Little Bookshelf

Overview

Little Bookshelf does not sell personal data, does not show advertising, and does not use third-party tracking SDKs. Data is used to provide the app's core features: local book tracking, cloud sync, family sharing, public bookshelf links when you choose to share them, and premium purchase validation.

Information You Add

The app may store bookshelf names, child or household names, book titles, authors, ISBNs, cover images, notes, gift dates, wish list status, gift giver names, and gift giver avatar images. This information is entered by you or by people you invite to a shared household.

Some settings are stored only on your device, including local display preferences and other app settings needed to make the app work smoothly.

Sign in with Apple

Sign in with Apple is used for cloud sync, household sharing, invite links, and premium access. The service stores your Apple user identifier so it can connect you to your shelves and memberships. If Apple provides an email address or name during sign-in, those may be stored for account support and display purposes.

Cloud Sync and Storage

When cloud sync is used, app data is sent to the Little Bookshelf backend hosted on Cloudflare. Structured data is stored in Cloudflare D1, and uploaded cover or avatar images are stored in Cloudflare R2. Session tokens are stored securely in the iOS Keychain on your device.

Backend access is limited by authenticated shelf membership. Public shelf pages return only share-safe shelf and book fields and do not expose Apple Sign-In user identifiers.

Sharing and Invite Links

If you create an invite link, anyone with that link may be able to join the household with the role you selected while the link is valid. New invite links are designed for family chats and expire after 24 hours. Public shelf links can show bookshelf and book details to anyone who has the link.

Purchases

Premium purchases are handled by Apple's App Store. Little Bookshelf receives Apple-signed StoreKit transaction data so the backend can verify premium access and store entitlement records such as product ID, transaction ID, purchase date, expiry date, and revocation status.

Camera and Photos

Camera access is used to scan ISBN barcodes and take book cover photos. Photo library access is used when you choose existing images for covers or gift giver avatars. Images are only uploaded when you use cloud sync or sharing features that need them.

Data Retention and Deletion

Synced data is kept while your account or household needs it for the app to work. You can delete books, gift givers, and households in the app. Signed-in users can delete their Little Bookshelf cloud account from Manage > Account. Account deletion removes the signed-in user's backend account, owned shared libraries, invite links, memberships, purchase entitlement records, and synced backend images, then signs the device out. Users can still email littlebookshelf@benwiddowson.com for privacy or support help.

Children's Privacy

Little Bookshelf is intended for family use by adults and carers managing a child's bookshelf. Please avoid entering sensitive personal information in book notes or public share links. If you believe information about a child needs to be removed, contact me using the email below.

Security

The service uses HTTPS, Sign in with Apple token verification, server-side membership checks, short-lived invite links, Apple StoreKit signature verification for premium claims, and upload type validation for images. No online service can guarantee perfect security, but the app is built to limit access to the data needed for its features.

Terms of Use

Little Bookshelf uses Apple's standard End User License Agreement (EULA). You can read it here: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

Contact

For privacy questions, support, or deletion requests, email littlebookshelf@benwiddowson.com.