Privacy Policy
Effective date: 11 June 2026
Last updated: 11 June 2026
Covex Apps LTD ("Covex Apps", "we", "us", or "our") operates the Quilld mobile application and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use Quilld.
By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.
1. Who we are
Data controller: Covex Apps LTD
Registered address: 167-169 Fifth Floor, Great Portland Street, London, United Kingdom, W1W 5PF
Contact: infocovexapps@gmail.com
Website: https://covexapps.com
Quilld product page: https://covexapps.com/quilld
2. Who this policy applies to
This policy applies to users of the Quilld iOS and Android apps and any related websites we operate.
Quilld is intended for readers aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us data, contact us and we will delete it.
3. Information we collect
3.1 Information you provide
| Data | Examples | Why we collect it |
|---|---|---|
| Account | Email address, password (hashed by our auth provider), display name | Create and secure your account |
| Profile | Avatar, preferred genres, privacy visibility settings | Personalise your profile and respect your sharing choices |
| Reading activity | Books on your shelves, progress, ratings, notes, quotes, reading sessions | Core book-tracking features |
| Social | Friend connections, follows, shared activity you choose to publish | Friends and social feed |
| Clubs | Club membership, messages, polls, votes, meeting details | Book club features |
| Communications | Support emails you send us | Respond to requests |
3.2 Information collected automatically
| Data | Examples | Why we collect it |
|---|---|---|
| Device & app | Platform (iOS/Android), app version, push notification token | Deliver notifications and maintain the Service |
| Usage | App open times, notification engagement (e.g. opens), timezone | Send notifications at sensible times and improve the product |
| Subscription status | Active plan (Free, Reader, Club) | Enforce tier limits and unlock paid features |
We do not sell your personal information.
3.3 Information from third parties
| Source | Data | Why |
|---|---|---|
| Google Sign-In | Email, name, profile image (if you choose Google login) | Authentication |
| Apple / Google Play | Purchase and subscription status (via RevenueCat) | Process subscriptions |
| Open Library / Google Books | Public book metadata (title, author, cover, ISBN) | Search and display books — not your personal data |
3.4 Optional device permissions
| Permission | What happens | Stored on our servers? |
|---|---|---|
| Camera | Scan book barcodes to add titles | No — used only for lookup |
| Contacts (optional) | If you use friend discovery, we read contact emails/phones on your device and send email addresses only to our server to find friends already on Quilld | Email addresses sent for matching; we do not upload your full address book |
| Notifications | Reading nudges, social and club alerts | Push token stored while you are signed in |
| Live Activity (iOS) | Reading timer and page on Lock Screen / Dynamic Island | Session data stays on device; not sent for Live Activity display |
You can deny optional permissions and still use most of the app.
4. How we use information
We use information to:
- Provide and operate Quilld (library, discover, clubs, friends, reading sessions)
- Authenticate you and keep your account secure
- Sync your data across devices when you sign in
- Process subscriptions and restore purchases
- Send push notifications you have allowed (with per-category controls in settings)
- Enforce our Terms of Service and Community Guidelines
- Respond to support and legal requests
- Improve reliability and fix bugs
Legal bases (EEA/UK users): contract (providing the Service), legitimate interests (security, product improvement), consent (optional contacts, push notifications where required), and legal obligation.
5. How we share information
We share information only as follows:
| Recipient | Purpose |
|---|---|
| Supabase | Authentication, database, and backend hosting |
| Firebase (Google) | Push notification delivery |
| RevenueCat | Subscription and entitlement management |
| Apple App Store / Google Play | Payment processing for subscriptions |
| Sign-in (if you choose it) and optional Books API | |
| Open Library | Public book metadata requests |
| Other users | Content you choose to make visible (profile shelves, social posts, club chat, shared quotes) |
| Authorities | When required by law or to protect rights and safety |
We do not share your optional contact data with other users. Email matching is used only to suggest friends.
6. International transfers
We and our processors may store or process data in the United Kingdom, European Union, United States, and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for transfers outside your country.
7. Retention
We keep your information while your account is active and as needed to provide the Service.
When you delete your account (see Section 9), we delete or anonymise personal data within a reasonable period, except where we must retain data for legal, tax, fraud prevention, or dispute resolution purposes.
Backup copies may persist for a limited time before automatic deletion.
8. Security
We use industry-standard measures including encryption in transit (HTTPS/TLS), access controls, and secure authentication. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
9. Your choices and rights
In the app
- Privacy settings — control who sees your shelves and reading updates (Profile → Privacy & profile)
- Notifications — toggle categories (Profile → Notification settings)
- Contacts — never required; revoke in iOS/Android system settings
- Sign out — Profile → Settings → Sign out
Account deletion
To delete your account and associated personal data, email infocovexapps@gmail.com from your registered email with the subject "Delete my Quilld account". We will verify your identity and complete deletion within 30 days, except for data we must retain by law.
Active subscriptions must be cancelled through the App Store or Google Play before or after deletion; deleting the account does not automatically cancel billing.
Rights by region
Depending on where you live, you may have rights to access, correct, delete, restrict, object, port, or withdraw consent. UK/EEA users may complain to their data protection authority. California residents may have rights under the CCPA/CPRA — we do not sell personal information.
To exercise rights, contact infocovexapps@gmail.com. We may need to verify your identity.
10. Third-party links
Quilld may link to book retailers or external sites. We are not responsible for their privacy practices.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version with a revised "Last updated" date and, for material changes, provide notice in the app or by email where appropriate.
12. Contact us
Covex Apps LTD
167-169 Fifth Floor, Great Portland Street
London, United Kingdom, W1W 5PF
Email: infocovexapps@gmail.com
Website: https://covexapps.com/quilld
This document is a template prepared for Quilld. It is not legal advice.