Bokheim

Privacy Policy

Effective date: 23 October 2026
App: Bokheim
Developer and data controller: bokheim
Privacy contact: johan@bokheim.se

This policy explains how bokheim handles information when you use the Bokheim app, create an account, and store and sync your books and files across devices.

Information we handle

• Account information: your email address, account identifier, password hash, email verification and password-reset information, and sign-in sessions. Passwords are processed for authentication and stored as hashes rather than readable passwords.
• Files and library information: books, documents, audio files and covers uploaded for syncing, together with associated filenames, file identifiers, sizes, folder organisation and book metadata.
• Reading information and settings: synced reading and listening positions, bookmarks, annotations and account-linked library and feed settings.
• Connection and support information: information needed to serve network requests, including IP addresses, security and error information, and information you provide when contacting us. Account protection uses hashed network and email identifiers to limit repeated authentication attempts.

Files that are kept only on your device are processed locally for reading, playback and library management. File contents selected for cloud storage and syncing are uploaded to Bokheim's servers. Book identification and cover lookup can also send book details to online services as described below.

Why we use information

We use information to create and authenticate accounts, send verification and password-reset emails, store and sync your files and reading state, identify and organise books, retrieve covers, provide support, diagnose service problems and protect accounts against misuse.

Where data protection law requires a legal basis, we process information needed to provide your requested account, storage and syncing services to perform our contract with you. We rely on our legitimate interests in maintaining a secure, reliable service for security, troubleshooting and support, and on legal obligations where processing is required by law.

Services and information sharing

Account information and uploaded files are processed on servers operated for bokheim. Access is restricted through account authentication and server permissions; authorised administration may involve access needed to operate the service or resolve support and security issues.

• Account email: Resend processes recipient email addresses and message contents to deliver account verification and password-reset emails.
• Book metadata and covers: Bokheim's metadata service processes book identifiers and bibliographic details, such as titles, authors and details extracted from filenames. Lookups may use services including the Library of Congress, Audible and Audnexus. Cover lookup and downloads may contact Google Books, Open Library and Audible/Amazon image services. These providers receive the book details needed for the lookup; providers contacted directly by your device also receive connection information such as your IP address.
• External libraries and links: when you connect to a feed, download from an external catalogue, or open an external service, that provider processes the requests you send under its own privacy policy.
• Website hosting: the public bokheim.se website is hosted through GitHub Pages, which processes requests to serve its pages.

External service providers may process information outside your country. Their privacy policies describe their processing and international transfer arrangements. You can contact us with questions about these services. We may also disclose information when required by applicable law.

Security

Bokheim uses HTTPS for connections to its account and syncing service, hashed passwords, authenticated account access, and limits on authentication attempts. These protections reduce risk, but no system can guarantee absolute security. Do not assume uploaded files have end-to-end encryption that prevents the service operator from accessing them.

Retention and file deletion

Account records and synced library data are retained to provide your account and syncing service until you delete the account. Deleting a library entry, removing a local download, and permanently erasing a server file are different operations.

Copies already downloaded to your devices remain on those devices until you remove them. Deleting an account does not remotely erase those local copies.

Account deletion

You can delete your account in the app under Settings → Account → Delete account, or use the account deletion page without installing the app. The deletion form requires your account email, current password and explicit confirmation.

When deletion succeeds, the account and its linked database records are removed and sign-in sessions are revoked. This includes synced library records, reading progress, bookmarks, annotations, saved feed settings and account-linked file access records. Pending registration and queued account emails for the account are also removed. Physical files and device copies are subject to the retention limitations above.

If you cannot use the deletion form, contact johan@bokheim.se. We may need to verify that you own the account before acting on a request.

Your privacy rights

Depending on applicable law, you may request access to, correction of, a portable copy of, or deletion of your personal information, and may have rights to restrict or object to processing. Contact johan@bokheim.se to exercise these rights. You may also complain to your local data protection authority; in Sweden this is Integritetsskyddsmyndigheten (IMY).

Changes and contact

Updates to this policy will be published on this page with a revised effective date.

For privacy questions, requests or concerns, contact bokheim at johan@bokheim.se.