Privacy Policy

Effective date: 2025-12-28

Developer: André Meurer (“we”, “us”)

Contact: hi@project-alexandria.com

Project Alexandria is a private reading tracker. This policy explains what data we collect, how we use it, and the choices you have.

Summary, in plain English

• We collect the data needed to run a synced book library and reading log.
• We use analytics and crash reporting service providers to improve reliability and usability.
• AI features use the OpenAI API, but we only send book metadata (not your notes).
• We do not sell personal data, we don’t use or share your data for marketing purposes, and we don’t run ads.

What we collect

1) Account data

When you sign in, we collect:

• Email address (to sign in using an OTP code)
• Google account email (if you choose to use Google authentication)
• A user ID created by our authentication provider

2) Your library and reading data (what you explicitly add)

We store the information you enter or generate through use of the app, such as:

• Books you add to your library (title/author/edition identifiers, cover selection)
• Reading status (e.g., Want to Read / Reading / Finished)
• Reading logs (pages read, minutes listened, timestamps)
• Ratings
• Notes (if you choose to add any)

3) Usage analytics

We use PostHog to collect product analytics events to understand how the app is used and to prioritize improvements. This may include:

• App interactions (screens viewed, buttons tapped, feature usage)
• App version/build, OS version, device model
• Network metadata such as IP address processed by our analytics provider as part of normal internet communication

We do not use analytics for advertising.

4) Crash and error reporting

We use Sentry to diagnose crashes and bugs. We collect:

• Crash traces and error logs
• Device/app information (OS version, app version/build, device model)

We aim to avoid sending sensitive data in crash reports.

5) Book search and metadata lookups

When you search for a book (title/author/ISBN), your query is sent to third-party book data providers to return results and related metadata (and sometimes cover images). Those providers may receive standard request metadata such as IP address.

6) AI features (only when you use them)

If you use AI features (for example: auto-categorizing your library, or generating “why people like/dislike this book” summaries), we send limited inputs to the OpenAI API:

• Book metadata (e.g., title, author, publication info, categories)
• Your rating (if present)

We do not send your notes or other freeform personal text to the AI model.

OpenAI may retain API inputs/outputs for a limited period for abuse monitoring (typically up to 30 days), and OpenAI does not train models on API content by default unless the customer opts in (which we don’t.)

How we use data

We use your data to:

• Provide core functionality (library, progress logs, syncing, stats)
• Return search results and enrich book details
• Provide AI features you choose to run
• Improve reliability and usability (analytics, crash diagnostics)

How we share data

We do not sell your personal data.

We share data only with service providers needed to operate the app:

• Authentication, database, and hosting providers (account + syncing)
• Analytics provider: PostHog (usage events)
• Crash/error reporting provider: Sentry (diagnostics)
• AI provider: OpenAI (only for AI requests you trigger; limited inputs)
• Book data providers (search and metadata)

These providers process data on our behalf under their own terms and security controls.

Data retention

• Account and library data is retained while your account is active.
• Analytics and crash diagnostics are retained for a limited period to help us improve the app and investigate issues.
• You can request deletion at any time (see below).

Your choices

Access and correction

You can view and edit your library and reading logs in the app.

Delete your account

You can request deletion of your account and associated data:

• In the app: Settings → Delete account
• On the web: project-alexandria.com/delete-account

After deletion, we remove your account and associated user data from our systems, except where limited retention is required for security or legal obligations.

Security

We use standard security practices intended to protect your data, including encrypted connections in transit and access controls on backend storage. No system is perfectly secure, but we aim to keep this app’s data handling boring and responsible.

Children’s privacy

Project Alexandria is not directed to children under 13 and we do not knowingly collect personal information from children.

International users

Service providers may process data on servers located outside your country. By using the app, you understand your data may be transferred internationally.

Changes to this policy

We may update this policy from time to time. We will update the Effective date above and may provide an in-app notice for material changes.

Contact

Questions or requests: hi@project-alexandria.com