Privacy Policy

1. Data Controller

Bibliochat is the data controller responsible for your personal data. Contact: privacy@biblio.chat

2. Data We Collect

We collect the following categories of personal data:

• Account Data: Name, email address, and profile identifier obtained via Apple Sign-In or Google Sign-In.
• Usage Data: In-app preferences, selected characters, conversation history (stored locally and/or on Firebase), subscription status, and feature usage patterns.
• Device Data: Device type, operating system version, and anonymous crash/diagnostic data.
• Payment Data: Subscription status. Payment processing is handled entirely by Apple or Google; we do not store card details.

3. How We Use Your Data

We use your data to: (a) provide and personalise the App experience; (b) process and manage your subscription; (c) transmit conversation inputs to the Anthropic API and ElevenLabs for AI and voice processing; (d) store conversation history and preferences via Firebase; (e) send service-related communications; (f) improve App performance and fix bugs; (g) comply with legal obligations.

4. Legal Basis for Processing (UK GDPR)

We process your data on the following legal bases: Contract Performance (to deliver the App services you have subscribed to); Legitimate Interests (to improve the App and prevent fraud); Consent (for optional features such as notifications, where applicable); Legal Obligation (to comply with applicable laws).

5. Third-Party Processors

We share data with the following processors, each bound by appropriate data protection agreements:

• Anthropic (USA) - AI language model processing of conversation inputs.
• ElevenLabs (USA) - Voice synthesis processing.
• Google Firebase (EEA/USA) - Backend database, authentication, and storage.
• Apple / Google - Authentication and payment processing.

Where data is transferred outside the UK, we rely on appropriate safeguards including Standard Contractual Clauses or adequacy decisions.

6. Data Retention

We retain your account and preference data for as long as your account is active, or as needed to provide the App. Conversation history is retained until you delete it or your account. You may request deletion at any time (see Section 8).

7. Your Rights

Under UK GDPR, you have the right to: access, correct, or delete your personal data; restrict or object to processing; request data portability; withdraw consent at any time (where processing is consent-based); lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Exercising Your Rights

To exercise any of your rights, contact us at privacy@biblio.chat. We will respond within 30 days.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest via Firebase security rules and HTTPS.

10. Children

The App is intended for general audiences and does not target children. We do not knowingly collect data from children in a manner that would require additional protections under applicable law. If you believe a child has provided us personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via the App or email. The updated policy will be effective upon posting.

12. Contact

For privacy enquiries: privacy@biblio.chat