Last updated: 30 August 2026
This Privacy Policy explains how Bookd ("Bookd", "we", "us", or "our") collects, uses, and protects your personal data when you use our website and application at the-book-d.com (the "Service"). We are committed to protecting your privacy and handling your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Greek law.
The person responsible for your personal data (the "Data Controller") is:
Alexandre Berti Athens, Greece Contact: alexandrosjbberti@gmail.com
If you have any questions about this policy or how your data is handled, or if you wish to exercise your rights, please contact us at the email address above.
Depending on how you use the Service, we may collect the following categories of personal data:
Account data. When you register, we collect your email address and a password (which is stored in encrypted/hashed form and never in plain text). If you choose to sign in using Google, we receive basic account information from Google, such as your email address and basic profile details, in order to create and access your account.
Profile data. A public nickname (which may be automatically generated for you), and any other profile details you choose to add.
Content you create. Books you log, reading statuses, ratings, reviews, private notes, reading goals, book lists, and the arrangement of your virtual bookshelf.
Social data. Your connections with other users (follows and friendships), messages you send to other users, comments, reactions, and notifications.
Technical data. Basic technical and usage information generated when you use the Service, such as log data, processed on our behalf by our hosting platform to operate and secure the Service.
We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR:
To provide the Service (performance of a contract). We use your account, profile, content, and social data to create your account, let you log and track books, connect with other users, and deliver the core features of the Service.
To secure and maintain the Service (legitimate interests). We use technical data to keep the Service running, prevent abuse and fraud, and diagnose problems. Our legitimate interest is in operating a safe and reliable service.
To communicate with you (performance of a contract / legitimate interests). We may send you service-related messages, such as notifications about friend requests or activity relevant to your account.
With your consent (consent). Where we rely on your consent for any specific processing, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
Some of your data is designed to be social and is visible to other users of the Service:
The following data is private and is not shared with other users through the normal operation of the Service:
Please be mindful that anything you choose to post publicly (such as reviews or shared notes) may be seen by other users.
We do not sell your personal data. We do not use third-party advertising networks, and we do not run third-party analytics trackers on the Service.
We share data with the following service providers ("sub-processors") strictly to operate the Service:
Base44. Our application platform, which provides hosting and database services. Your data is stored and processed on this platform on our behalf.
Google. If you choose to sign in with Google, Google processes your authentication in accordance with its own privacy policy. Separately, we use the Google Books service to retrieve book cover images; this does not involve sending your personal data to Google.
We may also disclose data where required by law, to comply with legal obligations, or to protect the rights, safety, and security of our users and the Service.
Some of our service providers may process data on servers located outside the European Economic Area (EEA). Where this happens, we take steps to ensure your data remains protected in line with GDPR, for example through appropriate safeguards such as Standard Contractual Clauses or reliance on adequacy decisions.
We keep your personal data for as long as your account is active and as long as necessary to provide the Service. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain certain information to comply with legal obligations or to resolve disputes.
Under the GDPR, you have the right to:
To exercise any of these rights, contact us at alexandrosjbberti@gmail.com. We will respond within the timeframes required by law.
You also have the right to lodge a complaint with the Greek Data Protection Authority (Hellenic Data Protection Authority — Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) if you believe your data has been handled unlawfully. Their website is www.dpa.gr.
We take reasonable technical and organisational measures to protect your personal data, including access controls that restrict which data users can read and modify, encrypted storage of credentials, and platform-level security provided by our hosting provider. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Service is not intended for children under the age of 15 (the age of digital consent in Greece). We do not knowingly collect personal data from children under this age. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the Service. We encourage you to review this policy periodically.
For any questions about this Privacy Policy or your personal data, contact:
Alexandre Berti Email: alexandrosjbberti@gmail.com Athens, Greece