Effective date: 11 June 2026
Last updated: 25 September 2026
Covex Apps LTD ("Covex Apps", "we", "us", or "our") operates the Quilld mobile application and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use Quilld.
By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.
1. Who we are
Data controller: Covex Apps LTD
Registered address: 167-169 Fifth Floor, Great Portland Street, London, United Kingdom, W1W 5PF
Contact: privacy@covexapps.com
Website: https://covexapps.com
Quilld product page: https://quilld.app
2. Who this policy applies to
This policy applies to users of the Quilld iOS and Android apps and any related websites we operate.
It also applies if you register interest in our independent author programme through our website. You do not need a Quilld account to do that, and submitting the form does not create one. Section 3.5 sets out what that form collects.
Quilld is intended for readers aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us data, contact us and we will delete it.
3. Information we collect
3.1 Information you provide
| Data | Examples | Why we collect it |
|---|---|---|
| Account | Email address, password (hashed by our auth provider), display name | Create and secure your account |
| Profile | Avatar, preferred genres, privacy visibility settings | Personalise your profile and respect your sharing choices |
| Reading activity | Books on your shelves, progress, ratings, notes, quotes, reading sessions | Core book-tracking features |
| Social | Friend connections, follows, shared activity you choose to publish | Friends and social feed |
| Clubs | Club membership, messages, polls, votes, meeting details | Book club features |
| Communications | Support emails you send us | Respond to requests |
3.2 Information collected automatically
| Data | Examples | Why we collect it |
|---|---|---|
| Device & app | Platform (iOS/Android), app version, push notification token | Deliver notifications and maintain the Service |
| Usage | App open times, notification engagement (e.g. opens), timezone | Send notifications at sensible times and improve the product |
| Subscription status | Active plan (Free, Reader, Club) | Enforce tier limits and unlock paid features |
We do not sell your personal information.
3.3 Information from third parties
| Source | Data | Why |
|---|---|---|
| Google Sign-In | Email, name, profile image (if you choose Google login) | Authentication |
| Apple / Google Play | Purchase and subscription status (via RevenueCat) | Process subscriptions |
| Open Library / Google Books | Public book metadata (title, author, cover, ISBN) | Search and display books, not your personal data |
3.4 Optional device permissions
| Permission | What happens | Stored on our servers? |
|---|---|---|
| Camera | Scan book barcodes to add titles | No, used only for lookup |
| Contacts (optional) | If you use friend discovery, we read contact emails/phones on your device and send email addresses only to our server to find friends already on Quilld | Email addresses sent for matching; we do not upload your full address book |
| Notifications | Reading nudges, social and club alerts | Push token stored while you are signed in |
| Live Activity (iOS) | Reading timer and page on Lock Screen / Dynamic Island | Session data stays on device; not sent for Live Activity display |
You can deny optional permissions and still use most of the app.
3.5 Author interest submissions
If you register interest in our independent author programme at quilld.app/authors, we collect what you enter on that form.
| Data | Examples | Why we collect it |
|---|---|---|
| Contact | Your name, pen name, email address, website or social link | Reply to you about the programme |
| Your book | Title, a link to where it is listed, genre, formats, how many books you have published | Decide whether it suits Quilld's readers |
| Your description | What you tell us the book is about and who it is for | Same |
| Audience | An approximate band for how many people follow you, if you choose to give one | Understand the reach of the authors applying. Optional |
| Referral tag | The from value in the link you arrived through, for example ?from=tiktok | See which posts bring authors to the page |
| Anti-spam | A one way hashed form of your IP address | Limit how many submissions a single sender can make. It is never stored in readable form and is erased within 24 hours |
We use these answers to run the programme and for nothing else. We do not add you to a mailing list, and we do not pass your details to anyone outside Covex Apps. Section 7 covers how long we keep them and Section 9 covers how to have them removed.
4. How we use information
We use information to:
- Provide and operate Quilld (library, discover, clubs, friends, reading sessions)
- Authenticate you and keep your account secure
- Sync your data across devices when you sign in
- Process subscriptions and restore purchases
- Send push notifications you have allowed (with per-category controls in settings)
- Enforce our Terms of Service and Community Guidelines
- Respond to support and legal requests
- Run our independent author programme and contact authors who register interest
- Improve reliability and fix bugs
Legal bases (EEA/UK users): contract (providing the Service), legitimate interests (security, product improvement), consent (optional contacts, push notifications where required), and legal obligation.
For author interest submissions, our legal bases are steps taken at your request before entering into a contract, and our legitimate interest in deciding which books to feature and in keeping the form free of automated abuse.
5. How we share information
We share information only as follows:
| Recipient | Purpose |
|---|---|
| Supabase | Authentication, database, and backend hosting |
| Cloudflare | Website hosting, and the database holding author interest submissions |
| Firebase (Google) | Push notification delivery |
| RevenueCat | Subscription and entitlement management |
| Apple App Store / Google Play | Payment processing for subscriptions |
| Sign-in (if you choose it) and optional Books API | |
| Open Library | Public book metadata requests |
| Other users | Content you choose to make visible (profile shelves, social posts, club chat, shared quotes) |
| Authorities | When required by law or to protect rights and safety |
We do not share your optional contact data with other users. Email matching is used only to suggest friends.
6. International transfers
We and our processors may store or process data in the United Kingdom, European Union, United States, and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for transfers outside your country.
7. Retention
We keep your information while your account is active and as needed to provide the Service.
When you delete your account (see Section 9), we delete or anonymise personal data within a reasonable period, except where we must retain data for legal, tax, fraud prevention, or dispute resolution purposes.
Author interest submissions. We keep these while we are running the programme and for as long as we may reasonably want to contact you about it. You can ask us to erase yours at any time and we will delete the record outright. The hashed IP address attached to a submission is erased within 24 hours.
Backup copies may persist for a limited time before automatic deletion.
8. Security
We use industry-standard measures including encryption in transit (HTTPS/TLS), access controls, and secure authentication. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
9. Your choices and rights
In the app
- Privacy settings: control who sees your shelves and reading updates (Profile → Privacy & profile)
- Notifications: toggle categories (Profile → Notification settings)
- Contacts: never required; revoke in iOS/Android system settings
- Sign out: Profile → Settings → Sign out
Account deletion
You can delete your account in the app: Profile → Account → Delete account. Type DELETE to confirm. This permanently removes your profile, library, notes, clubs you own, and social activity.
If you cannot sign in, email privacy@covexapps.com from your registered email with the subject "Delete my Quilld account". We will verify your identity and complete deletion within 30 days, except for data we must retain by law.
Active subscriptions must be cancelled through the App Store or Google Play before or after deletion; deleting the account does not automatically cancel billing.
Author interest submissions
You do not need an account to have one of these removed. Email privacy@covexapps.com from the address you used on the form, ask us to delete your author submission, and we will erase the record rather than simply marking it closed.
Rights by region
Depending on where you live, you may have rights to access, correct, delete, restrict, object, port, or withdraw consent. UK/EEA users may complain to their data protection authority. California residents may have rights under the CCPA/CPRA. We do not sell personal information.
To exercise rights, contact privacy@covexapps.com. We may need to verify your identity.
10. Third-party links
Quilld may link to book retailers or external sites. We are not responsible for their privacy practices.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version with a revised "Last updated" date and, for material changes, provide notice in the app or by email where appropriate.
12. Contact us
Covex Apps LTD
167-169 Fifth Floor, Great Portland Street
London, United Kingdom, W1W 5PF
Email: privacy@covexapps.com
Support: support@covexapps.com
Website: https://quilld.app