Privacy Policy
Effective date:
App: Bokheim
Developer and data controller: Johan Andersson Östling
Privacy contact: johan@bokheim.se
This policy explains how Johan Andersson Östling handles information when you use the Bokheim app, create an account, and store and sync your books and files across devices.
Information we handle
- Account information: your email address, account identifier, password authentication information, email verification and password-reset information, and sign-in sessions.
- Files and library information: books, documents, audio files and covers uploaded for syncing, together with associated filenames, file identifiers, sizes, folder organisation and book metadata.
- Reading information and settings: synced reading and listening positions, bookmarks, annotations and account-linked library and feed settings.
- Connection and support information: connection information, including IP addresses, security and error information used to operate and protect the service, and messages you send us for support.
Local reading requires no account. An email address and password are required to create an account and use Bokheim's cloud storage and syncing.
Bokheim does not collect logs from your device.
Files kept on your device are processed locally. Files you choose to sync with Bokheim are uploaded to its servers. Online book and cover lookups are described below.
Why we use information
We use information to create and authenticate accounts, send verification and password-reset emails, store and sync your files and reading state, identify and organise books, retrieve covers, provide support, diagnose service problems and protect accounts against misuse.
We process information needed to provide your requested account, storage and syncing services to perform our contract with you. We rely on our legitimate interests in maintaining a secure, reliable service for security, troubleshooting and support, and on legal obligations where processing is required by law.
Services and information sharing
Account information and uploaded files are processed on servers operated for Bokheim.
- Account email: Resend processes recipient email addresses and message contents to deliver account verification and password-reset emails.
- Book metadata: Bokheim's metadata service processes book identifiers and bibliographic details, such as titles, authors and details extracted from filenames. Lookups may use services including the Library of Congress, Audible and Audnexus.
- Cover lookup: to retrieve missing covers, the app contacts external providers using book details such as the title, author or ISBN. Those providers also receive your IP address. Cover providers may include Google Books, Open Library and Audible/Amazon image services.
- External libraries and links: when you connect to a feed, download from an external catalogue, or open an external service, that provider processes the requests you send under its own privacy policy.
- Website hosting: the public bokheim.se website is hosted through GitHub Pages, which processes requests to serve its pages.
External service providers may process information outside your country. Their privacy policies describe their processing and international transfer arrangements. You can contact us with questions about these services. We may also disclose information when required by applicable law.
Security
Bokheim uses HTTPS, password hashing, account access controls and limits on sign-in attempts. Authorised administrators can access uploaded files when needed to operate, secure or support the service.
Retention and file deletion
We retain your account information and synced library data until you delete your account.
When you permanently delete a book or delete your account, uploaded files are deleted once no account uses them. Files also used by another account remain available to that account. Books in the trash are retained until permanently deleted.
Deleting your account does not remove copies stored on your devices.
Account deletion
Delete your account in the app under Settings → Account → Delete account, or use the account deletion page.
Deleting your account removes your account and associated personal information, including synced library data, reading progress, bookmarks, annotations and settings, and ends your sign-in sessions. Uploaded files are handled as described above.
If you cannot use the deletion form, contact johan@bokheim.se. We may need to verify that you own the account before acting on a request.
Your privacy rights
Depending on applicable law, you may request access to, correction of, a portable copy of, or deletion of your personal information, and may have rights to restrict or object to processing. Contact johan@bokheim.se to exercise these rights. You may also complain to your local data protection authority; in Sweden this is Integritetsskyddsmyndigheten (IMY).
Changes and contact
Updates to this policy will be published on this page with a revised effective date.
For privacy questions, requests or concerns, contact Johan Andersson Östling at johan@bokheim.se.