required to use the Application.
iCloud sync (Endpaper Pro). If you turn on iCloud sync, your reading data is stored in your private iCloud account using Apple's CloudKit, so it can sync between your devices. This data is protected by your Apple Account and is not accessible to the Service Provider.
Backups. If you export a backup, the file is created on your device and saved wherever you choose. The Service Provider does not receive it.
Book search and barcode scanning. When you search for a book or scan a barcode, the search text or ISBN is sent to the Service Provider's server, which looks the book up and returns its details and cover. Each request carries a random identifier created when the Application is installed. It is used only to prevent abuse (rate limiting) and is not linked to your name, email, Apple Account or reading data. Like most web services, the server and its hosting provider may keep standard technical logs (such as IP address, time of request and the request itself) for a short period for security and troubleshooting.
Camera and photos. The camera is used to scan barcodes and to capture quotes from a page with Live Text. Both are processed on your device; no images are sent to the Service Provider. Cover photos you choose from your library are stored with your reading data on your device.
Reminders. Reading reminders are local notifications scheduled on your device. No push notification service is used.
Purchases. Endpaper Pro subscriptions are processed by Apple. The Service Provider never receives your payment details. RevenueCat is used to confirm your subscription status; it receives an anonymous app user ID and your purchase history (such as which product you bought and when).
Ad attribution. If you install the Application after tapping an Apple Ads ad, Apple provides an attribution token through its AdServices framework. RevenueCat uses it to tell the Service Provider which ad campaign led to the install, so the Service Provider can see whether its ads lead to subscriptions. It is tied to the same anonymous app user ID, needs no tracking permission, and is not used to track you across other companies' apps or websites.
Usage analytics. The Application uses Mixpanel to understand, in aggregate, how the Application is used, for example where people stop during onboarding, which features are used, and whether the paywall was viewed. Events are linked to a random identifier, not to your name, email or Apple Account. They include basic technical details (device model, screen size, iOS version, app version and language) but never the titles of your books, your notes, your quotes or anything you type. IP-based location is turned off. You can turn analytics off at any time in Settings → About → "Share anonymous usage data".
Does the Application collect precise real time location information of the device?
This Application does not collect precise or approximate information about the location of your mobile device.
Do third parties see and/or have access to information obtained by the Application?
Only the following service providers, and only for the purposes described above:
Apple (App Store purchases and iCloud sync): https://www.apple.com/legal/privacy/
RevenueCat (subscription status): https://www.revenuecat.com/privacy
Mixpanel (anonymous usage analytics): https://mixpanel.com/legal/privacy-policy
Hardcover and Open Library (book details and covers). The Application never contacts them directly. The Service Provider's server looks books up on your behalf, so they receive the search text or ISBN from the server, not your device, your identifier or your IP address. https://hardcover.app/privacy and https://archive.org/about/terms.php
The Service Provider does not sell your information, does not use it for advertising, and does not track you across other companies' apps or websites.
How long is information kept?
Your reading data stays on your device (and in your iCloud, if sync is on) until you delete it. Rate-limiting counters on the server are temporary. Analytics events are kept by Mixpanel for as long as they are useful for improving the Application. Book details and covers cached on the server are not linked to you.
What are my opt-out rights?
You can turn off analytics in Settings → About → "Share anonymous usage data". You can turn off iCloud sync in the Application's settings, and delete the synced data from iOS Settings → [your name] → iCloud. You can stop all collection of information by the Application easily by uninstalling it, which also deletes the reading data stored on your device. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.
Depending on where you live, you may have the right to access, correct or delete personal information about you. Because the Application does not use accounts, the Service Provider usually cannot identify which data belongs to you. If you would like your subscription records removed, contact the Service Provider and include the user ID shown in Settings → Subscription.
Children
The Application is not used to knowingly solicit data from or market to children under the age of 13.
The Service Provider does not knowingly collect personally identifiable information from children. The Service Provider encourages all children to never submit any personally identifiable information through the Application and/or Services. The Service Provider encourages parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide personally identifiable information through the Application and/or Services without their permission. If you have reason to believe that a child has provided personally identifiable information to the Service Provider through the Application and/or Services, please contact the Service Provider (fndomendezapps@gmail.com) so that they will be able to take the necessary actions. You must also be at least 16 years of age to consent to the processing of your personally identifiable information in your country (in some countries we may allow your parent or guardian to do so on your behalf).
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. Your reading data never leaves your device except to your own iCloud, connections to the Service Provider's server are encrypted (HTTPS), and the information the Service Provider does receive is not linked to your identity.
Changes
This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to their Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.
This privacy policy is effective as of 2026-10-27
Your Consent
By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by the Service Provider.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at fndomendezapps@gmail.com.