Privacy Policy

1. Information we collect

We collect only the minimum required to operate our features.

• Account info (required): identifier and email address provided by your social login (Kakao, Naver, Google, Apple).
• Profile (optional): nickname, gender, age range, preferred genres (chosen at sign-up).
• Usage data (auto-generated): reading session duration, saved quotes, your bookshelf, book ratings and reviews (including your total reading time on the book at the time of writing), in-app activity log.
• Profile photo (optional): one photo you upload.
• Custom covers (optional): cover images you create with the cover maker, and photos you choose as their background.
• Read together records (auto): name and time of rooms you joined, time you read in them, members you read with, and whether you chose to show your photo in each room
• Notification token (optional): the push token of a device that allows read together alerts
• Ad measurement data (auto): app installs and opens, sign-up completion, whether you saved a reading record and how many minutes you read, and advertising identifier (on iPhone only if you allow tracking; on Android the advertising ID)
• Technical info (auto-collected): device type, OS version, app version, connection IP, and error details when the app crashes (including your user identifier).

We do not access precise location, camera, microphone, or contacts. The photo library is used only when you pick a photo for your profile or a cover background and when you save a decorated image to your album; we do not read anything in your library other than the photo you pick.

2. Purposes of processing

• Identifying users and maintaining sign-in sessions.
• Storing and syncing your reading log and saved quotes across your devices.
• Providing read together rooms: showing your nickname, reading status (reading, away, done), and current reading time to other members of a room you join. Your profile photo is shown only if you agree to show it when joining the room; otherwise the first letter of your nickname is shown.
• Records and share images together: showing the nickname and profile photo (only for members who agreed to show it) of members you read with in your records together and reading log, and placing profile photos (or the first letter of the nickname for members who did not agree) in share images that members who read together decorate. Each member saves and shares their own image and can remove the photos when decorating.
• Read together alerts: notifying you when a host starts or ends reading together.
• Displaying and aggregating ratings and reviews within the Service (may be shown with your nickname).
• Generating book recommendations and personalized statistics (core service feature).
• Improving service quality via anonymous aggregate statistics and diagnosing app errors.
• Ad measurement: checking whether people installed or signed up after seeing our Instagram or Facebook ads, and showing ads to people likely to be interested in the app
• Complying with legal obligations and responding to disputes.

We do not sell personal data. For ad measurement we send only the information in §8 to Meta; we never send your saved quotes, notes, reviews, book titles, email, or nickname.

3. Use of information for recommendations

Your saved quotes, bookshelf, and ratings, together with your profile gender, age range, and preferred genres, are collected and used to provide book recommendations and personalized statistics suited to you. This recommendation feature is a core part of the Service and is therefore covered by your 'Collection and Use of Personal Information' consent in §1, with no separate opt-out or revocation toggle. If you do not wish to use the recommendation feature, you may use [Account] → [Delete account] to remove all your data immediately.

4. Retention period

• Account info and usage data: until you delete your account.
• Items required by law to be retained: kept for the period mandated by that law (e.g., connection records under the Protection of Communications Secrets Act — 3 months).
• Upon account deletion, all data except the items above is permanently deleted immediately.

5. Destruction procedure and method

• Trigger: immediately upon your deletion request, or when the retention period expires.
• Procedure: CASCADE DELETE from the database; automated backups are purged within 30 days.
• Method: electronic records are erased in an unrecoverable manner.

6. Processing entrustment (subprocessors)

For service operation we entrust the following personal data processing:

• Entrustee: Supabase, Inc.
• Scope: user authentication, database hosting, file storage.
• Items entrusted: all items listed in 'Information we collect'.
• Retention: deleted immediately upon account deletion.

• Entrustee: 650 Industries, Inc. (Expo)
• Scope: delivering app notifications
• Items entrusted: notification token, notification content (room name)
• Retention: deleted after delivery; delivery logs follow the provider's policy

• Entrustee: Functional Software, Inc. (Sentry)
• Scope: app error collection and diagnosis.
• Items entrusted: error details, device type, OS and app version, user identifier.
• Retention: up to 90 days after collection.

7. Cross-border transfer of personal data

Under PIPA Article 28-8(1)(3) (transfer necessary for the performance of a contract), we transfer personal data abroad as follows:

• Recipient: Supabase, Inc. (Delaware, United States)
• Timing and method: at sign-up and during service use, transmitted over HTTPS (TLS 1.3).
• Items transferred: same as 'Information we collect'.
• Destination and storage: U.S. headquarters / Seoul region (ap-northeast-2) distributed storage.
• Purpose and retention: same as the Purposes and Retention sections of this policy.
• How to object and consequences: this transfer is essential to providing the Service; declining will prevent sign-up.

• Recipient: 650 Industries, Inc. (Expo, California, United States)
• Timing and method: when a host starts or ends reading together, transmitted over HTTPS
• Items transferred: notification token, notification content (room name)
• Storage: United States
• Purpose and retention: delivering app notifications, deleted after delivery
• How to object / consequence: turn off read together alerts in app settings; you only stop receiving the alerts

• Recipient: Functional Software, Inc. (Sentry, California, United States)
• Timing and method: when an app error occurs, transmitted over HTTPS.
• Items transferred: error details, device type, OS and app version, user identifier.
• Destination and storage: United States.
• Purpose and retention: app error diagnosis, up to 90 days after collection.
• How to object and consequences: needed to keep the app stable, so there is no separate opt-out; you can stop further collection by deleting your account.

• Recipient: Meta Platforms, Inc. (California, United States)
• Timing and method: when you open the app, complete sign-up, or save a reading record, transmitted over HTTPS
• Items transferred: the behavioral data in §8
• Storage: United States
• Purpose and retention: ad measurement and ad delivery optimization, for the period set by Meta's data policy
• How to object / consequence: you can refuse use of the advertising identifier as described in §8; this does not affect your use of the Service

8. Behavioral data for advertising and how to opt out

The Meta (Facebook) SDK in the app automatically collects the following for ad measurement and sends it to Meta Platforms, Inc.

• Items: app installs and opens, sign-up completion, whether you saved a reading record and how many minutes you read, device type and OS, and advertising identifier (iPhone IDFA only if you allow tracking; Android advertising ID)
• Purpose: measuring Instagram and Facebook ad performance and showing ads to people likely to be interested in the app
• Retention: per Meta's data policy (we do not keep this data ourselves)
• Never sent: your saved quotes, notes, reviews, book titles, email, or nickname
• How to opt out: on iPhone, decline the tracking prompt shown when you first open the app, or turn off Bookjab in [Settings] → [Privacy & Security] → [Tracking]. On Android, delete your advertising ID in [Settings] → [Google] → [Ads]. If you opt out, the advertising identifier is not sent and only events without an identifier are counted; this does not affect your use of the Service.

9. Sharing with third parties

We do not share personal data with third parties except in the following cases:

• When you give explicit consent.
• When required by applicable law or by a lawful request from an investigating authority.
• Identifier exchange with social login providers (Kakao, Naver, Google, Apple) strictly to the extent necessary to complete sign-in.
• Sending the behavioral data in §8 to Meta Platforms, Inc. for ad measurement

10. Your rights and how to exercise them

You may request access, correction, deletion, suspension of processing, or revocation of consent at any time. The in-app [Account] screen lets you delete your account, which revokes all consents at once and removes your data immediately. For any other requests, please contact the Data Protection Officer below.

11. Safeguards

• In transit: HTTPS / TLS 1.3 encryption.
• At rest: Supabase Row-Level Security ensures each user can access only their own data.
• Authentication: OAuth 2.0 social login — we never store passwords.
• Access control: only the operator can access the admin console; all access is audited.
• Backups: automated backups are retained 30 days and then permanently destroyed.

12. Children under 14

The Service is intended for users aged 14 and older. We verify age at sign-up and do not knowingly collect personal data from children under 14.

13. Operator (data controller) information

• Business name (KR): 부자FARM (BUJA FARM)
• Representative: PARK YURO
• Business registration no.: 326-23-01856
• Address: 46-1 Baekhak-ro, Baekhak-myeon, Yeoncheon-gun, Gyeonggi-do, Republic of Korea
• Phone: +82-10-8567-1493
• Email: yuro5274@naver.com

14. Data Protection Officer

We have appointed the following Data Protection Officer to safeguard your personal data and to handle related concerns:

• Name: PARK YURO (also the representative)
• Email: yuro5274@naver.com
• Phone: +82-10-8567-1493

For complaints regarding personal data infringement you may also contact the Korean authorities below:

• Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
• Supreme Prosecutors' Office Cyber Investigation Division: 1301 (www.spo.go.kr)
• National Police Agency Cyber Bureau: 182 (ecrm.police.go.kr)

15. Changes to this policy

When this policy is amended (additions, removals, or modifications), we will announce the change in-app or on this page at least 7 days before it takes effect — at least 30 days in advance for changes that disadvantage users — and ask you to agree again in the app where needed.

16. Contact

For questions about this policy, please email yuro5274@naver.com.

Version 1.10.0 · Takes effect: November 16, 2026 (version 1.9.0 applies until then)