Privacy
Effective from [DA CONFERMARE: data di entrata in vigore].
If there is any discrepancy, the Italian version prevails. Read the Italian version
Retomar helps you find the right book again. To do that we need only a little data, and we use it only for that. We show no ads, we do not sell your data and we do not follow you across other apps or other sites.
This page applies to the Retomar app (iPhone and Android) and to this website.
Who processes your data
The data controller is [DA CONFERMARE: nome e cognome o ragione sociale del titolare], [DA CONFERMARE: indirizzo del titolare] ([DA CONFERMARE: partita IVA o codice fiscale, se il titolare è un'impresa]).
For any question about privacy write to [DA CONFERMARE: email per le richieste sulla privacy].
Which data we process
| Data | What it contains | What it is for |
|---|---|---|
| Account | Email address, account identifier and the sign-in method you chose (link by email, Apple or Google). If you sign in with Apple or Google we may also receive the name you set there. | Letting you sign in and keeping your data separate from other people's. |
| Reader profile | Your answers to the interview and the profile we derive from them. | Working out how well a book suits you. |
| Library | The books you add or that we recognise from your shelves, with their match score. | Showing you your library and suggesting where to start. |
| Scans | The text read on the spines of the books. As a rule the photo stays on your phone: we read it on the device and send only the text. If the text is not readable, the photo is sent to be read and is not saved. | Recognising the books in front of you. |
| Reading feedback | The books you finished or dropped, the rating and the reasons you give. | Improving your profile and later suggestions. |
| Notification tokens | A code that identifies the app on your device. | Sending you notifications, only if you turned them on. |
| Technical data | IP address, date and time of requests, errors. For every request to the artificial intelligence models we record how much it cost. | Running the service, protecting it from abuse and keeping costs under control. |
| Waitlist (website only) | The email address you leave in the form. | Telling you when the app is ready. |
We do not ask for data about health, political opinions, religion or other special categories. Please do not write them in free-text answers.
Why we may process it
- To provide the service you asked for (performance of a contract): account, reader profile, library, scans and feedback.
- Because you gave your consent: notifications and the waitlist. You can withdraw it at any time, from your phone settings or from the link at the bottom of every email.
- For our legitimate interest: security of the service, prevention of abuse and cost control.
Artificial intelligence
The reader profile, the descriptions of the books and the texts "why you might like it" and "where you may struggle" are generated by artificial intelligence models. We send the models only the text that is needed (your answers, the titles, the feedback): never your email and never your name.
These are reading suggestions. We do not take automated decisions that have legal or otherwise significant effects on you.
Who we entrust it to
To run Retomar we use a few providers, who process the data on our behalf and only on our instructions.
| Provider | What it is for | Where |
|---|---|---|
| Google Firebase (Authentication, Cloud Messaging) | Account sign-in and sending notifications | United States. Google uses the EU-US Data Privacy Framework (and its extensions for Switzerland and the United Kingdom) for transfers from the European Union. Google processes the data as a processor |
| Supabase | Database with profile, library, scans and feedback | European Union |
| Google Cloud Run | Server that receives the app's requests | Italy (Milan) |
| Google Gemini (Google Ireland Limited / Google LLC) | Artificial intelligence models. They receive only text, without email or name | The text may be processed or held in temporary memory in any country where Google or its providers have premises. We use the paid Gemini API service: Google does not use the requests or the responses to train or improve its products and records them only for a limited period, to prevent abuse and comply with legal obligations. It processes the data as a processor.[DA CONFERMARE: garanzia usata da Google per il trasferimento fuori dall'UE per l'API Gemini (clausole contrattuali standard o Data Privacy Framework): non verificata sulle fonti] |
| Google Books and Open Library | Searching for books in catalogues. We send only the title and author searched for, not who you are | United States |
| Brevo | Waitlist and related emails (website only) | European Union |
| Cloudflare Pages | Hosts this website | Cloudflare's worldwide network |
If a provider processes data outside the European Union, it does so with the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses). We do not pass your data to anyone else, unless the law requires us to.
How long we keep it
- Account, profile, library, scans, feedback and notification tokens: as long as you have the account. When you delete it, we delete all of them. Timing: 30 days, backups included.
- Photos of shelves: we do not save them.
- Technical data (server logs): 30 days.
- Waitlist: until you unsubscribe, and in any case no longer than the app's release and the first launch communications.
The book records (title, author, characteristics of the book) are a catalogue shared by all users: they contain no data about you and remain even after deletion.
Your rights
You can ask us at any time to:
- tell you which data we hold about you and give you a copy;
- correct inaccurate data;
- delete your data;
- restrict the processing or object to it;
- give you the data in a format readable by another service (portability);
- withdraw a consent already given.
Write to [DA CONFERMARE: email per le richieste sulla privacy]: we reply within one month. The account and all linked data can also be deleted directly from the app or from the Delete account page.
If you think we have mishandled your data you can contact the Garante per la protezione dei dati personali(the Italian data protection authority).
No ads, no tracking
There are no ads in the app or on the site, and no tools that follow you across different apps or sites. This site uses no profiling cookies and no statistics that identify you.
Links to buy books
A book's page may contain links to shops where you can buy it. Some may be affiliate links: if you buy through them, Retomar may receive a small commission, at no extra cost to you. Shops involved: none for now.
We do not pass any data about you to the shops. When you open the link, the shop's privacy rules apply.
Minors
Retomar is not intended for anyone under 14 years of age. If we discover that we have collected data from a younger person, we delete it.
Changes to this page
If we change something important we will tell you in the app before the change takes effect. The date at the top shows the latest version.