Privacy Policy

Last updated: October 8, 2026

1. Introduction

Librar.ai ("we," "our," or "us") operates the Librar.ai mobile application and the website at https://librarai.app (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: When you create an account, we collect your email address, username, and password (stored in hashed form).
  • Profile Information: You may optionally provide your name, biography, profile picture, location, date of birth, and gender.
  • Reading Data: Books you add to your library, reading progress, reading goals, ratings, and reviews.
  • Social Content: Posts, comments, likes, reposts, and other social interactions you create within the Service.
  • Communications: When you contact us via email or through the Service.

2.2 Information Collected Automatically

  • Device Information: Device identifiers, device type, operating system, and app version.
  • Usage Data: Pages viewed, features used, reading statistics, and interaction patterns.
  • Log Data: IP addresses, browser type, access times, and referring URLs.
  • Location Data: Approximate location (if you enable the "Find Nearby Readers" feature). You may disable this at any time through your device settings.

2.3 Information from Third-Party Services

  • Social Login: If you sign in using Google or Apple, we receive your name, email address, and profile identifier from the respective provider. We do not receive or store your Google or Apple password.
  • Firebase: We use Google Firebase for push notifications and app security verification (App Check).

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Service, including book tracking, social features, and personalized recommendations.
  • Personalize your experience, including AI-powered book recommendations based on your reading history, ratings, and preferences.
  • Process and deliver AI features using Anthropic's Claude API to analyze reading patterns and generate personalized book suggestions. Your reading data is processed through the Claude API solely for the purpose of generating recommendations and is not used to train AI models.
  • Communicate with you, including service updates, security alerts, and promotional messages (with your consent).
  • Ensure security and prevent abuse, including fraud detection, rate limiting, and enforcement of our Terms of Service.
  • Improve our Service through aggregated analytics and performance monitoring.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • With Other Users: Your public profile, posts, reviews, ratings, and reading activity may be visible to other users of the Service based on your privacy settings.
  • Service Providers: We use third-party services to help operate our Service, including:
    • Anthropic (Claude API): For AI-powered book recommendations and content analysis.
    • Google Firebase: For push notifications and app security.
    • Email Service Providers: For transactional emails.
  • Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset.

5. Data Storage and Security

  • Storage Location: Your data is stored on secure servers. We implement industry-standard security measures including encryption in transit (TLS/SSL), hashed passwords (BCrypt), and access controls.
  • Data Retention: We retain your personal data for as long as your account is active. If you delete your account, your data will be anonymized after 30 days. During this 30-day period, you may restore your account.
  • Security Measures: We employ multiple layers of security including JWT-based authentication, device verification, IP-based rate limiting, and Firebase App Check to protect against unauthorized access.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

Under GDPR (European Economic Area)

  • Right of Access: Request a copy of your personal data.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure: Request deletion of your personal data.
  • Right to Restrict Processing: Request limitation of how we use your data.
  • Right to Data Portability: Receive your data in a structured, commonly used format.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

Under KVKK (Türkiye)

As required by the Turkish Personal Data Protection Law (KVKK, Law No. 6698), you have the right to:

  • Learn whether your personal data is being processed.
  • Request information about processing if your data has been processed.
  • Learn the purpose of processing and whether it is being used for its intended purpose.
  • Know the third parties to whom your personal data has been transferred domestically or abroad.
  • Request rectification of incomplete or inaccurate data.
  • Request erasure or destruction of your data under the conditions set forth in Article 7 of the KVKK.
  • Object to any outcome that arises exclusively from automated processing.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

7. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

8. Cookies and Tracking Technologies

Our website uses essential cookies to ensure proper functionality. We do not use advertising or third-party tracking cookies. Our mobile application does not use cookies.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: