Privacy policy

Encoche is a reading tracker. It needs very little to work, and collects nothing else. This document describes exactly what is stored, where, and for how long.

Your account

Signing in uses Sign in with Apple. We receive a unique identifier from Apple and, if you allow it, an email address — which may be an anonymous relay address if you choose "Hide My Email". We never receive your password or any other Apple account information.

Your library

For each book you add:

• its ISBN, title, author, cover and page count;
• the page you have reached;
• for each session: the date, the page reached and, if you write one, your summary.

This information is yours. Technically, every row belongs to your account, and a security rule at the database level prevents any other user from reading it.

What we don't collect

Camera access is used solely to read a barcode on your device. No image is stored or transmitted: only the decoded ISBN leaves the phone.

• no location data;
• no contacts, photos or files;
• no advertising identifier, no tracker, no analytics;
• no browsing history, no behavioural profile.

Where your data is hosted

In the European Union: the database is hosted by Supabase — région Europe (Francfort, Allemagne). The site you are reading is served by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, États-Unis.

The services we query

When you scan a book, its ISBN is sent to bibliographic catalogues to find its record: Google Books, the catalogue of the Bibliothèque nationale de France, the SUDOC and Open Library. These requests come from our server, not from your phone: those services therefore see neither your IP address nor your identity. Only the ISBN is sent, never your account or your pages.

A record that is found is cached on our server to avoid repeating the same request. That cache holds book information only — title, author, cover, page count — and no personal data.

For how long

Your books and sessions are kept as long as your account exists. Removing a book from the app immediately deletes that book and its entire reading history.

Deleting your account

Write to guillaume.bailleul@gmail.com from the address linked to your account, or with the identifier shown in the app. Your account and all your data are erased within 30 days, with no copy kept.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, as well as to object to its processing. To exercise these rights, write to guillaume.bailleul@gmail.com. You may also lodge a complaint with your national data protection authority.

The legal basis for processing is the performance of the service you request: without this data, the app cannot show your library or synchronise it across your devices.

Children

Encoche is not directed at children and does not knowingly collect data about anyone under 13.

Changes

If this policy changes, the date at the top of this page is updated. A substantial change will be announced in the app.

Contact

Data controller: Guillaume Bailleul. For any question: guillaume.bailleul@gmail.com.