Privacy Policy
Effective November 1, 2026
1. Who We Are
Bookworm is operated by Skylex, 11238 Essence Point Ave, Las Vegas, Nevada, United States (“Bookworm,” “we,” “our,” or “us”). Skylex is the controller of the personal information described here. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our apps, website, and wiki (collectively, the “Service”), and the rights you have. It explains our practices; it is not part of our Terms of Service.
2. Information We Collect
2.1 Information You Provide
- Account information: your email address and display name. If you sign in with an account from another service, we receive the name and email address that service shares with us.
- A record of your acceptance of our Terms of Service, including the version you accepted and the time.
- Purchase information: what you bought and when. Payments are processed by the app store or payment processor you use; we do not receive or store your full card number.
- The books you add, including the text of your books, and content you create in the Service, such as highlights, bookmarks, and questions you ask
- Reading preferences and settings
- Messages you send us, and your email preferences
Providing an email address is required to create an account; other information is optional. Some features need the information they work on (for example, a book you want illustrated).
2.2 Information Collected Automatically
- Device information (device type, operating system, app version)
- A push-notification token, if you allow notifications, so we can send them to your device
- Device attestation: a check, provided by your device's operating system, that requests come from a genuine copy of our app
- Usage data (features used, reading progress)
- Log data (IP address, access times)
- Crash reports and diagnostic data, used to find and fix problems. They can include your IP address and, for a crash, a screenshot of the screen.
- Email engagement: whether our emails are delivered and whether you click the links in them
- Bot protection on our website and wiki email-signup forms: a check that the form is being filled in by a person, which processes technical information about your browser
2.3 Website and Wiki Visitor Measurement
We measure our website and wiki ourselves, in aggregate, as described in this section. On our wiki (bookworm.wiki; the former address wiki.bookwormai.app redirects there) we also use Google Analytics, as described below. We do not use advertising cookies.
- Website: a cookie remembers which version of the homepage you see, and a random identifier is kept in your browser's local storage. With each event we store only the kind of event (a page view, how far you scrolled, a tap on a download button, a visit to or purchase on our credits page), the homepage version, and whether you use a phone or computer.
- Wiki: a cookie holds a random identifier. With each event we store only the page, section or book you viewed, or which download button you tapped. For a visit we also store the site that sent you to us, your country and time zone as your browser reports them, and whether you use a phone, tablet or computer. An event that could not be sent may wait in your browser for up to 24 hours.
- These identifiers are pseudonymous: they do not contain your name or email address, and we use them only to count daily visitors and events. We do not store your IP address or browser details with these events.
- Our own cookies last up to 13 months, and we keep the daily counts and visitor records for no more than 25 months.
- You can object to our own measurement by blocking or clearing cookies and site data for our website and wiki in your browser, or by emailing us at [email protected].
Google Analytics on our wiki. Our wiki uses Google Analytics, a web analytics service provided by Google, to give us aggregate statistics: how many people visit, which pages they read, which countries they come from, and which sites send them to us. We do not use it on our website or in our apps, and we do not use it for advertising.
- When it is on, Google Analytics sets cookies on bookworm.wiki (named
_gaand_ga_followed by an ID) that hold a random identifier. They expire about 2 years after your most recent visit: each visit extends them. - It receives the address and title of each wiki page you view, with your search terms, the book you chose to read up to, and every other part of the address after the page path removed (we keep only campaign tags, such as
utm_source, in a link that brought you to us); the site that sent you to the wiki, without its search terms; your approximate location (country, region and city); device and browser information, such as device type, operating system, browser, screen size and language; and how long a page is open and how far you scroll. - Google Analytics receives your IP address with each request but does not store it with your analytics data or link it to the cookie identifier. For visitors in the European Union, the United Kingdom and Switzerland, Google uses the IP address only to estimate approximate location and discards it before anything is logged. For visitors elsewhere, Google may also use it for security, to detect spam and fraud, and to route traffic to its data centers, and then discards it.
- We have turned off Google signals and ad personalization, so this data is not linked to a Google account or used to show you ads. Google processes it on our behalf, may process it in the United States, and keeps event-level data for no more than 14 months. See Google's Privacy Policy.
- Consent. The wiki uses your browser's time zone to tell whether you are in the European Economic Area, the United Kingdom or Switzerland. If it is, or if the time zone is missing or names no place, the wiki asks you first and does not load Google Analytics unless you accept. A time zone is not a location: if your device uses a time zone from elsewhere, you will not see the request. Google then still applies a default for visitors from these places, based on their IP address, that keeps analytics cookies off until they accept with “Cookie settings”; until then Google Analytics may still record page views without cookies, and declining stops that too. Elsewhere Google Analytics is on unless you decline.
- Your choices. You can decline in the wiki's banner, or change your choice at any time with “Cookie settings” at the bottom of every wiki page; declining stops Google Analytics from sending anything more and removes its cookies. Your choice is stored only in your browser's storage for the wiki, and after you decline, later visits do not load Google Analytics. If your browser blocks or clears that storage, the wiki cannot remember your choice: when storage is blocked, it asks on every visit and loads nothing until you accept; when storage was cleared, it treats your next visit as a first visit. You can also install the Google Analytics opt-out browser add-on, which stops it on every site. Blocking cookies for bookworm.wiki in your browser stops the cookies, but Google Analytics may still record your page views without them; to stop the measurement itself, decline or use the add-on.
3. How We Use Your Information
- To provide and maintain the Service
- To process AI features (illustrations, summaries, narration, Q&A)
- To process payments and manage your account
- To improve, secure, and optimize the Service, and to fix problems
- To communicate with you about your account, updates, and changes
- To send you emails about Bookworm, including welcome tips and new features. You join our email list when you accept our Terms of Service (dated October 1, 2026 or later) and leave the “Email me updates” switch on, or when you subscribe on our website or wiki and confirm the subscription. Creating an account alone does not add you to the list. Every email has a one-click unsubscribe link, and you can turn them off in the app's Settings.
- To detect and prevent fraud or abuse, and to enforce our Terms
- To comply with legal obligations
Legal bases (EEA, UK, and similar laws). We process personal information to perform our contract with you (providing the Service and processing purchases); for our legitimate interests (securing and improving the Service, preventing fraud, measuring our website and wiki, and telling you about similar features, which you can opt out of at any time); with your consent, where the law requires it, for analytics cookies on our wiki (Section 2.3); and to meet legal obligations.
We don't make decisions based solely on automated processing that have legal or similarly significant effects on you.
4. AI Processing
Before you first use AI features, the app asks your permission to send your content to AI service providers. When you use them, the text of your books and the questions you ask are processed by AI service providers acting on our behalf. This content is used solely to generate the output you request (illustrations, summaries, narration, or answers). Our providers' contractual terms do not allow them to use it to train AI models, and it is not used to train AI models.
Analyses and AI outputs for a book may be shared with other users who add the same book and shown on our public wiki. They never include your name, account details, highlights or questions. We do not make files you upload available to other users.
5. How We Share Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose personal information only to:
- Service providers that host and store our data, provide AI processing, deliver our emails, process payments, provide sign-in, protect our forms and app from abuse, and help us understand crashes and usage. They act on our behalf, may use the information only to provide their services to us, and are bound by confidentiality and data-protection obligations.
- The app store or payment processor that handles your purchase
- Authorities or others when required by law, or to protect the rights, safety, and security of Bookworm, our users, or others
- A buyer or successor in connection with a merger, acquisition, or sale of assets
- Anyone else with your consent or at your direction
We don't disclose that a named account read a particular book, except with your consent or when the law requires it.
In the last 12 months we have disclosed, for these business purposes, identifiers (such as your email address, account ID, and IP address), purchase records, internet and app activity (usage and diagnostic data), and the content you provide (such as books and questions).
6. Confidentiality of Our Providers and Systems
Except for the wiki analytics service named in Section 2.3, the specific vendors, AI models, prompts, and internal systems we use to provide the Service are confidential business information and are not disclosed in this Policy. We describe the recipients of personal information by category, as privacy laws permit. If a law that applies to you gives you the right to more specific information about who received your personal information, contact us and we will respond as that law requires. Nothing here limits your rights under privacy or other law.
7. Security
We protect your information with industry-standard administrative, technical, and physical safeguards, including encryption in transit and at rest and restricted access. Automated alerts our staff receive about the operation of the Service contain no personal content. No method of transmission over the Internet or of electronic storage is 100% secure, so we cannot guarantee absolute security.
8. How Long We Keep Information
- We keep personal information for as long as your account is open and as needed to provide the Service.
- When you delete your account, we delete your account data and your library from our active systems right away, or within a short processing window, and remove or de-identify other records linked to you.
- We keep purchase and credit-ledger records and fraud-prevention records, identified only by an internal identifier and not by your name or email address, for as long as needed for accounting, tax and fraud prevention.
- Copies in backups expire on their normal schedule.
- If you unsubscribe from our emails or delete your account, we keep your email address on a suppression list so that we do not email you again.
- Analyses and AI outputs derived from a book do not identify you and may remain in the Service after you delete your account.
- Website and wiki visitor-measurement data is kept as described in Section 2.3.
9. International Transfers
We and our service providers may process your information in the United States and other countries whose data-protection laws may differ from those where you live. When we transfer information to service providers in the United States and other countries, it is protected as required by our contracts with them.
10. Your Rights and Choices
Depending on where you live, you may have the right to:
- Know about and access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information
- Receive your data in a portable format
- Object to or restrict certain processing
- Withdraw consent where we rely on it, without affecting earlier processing
- Opt out of marketing emails at any time, with the link in any email or in the app's Settings
- Appeal our decision on a request
- Lodge a complaint with your local data-protection authority
To exercise these rights, contact us at [email protected]. You can also delete your account in the app. We will verify your request using information associated with your account, and you may use an authorized agent where the law allows. We will not discriminate against you for exercising your rights.
Do Not Track and Global Privacy Control. We don't track you across other sites, so we don't respond to Do Not Track signals differently. We treat Global Privacy Control as an opt-out of sale or sharing; we do neither.
11. Children’s Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the new Privacy Policy on this page and update the effective date, and notify you of material changes through the app or by email before they take effect.
13. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Skylex
11238 Essence Point Ave, Las Vegas, Nevada, United States
Email: [email protected]