Updated October 2026
Privacy Policy
Bound is a reading app. This policy explains what we collect, why, and the choices you have. Last updated October 2026.
The short version
We collect what Bound needs to work: your account, your library, and what you post. We don’t sell your data, we don’t show ads, and the app has no third-party analytics or tracking.
You can export everything (Settings › Export my data) and delete your account (Settings › Delete account) inside the app at any time.
What we collect
Account: your name, email, username, password (stored only as a one-way hash), profile photo, and settings such as privacy and content-filter choices.
Your library: lists, quotes, reviews, notes, reading progress, reading history, and anything you import from Goodreads, StoryGraph, or Hardcover.
Community activity: posts, comments, likes, reposts, follows, poll votes, and the people you block or report.
Technical: your IP address and basic request details in our server logs, used for security and to prevent abuse.
How we use it
To run Bound: sign you in, sync your library across devices, show your profile and posts to the people you choose, and send account email such as password-reset codes.
To keep the community safe: review reports, enforce the Community Guidelines, and stop spam and abuse. This may include automated tools, including AI-based classifiers, that review content posted to Bound.
We don’t use your data for advertising and we don’t sell or rent it to anyone.
Who can see what
Your posts and profile are visible to other Bound readers according to your settings. You choose whether your currently-reading list and reading stats are public (Settings › Privacy).
Your quotes, reviews, notes, and lists stay private unless you share them in a post.
People you block can’t see your profile or posts.
Service providers
We use a small set of providers to run Bound, and they process data only on our behalf: Amazon Web Services (servers, database, file storage, and email), Cloudflare (domain and email routing), and Apple (App Store and payments).
Book information comes from public catalog sources. Your account details are not sent to them.
How long we keep it
We keep your data while your account exists. When you delete your account, it is removed from our live systems right away; encrypted database backups age out within 7 days, and server logs within 30 days.
Records of moderation actions (for example, a removed post) may be kept longer when needed for safety or legal reasons.
Your choices and rights
Access and export: Settings › Export my data. Correct: edit your profile and library any time. Delete: Settings › Delete account.
For any other privacy request, email support@boundbooks.app. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, and we’ll honor them.
Children
Bound is not for children under 13, and we don’t knowingly collect their information. If you believe a child has an account, contact us and we’ll delete it.
Security and location
Data is encrypted in transit (HTTPS) and stored with Amazon Web Services in the United States. No system is perfectly secure, but we work to protect your information and limit who can access it.
Changes and contact
If we change this policy in a meaningful way, we’ll let you know in the app before the change takes effect.
Questions: support@boundbooks.app.