LectorApp
This is LectorApp's privacy policy. Below are the conditions under which the data of users of the app and of this website is collected, used and protected.
1. Data We Collect
Signing in to LectorApp is done exclusively through Google. From this process we receive your email address and, optionally, the public name on your Google account. We do not store passwords on our servers: authentication is handled by Google.
During the onboarding that follows, we also collect: your public username, your country of residence, your preferred language and your year of birth. The year of birth is used only to verify the minimum legal age required by law.
2. User-Generated Content
You can upload content such as reviews, ratings and book covers. This content is stored in Supabase and linked to your account.
Please note that the book covers you upload are public: they become part of the app's shared catalog and any user viewing that book will see them. Do not upload images containing personal information.
Images you attach to a support message are not public: only the LectorApp team can access them.
3. Analytics and Usage
We collect information about your reading habits, such as books read, pages read or activity. This information is used only to improve your experience and show you statistics within the app.
We do not use third-party analytics tools or behavioral advertising, nor do we build profiles with legal effects on you.
4. Legal Basis for Processing
We process your data on the following legal bases (GDPR art. 6):
• Performance of a contract (art. 6.1.b): creating and maintaining your account, saving your reading progress, calculating your streaks and statistics.
• Consent (art. 6.1.a): reminder notifications and access to the camera or your photos. You can withdraw it at any time from the system or app settings.
• Legitimate interest (art. 6.1.f): content moderation and abuse prevention, to keep the catalog usable for the whole community.
• Legal obligation (art. 6.1.c): minimum age verification.
5. Storage and Retention Period
Data is stored in Supabase, the platform acting as data processor (GDPR art. 28), with which we have signed the corresponding data processing agreement.
We keep your data while your account is active. If you delete your account, your profile, reading history, streaks and ratings are deleted immediately, and your login account is permanently removed within 24 hours at most.
Books you contributed to the catalog are not deleted, as they are content shared by the whole community, but they are unlinked from your identity.
Support messages are kept for a maximum of 12 months after resolution. Moderation logs are kept for 24 months.
6. Third Parties and International Transfers
We do not sell or share your personal data with third parties for commercial purposes. Only these providers are involved:
• Supabase: database and file hosting. Project region: eu-west-1 (Ireland).
• Google: authentication. See its privacy policy to learn how it handles your data during sign-in.
• Open Library (openlibrary.org): to identify books by ISBN or text search we send that query to this public catalog. Only the book query is sent, never information that identifies you.
• Hostinger International Ltd. (Cyprus, EU): hosting of this website.
Data is hosted within the European Economic Area, so there are no international transfers subject to GDPR arts. 44-49.
7. Affiliate Links
We use Amazon affiliate links within the app. If you make a purchase, we may receive a commission. The purchase takes place on Amazon's platform, outside LectorApp, and is governed by its own terms and privacy policy.
8. Camera and Photo Access
LectorApp asks for camera access for two different things:
• Scanning a book's ISBN. Here the image is neither stored nor transmitted: the code is decoded on your own device and the frame is discarded immediately.
• Photographing the cover of a book missing from the catalog. In this case the photo is uploaded to our servers and becomes public as that book's cover, visible to other users.
You can also choose an image from your device's gallery, either as a book cover (public, as above) or as an attachment to a support message (private, accessible only to the LectorApp team).
We only access the specific image you select. We do not read the rest of your gallery or its location metadata.
9. Local Notifications
LectorApp can show you reading reminders at the times you choose. These reminders are scheduled and processed exclusively on your device through the operating system. We do not use intermediary servers or push tokens to send them.
The notification text may be personalized based on your reading history (for example, showing how many consecutive days you've been reading). This calculation happens when the notification is scheduled, using the same data already stored in your account.
10. Minimum Age and Minors
In accordance with GDPR article 8, the minimum age to use LectorApp independently depends on the country of residence you indicate: 14 years in Spain, and up to 16 in other EU member states that have set a higher threshold.
Below that threshold, using the app requires the express consent of parents or legal guardians, who must accept this privacy policy on the minor's behalf.
By registering, users declare that they meet the applicable minimum age or have such parental consent. We do not knowingly collect data from minors below the threshold without parental consent. If we become aware that data from a minor has been collected without consent, we will delete it immediately.
11. Your Rights
Under the General Data Protection Regulation (GDPR), you have the right to:
• Access: request a copy of the data we hold about you.
• Rectification: correct any inaccurate or incomplete data.
• Erasure: delete your account and all associated data. You can do it directly in the app, under Settings → Delete account, or by following the steps at lectorapp.es/eliminar-cuenta.
• Objection: object to the processing of your data for specific purposes.
• Portability: receive your data in a structured, commonly used format.
• Restriction: ask us to restrict processing while a complaint is resolved.
• Withdraw consent at any time, without affecting the lawfulness of prior processing (GDPR art. 7.3).
To exercise any of these rights, write to contacto@lectorapp.es. We will reply within one month of receiving your request.
If you believe we have not properly handled your rights, you can file a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.
12. Data Controller
Hugo Miño del Castillo
Tax ID (NIF): 09064662V
C/ Fuentenovilla 1, 2B, 28805 Alcalá de Henares (Madrid), Spain
Contact email: contacto@lectorapp.es
13. This Website
This website (lectorapp.es) is mainly informational and only uses analytics cookies if you accept them in the cookie notice (see the cookie policy). Fonts are served from our own server, with no third-party connections.
Tester form. While LectorApp is in closed testing on Google Play, the website has a form where you can leave your email address (the language of the page you send it from is also stored). We use that email only to add you as a tester on Google Play, send you access to the app and ask for your feedback. The legal basis is your consent (GDPR art. 6.1.a), which you give by ticking the box before submitting the form. The email is stored in Supabase (region eu-west-1, Ireland) and kept for the duration of the testing phase and up to 12 months after it, unless you ask for it to be deleted sooner by writing to contacto@lectorapp.es. You can withdraw your consent at any time. For Google to give you access, your email must belong to a Google Play account; how Google processes your data is governed by its own policy.
The account verification and password reset pages, linked to the app, communicate directly with Supabase to complete that process.
If you email us, we will only use your data to reply.
14. Changes to This Policy
We may update this policy. We will notify significant changes within the app and ask for your acceptance again when the change is substantial.
Last updated: October 6, 2026 · Matches version 1.1.0 of the app's policy, with a section about this website that includes the tester form.