Privacy Policy

This Privacy Policy explains how AiviTech ("we", "us") collects, uses, stores and protects your information when you use the Book Tracker mobile app (the "App"). By using the App, you agree to the practices described here.

1. Information we collect

1.1. Information you provide

• Account information: email address, password (stored only as a bcrypt hash, never in plain text) and display name.
• Reading content: the books you add, reading progress, check-ins, reading sessions (time spent reading), notes, highlights, tags, reading goals and reading streaks.
• Images: book covers (straightened and saved as the cover) and photos you attach to notes. The server saves these as new images with their metadata removed, such as GPS location or device name. Page photos you take to scan a passage are used only for text recognition (OCR) and discarded immediately; they are not stored on our servers. We keep only the text of the page and the passages you select.

1.2. Information collected automatically

• Minimal technical data: a sign-in token (JWT) stored securely on your device to keep you signed in.
• Crash reports: when the App or the server hits an error, technical details about it (error type, where in the code it happened, app version, device type) are sent to Sentry. Emails, sign-in tokens, API keys and IP addresses are masked before sending; request contents, screenshots and touch events are never sent.

2. How we use information

• Create and manage your account, verify your email and reset your password.
• Provide the core features: progress tracking, reading sessions, notes, tags, statistics and goals.
• Recognize text in scanned pages (OCR); straighten covers and read the title and author from a cover.
• Send transactional emails (verification codes, password resets).
• Detect and fix technical problems; keep the service secure and prevent abuse.

3. Processors acting on our behalf

We do not sell your personal information, and we do not share it with third parties for their own purposes.

Running the App does involve a few steps carried out by processors on our behalf and on our instructions. They may use the data only for that step, never for purposes of their own:

Page photos are sent to Google only to read the text in them for that one scan. They are not kept on our servers, and Google does not use them to train its models (we use the paid tier of the Gemini API). We may disclose information when required by law.

4. Storage & security

• Data is transmitted over encrypted HTTPS/TLS connections.
• Passwords are hashed with bcrypt; email verification codes and password reset codes are also stored only in hashed form. Access to data requires JWT authentication, and each person can see only their own data.
• Daily backups are encrypted before being stored off the server.
• We keep your data until you delete your account or ask us to delete it. Text from a scanned page you did not save a passage from becomes unusable after 1 hour and is deleted from the server within 2 days.

5. Your rights & account deletion

You can access, edit and delete your data:

• Edit your profile / change your password: in the App, on the Profile tab.
• Delete your account: open Profile → Delete account. All related data (books, notes, images, progress) is permanently deleted and cannot be recovered. Encrypted backups containing that data are deleted automatically within 30 days.
• Or by email: send a request to aivitech.vn@gmail.com; we respond within 30 days.

California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect and how it is used (described above), to request deletion, to correct inaccurate information, and not to be discriminated against for exercising these rights. We do not sell personal information and do not share it for cross-context behavioral advertising. To make a request, use Delete account in the App or email us at the address below.

6. Children's privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with data, please contact us and we will delete it.

7. Changes to this policy

We may update this Policy from time to time. Changes are posted on this page with a new "Last updated" date. Continuing to use the App means you accept the updated Policy.

8. Contact