Shelfsome
Privacy policy
Last updated 21 October 2026
Shelfsome is a place to keep your library, share what you read and follow other readers. This policy says what we collect, why, who helps us run the app, and what you can do about it. Questions or requests: support@shelfsome.com.
Who we are
Shelfsome is run by its independent developer in Greece, who is the “controller” of your data under the EU General Data Protection Regulation (GDPR). Contact: support@shelfsome.com.
What we collect
Your account: email address, password (stored only as a secure hash by our login provider), username, and the name, bio and profile photo you choose to add.
What you add: the books in your library and wishlist, what you’re reading and have read, ratings, favourite books, reviews, comments, likes, lists and copies of lists, who you follow, and the activity these create (for example “finished a book”).
Safety: people you block, and reports you send or that others send about your content.
We do not collect your location, contacts or advertising identifiers. Photos of your own book covers stay on your phone.
Why we use it
To run the app you signed up for: showing your shelves, your profile, the friends feed, reviews and lists (legal basis: our contract with you).
To keep people safe: acting on reports, removing abusive content and enforcing blocks (legal basis: our legitimate interest in a safe community).
To answer you when you write to us.
We never sell your data, show ads, or use it to track you across other apps or websites.
Who can see what
Your username, name, bio and photo are visible to other readers.
Your shelves, reads, wishlist, favourites and activity are visible to everyone if your account is public, and only to followers you accept if it is private.
Reviews, comments and public lists are visible to everyone signed in, even from a private account. Private lists are visible only to you.
Someone you block can no longer see your shelves, reviews, comments or lists, and you no longer see theirs.
Services that help us
Supabase stores the database and runs the login, on servers in Frankfurt, Germany (EU).
Resend sends account emails, such as sign-in and password codes, from servers in Ireland (EU).
Book details and covers come from Open Library (Internet Archive, USA), Google Books (Google, USA) and Biblionet (Greece). When you search or scan, the search words or ISBN are sent to them; your account details are not.
If you buy Shelfsome Pro, Apple takes the payment and RevenueCat (USA) checks the purchase for us. RevenueCat receives your account ID and the purchase details from Apple, never your name, email or card.
The app is built with Expo, and Apple delivers it to your phone. Each of these handles data under its own privacy policy.
Cookies and tracking
The app uses no cookies, no analytics and no advertising trackers. It stores your sign-in and your settings on your phone so you stay signed in.
How long we keep it
We keep your data while you have an account. When you delete your account (Settings → Delete account), your profile and everything you added are deleted straight away. Copies in our provider’s backups disappear within 30 days.
Reports someone else sent about your content are kept, without the name of whoever reported it, for as long as needed to keep the community safe.
Your rights
You can see and change most of your data in the app, make your account private, and delete your account at any time.
You also have the right to ask for a copy of your data, to have it corrected or erased, to object to or restrict how we use it, and to take it elsewhere. Write to support@shelfsome.com and we’ll answer within one month.
You can complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the authority where you live.
Age
Shelfsome is for people aged 15 or older. If we learn that someone younger has an account, we delete it.
Changes
If this policy changes in a way that matters, we’ll tell you in the app before it takes effect.