Privacy policy

Privacy Policy Last updated: July 2026 Version: 1.1 1. About Sobuu Sobuu is developed and operated by Ayoze Pérez Rodríguez, based in Germany. Email: privacy@getsobuu.com 2. Scope of this Policy This Privacy Policy explains how Sobuu collects, uses, and protects your information when you use the Sobuu mobile app for Android or iOS. It applies only to the app, not to the website (https://getsobuu.com), which has its own Privacy Policy. 3. Data We Collect Sobuu collects only the data necessary to provide and improve your experience: • Personal data: first name, last name, email address, and password. • Optional profile photo if you choose to upload one. • Device data: operating system version and app version. • Usage data: pages you visit, how long you stay on each screen, books added, and reading progress — only if you enable analytics. • Crash and error data: crash and error reports, including diagnostic details such as app version and device model — only if you enable crash reporting. • Poll answers: your answers to optional in-app polls — only if you enable polls. • Access to your photo library only when you upload a book cover. Analytics, crash, and poll data are anonymous and are never linked to your identity. Each of these is a separate setting that is off by default and can be withdrawn at any time in the app settings. Sobuu does not collect your location, contacts, or calendar. 4. Purpose of Processing and Legal Bases We process your personal data for the following purposes and legal reasons: • To create and manage your account — Contractual necessity (Art. 6(1)(b) GDPR). • To provide app functions like adding books, reviews, and comments — Contractual necessity (Art. 6(1)(b) GDPR). • To maintain app security and prevent abuse — Legitimate interest (Art. 6(1)(f) GDPR). • To analyze app usage and improve user experience — Your consent (Art. 6(1)(a) GDPR). • To collect crash and error reports to diagnose and fix technical problems — Your consent (Art. 6(1)(a) GDPR). • To show optional in-app polls and record your answers — Your consent (Art. 6(1)(a) GDPR). • To respond to your support or privacy requests — Legitimate interest (Art. 6(1)(f) GDPR). 5. Data Storage and Security Your data is securely stored on Supabase servers located in the European Union. Supabase acts as our data processor under a GDPR-compliant Data Processing Agreement. All information is encrypted in transit. We apply technical and organizational measures to protect against unauthorized access, loss, or misuse. Only the developer and authorized service providers have limited access to maintain the service. 6. Data Retention We retain your personal data only as long as your account is active. When you delete your account, all personal data is permanently erased within 30 days, except anonymized information used for statistics. Comments or reviews you published will remain under the name [Deleted user]. 7. Sharing of Data Sobuu does not sell, rent, or share your personal data with third parties. We only share information with essential service providers that help us operate the app securely and confidentially. Our analytics, crash reporting, and in-app polls run on services we operate ourselves (self-hosted); we do not use any third-party analytics provider such as Google Analytics or Firebase. 8. User-Generated Content When you create comments, reviews, or book entries, this content may be visible to other users. Please avoid posting personal information in public content. 9. User Rights You have the right to: • Access your data • Request correction or deletion • Withdraw consent at any time • Request a copy of your data • Object to processing for legitimate interest • File a complaint with a data protection authority To exercise your rights, contact: privacy@getsobuu.com 10. Data Protection Contact For privacy-related matters, you can reach our Data Protection Contact at: privacy@getsobuu.com 11. Children’s Data Sobuu is not intended for users under 16 years old and does not knowingly collect their data. If we become aware of such data, it will be deleted immediately. 12. International Compliance Sobuu complies with the European Union’s General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and Brazil’s General Data Protection Law (LGPD). 13. Users Outside the EU If you access Sobuu from outside the EU, your data will be processed in accordance with this Privacy Policy and the applicable international privacy regulations. 14. Data Breach Notifications In the unlikely event of a data breach that affects your personal information, we will notify you and the relevant authorities in accordance with GDPR requirements. 15. Open Source and Transparency Sobuu is proudly open source. The app’s code is available at https://gitlab.com/sobuu/sobuu. However, your personal data always remains private and protected. 16. Changes to This Policy We may update this Privacy Policy from time to time to reflect new features or legal requirements. The latest version will always be available inside the app. 17. Contact If you have any questions, feedback, or privacy concerns, please contact: privacy@getsobuu.com