1. Who we are
Wovenleaf is provided by Hector Miguel Rodriguez Sosa, based in Spain. We are responsible for the personal information we process in operating Wovenleaf and this website. You can contact us atsupport@wovenleaf.app.
This policy covers the mobile app and its landing website. The app has no Wovenleaf account, cloud library, advertising, or social profile. We do not receive a copy of your library or sell your personal information. Online book services, Android scanner diagnostics, and website hosting are explained separately below.
2. What stays on your device
Wovenleaf stores and processes your library in its local database and app storage. Depending on the features you use, this includes:
- Books, identifiers, covers, shelves, lists, ratings, and private notes.
- Reading and listening history, progress, bookmarks, highlights, and preferences.
- Imported CSV records, import history, EPUBs, audiobooks, and associated files.
- Voice notes you record, search history or cached results, and local recovery copies.
Reading, listening, organization, file inspection, and local library search take place on your device. Searching private notes, if enabled, is also local. Wovenleaf does not upload your EPUBs, audiobooks, recordings, notes, or full CSV export to us or to a book-search provider.
3. Open Library and covers
Online catalog search and metadata enrichment contact Open Library, operated by the Internet Archive. Requests may contain your search text, a book’s ISBN, title or author, and your language preference. The provider also receives the IP address and technical request information needed to handle the connection. These requests can reveal which books you are interested in.
Displaying a remotely hosted cover can contact Open Library’s cover servers or the image host returned in its book data. The host receives the requested image address and connection information, even when you are viewing an existing library entry rather than making a new search. Wovenleaf caches some search results locally to reduce repeated lookups.
These services have their own logging and retention practices. See theInternet Archive’s privacy policy and terms. Your private notes, ratings, reading progress, and book file contents are not included in Wovenleaf’s metadata requests.
4. Goodreads CSV imports
You obtain your export from Goodreads and choose or share the CSV file with Wovenleaf. The app parses it, prepares the review, matches records, and applies the import locally. It does not receive your Goodreads login credentials, sign in for you, or send changes back to Goodreads.
After import, missing covers may be filled in automatically through Open Library. This sends ISBNs and, where needed, a title and author from the imported records, along with your language preference. Lookups can retry when you reopen or return to the app. The CSV file itself and its private review, rating, or shelf data are not uploaded. Opening the Goodreads export page takes you to their website under their own policies.
5. Device features and permissions
- Camera: used when you choose to scan an ISBN. Barcode recognition runs on the device; a resulting ISBN may be used for an online book lookup. Android scanner diagnostics are described below.
- Microphone: used when you start a private voice note. Playback pauses before recording. The recording is saved locally.
- Files and images: Wovenleaf reads the documents, audiobook files, or cover images you select or share with it. A file provider you choose may first download a file from your own cloud storage.
- Clipboard and sharing: the app can read an ISBN when you use its paste action, or receive text and files you share with it.
- Audio and notifications: system media controls support background listening. If you enable “Show book details when locked”, titles, authors, chapters, and covers can appear on the lock screen and connected system media surfaces.
You can change permissions in your device settings. Declining a permission may disable the feature that needs it; you can still enter books manually and use other available features.
6. Android scanner diagnostics
The Android ISBN scanner uses Google ML Kit. Although image recognition happens on the device, Google’s SDK collects diagnostic and usage data, including device model and operating system, app version, installation identifiers, performance, configuration, and feature or error events. Google receives this data over HTTPS for diagnostics and usage analytics.
This is a third-party exception to local processing, not a Wovenleaf reading-activity analytics service. See Google’s ML Kit data disclosureand Google’s privacy policy. You can type or paste an ISBN instead of using the camera scanner.
7. Exports and external services
Exports and backups are created on your device. Depending on the format and options, they can include library records, ratings, notes, annotations, and EPUB files. Wovenleaf does not encrypt exported files. Review the contents before saving or sharing them: your chosen recipient or storage provider will have access, and a cloud-synced folder may upload them.
EPUBs can contain web links or references to online resources. Opening an external link or loading a remote resource can contact its host, which receives connection information and the requested address. That host’s privacy practices apply. App-store links and other websites you choose to open likewise take you outside Wovenleaf.
Your operating system, app store, email service, and selected document or sharing providers may process information under their own settings and policies. Wovenleaf has no automatic library upload or cloud-sync service.
8. This website and contact
This landing website is hosted by Vercel. Delivering pages and protecting the site involves processing connection and request information, such as IP address, browser or device information, requested page, timestamp, and referrer when supplied. This is separate from your app library, which is not sent to the website.
We do not add advertising cookies, tracking pixels, or visitor analytics scripts to this website. Fonts and images are served with the site. Hosting and security processing are described in Vercel’s privacy notice.
If you email us, we receive your address, message, and any attachments you choose to send. We use them to respond, investigate your request, and maintain necessary support or legal records. Do not send your library or private files unless they are needed for your request. Our email provider processes that correspondence to deliver and store it.
9. Storage, retention, and deletion
Local records remain in app storage until you remove them or clear the app’s data. Import history, cached data, and recovery copies may retain earlier versions after an entry is edited or removed. To remove all Wovenleaf-managed data on a device, use the operating system’s option to clear app data or delete the app and its data; merely offloading an app may preserve data. Delete any separately saved exports and original source files from their own locations if you no longer want them.
The app configures its private storage to be excluded from automatic platform backups. Local recovery points remain on the device. Device behavior and copies you save elsewhere are controlled by the relevant platform or provider. We cannot recover or remotely erase data we do not possess.
Protection relies on your device’s security and app sandbox; the library database and exports do not have additional Wovenleaf encryption. Use a device lock and protect your backups.
We keep correspondence only as long as needed to handle the request, follow up, and meet applicable recordkeeping or legal-claim obligations. Hosting logs and third-party diagnostics follow their providers’ retention practices, which depend on operational, security, and legal needs. We do not maintain a separate server-side history of your reading or catalog searches.
10. Legal bases and international data
Where European data protection law applies, processing necessary to provide the app features you request is based on performing our agreement with you. We rely on legitimate interests to deliver and secure this website, respond to general inquiries, and maintain the reliability of optional scanner functionality. Where a legal obligation applies, that obligation is the basis for the relevant processing. If processing requires consent, we must obtain it separately; this policy is not a request for blanket consent.
Local-only records are not transferred to us. Online requests and correspondence may be processed outside your country, including in the United States, by the Internet Archive, Google, Vercel, or the services you choose. Those providers explain their processing and transfer safeguards in their policies. For transfers we are responsible for, we use safeguards required by applicable law, such as an adequacy decision or standard contractual clauses where applicable. Contact us for information about safeguards relevant to your request.
11. Your choices and rights
You can view and edit your library in the app, export it from Settings → Advanced, manage permissions in your device settings, and remove local data as described above. Using the app without network access prevents online searches, automatic cover lookups, and other outbound requests while offline; already available local content remains usable.
Depending on your location and the processing involved, you may have rights to access, correct, delete, or obtain a portable copy of personal information, restrict processing, object to processing based on legitimate interests, or withdraw consent without affecting earlier lawful processing. We do not use your information for automated decisions with legal or similarly significant effects.
Send requests to support@wovenleaf.app. We will respond within the period required by law, generally one month for GDPR requests, and explain any lawful extension. We may need limited information to verify a request. We cannot retrieve a local library we do not hold. You may also complain to your local data protection authority, including the Spanish Data Protection Agency (AEPD)where applicable.
Wovenleaf is a general-purpose reading app and is not directed specifically at children. We do not request a child’s age or create child profiles. A parent or guardian who believes a child has sent us personal information can contact us to request its removal, subject to applicable law.
12. Changes to this policy
Our intention is to keep your reading library local to your device. We will update this policy when the app, website, or relevant data practices change and show the new date here. Material changes will receive any notice or consent required by law before the new processing begins. See also the terms of service.