Privacy Policy
Effective April 16, 2026
Novi (“we”, “us”, “our”) is operated by Abhinav Gadudasu. This Privacy Policy explains how we collect, use, and protect your information when you use the Novi mobile application and related services (the “Service”).
By using Novi, you agree to the collection and use of information as described in this policy.
1. Information We Collect
Information you provide
- Account information — email address, display name, username, and optional profile details (city, bio, avatar image).
- Book activity — books you add, rankings, reactions (like, meh, dislike), and comments you post.
- Social connections — users you follow and followers.
- Support correspondence — if you contact us via email.
Information collected automatically
- Device information — device type, operating system version, and a push notification token for delivering notifications.
- Usage analytics — in-app actions (screens viewed, features used, button taps) collected via PostHog and linked to your account. We do not collect the iOS Advertising Identifier (IDFA).
- Session recordings — PostHog may record your screen activity to help us improve the app experience. Text inputs are masked in recordings.
- Crash and error reports — stack traces, device state, and breadcrumbs collected via Sentry to diagnose issues.
2. How We Use Your Information
- Provide, maintain, and improve the Service.
- Generate personalized book recommendations based on your reading activity.
- Send push notifications you have opted into (e.g., social activity, recommendations).
- Detect and prevent abuse, spam, and violations of our Terms of Service.
- Respond to support requests.
- Comply with legal obligations.
3. Third-Party Services
We do not sell your personal information. We use Hardcover to look up book metadata (titles, covers, ISBNs). These services receive search queries, not your personal data. We use Google Gemini to help generate book recommendations based on your reading preferences — your data is processed server-side and is not used to train AI models. Google Sign-In is governed by Google's Privacy Policy. Apple Sign-In is governed by Apple's Privacy Policy.
We use PostHog for product analytics and session replay. Usage events are linked to your account, and screen recordings may be captured to help us improve the app (text inputs are masked). We use Sentry for crash reporting.
4. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we permanently remove your profile, book activity, social connections, and stored tokens within 30 days. Anonymized analytics data may be retained for up to 12 months.
5. Account Deletion
You can delete your account at any time from Settings → Delete Account within the app. Deletion is permanent and includes:
- Your profile, book data, rankings, and comments.
- Social connections (followers and following).
- Stored authentication tokens (including Apple refresh tokens).
- Push notification registrations.
If you signed in with Apple, we revoke your Apple refresh token as required by Apple's App Store Guidelines.
6. Children's Privacy
Novi is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
7. Your Privacy Rights
All users
Depending on your location, you may have the right to access, correct, or delete the personal information we hold about you, or to object to or restrict certain processing. To exercise any of these rights, contact us at the email below.
California residents (CCPA)
We do not sell personal information. You may request disclosure of the categories and specific pieces of personal information we have collected.
European Economic Area and UK residents (GDPR)
If you are located in the EEA or UK, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. You also have the right to lodge a complaint with your local supervisory authority. To the extent Novi is available to EEA or UK users, we rely on your consent or our legitimate interests as the legal basis for processing your data.
8. International Data Transfers
Our service providers (Supabase, PostHog, Sentry) process data in the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those in your jurisdiction.
9. Security
We use industry-standard measures to protect your data, including encrypted connections (TLS), secure token storage, and row-level security policies on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy here and updating the effective date above. Your continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or your personal data, contact us at:
Email: abhi@novibooks.app