Last updated: 2026-10-21
Joaquin Cabrera Simoes (“we”, “us”) operates BooksTracker. This policy explains what personal data we handle, why, who receives it and what you can do about it. It covers the website and the iOS and Android apps. You must be at least 18 years old to use the Service.
1. Data we handle
Account data. Your email, your name, your password (stored only as a one-way hash), the second factors you set up (authenticator secret stored encrypted, passkeys’ public keys, recovery codes as hashes), your language, time zone and preferences, and your plan.
What you enter. Accounts, balances, entries, cards, subscriptions, loans, investments, people, categories and tags, notes, and the files you attach (receipt photos, card slips, bank documents). This is the financial information you decide to keep in the Service.
Receipts. The photo of a receipt is read on your own device (text recognition runs in the app or browser); the photo is sent to us only so that it is stored with your receipt, and only if you save it. If you choose to send a receipt to improve the reading, we receive that photo and the corrected lines, and you can withdraw it later.
Email you send us. If you use the email inbox, we read the messages you send to our address from your account email, keep the attachments (or the text of the message) as files in your account and then delete the message from our mailbox. Messages from other senders are deleted unread.
Social features. If you use friends, chats, groups or shared expenses, we store what you send and the people involved can see it.
Technical data. IP address, browser or device type, and security events (sign-ins, failures, changes to your security settings) kept in an audit log to protect your account. For push notifications, the device token your phone gives us.
Payments. Paid plans are bought on our website through PayPal. We receive from PayPal the status of your subscription, its plan and dates, and the email PayPal has. We never receive or store your card number or bank details.
Backups. If you turn on automatic backups, the app creates a copy of your data, encrypts it on your device with a passphrase that only you know, and stores it where you choose: a file on your device, your own iCloud Drive or your own Google Drive. We cannot read it and cannot recover your passphrase. The keys for those backups are kept only on your device. If you choose Google Drive, the app asks Google for a single permission, the one for the app’s own hidden folder (drive.appdata): it can only see the backup files it saved itself and no other file in your Drive. That permission is used only to save, list, download and delete your encrypted backups, we never send it to our servers, and BooksTracker’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We do not collect: your contacts, your location, advertising identifiers, or your photo library (the app only gets the photos you pick or take).
2. Why we use it
To provide the Service (keep your records, show them to you, read receipts, send you the notifications you chose, share with the people you choose); to secure accounts and prevent abuse; to manage plans and payments; to send necessary messages (confirmation and recovery emails, replies to your emails, notices about your account); to fix problems and improve the Service; and to comply with the law. The legal basis is the contract with you, our legitimate interest in security and improvement, and legal obligations. We do not sell personal data, we do not show ads and we do not profile you.
3. Who receives data
Only service providers that we need to run the Service, under their own terms: hosting and network protection (Cloudflare), email delivery and reception (our mail provider), push notification delivery (Apple Push Notification service and Google Firebase Cloud Messaging; the notification content is minimal and never includes amounts), PayPal for payments, and Cloudflare Turnstile to prevent automated sign-ups. Exchange-rate and stock-price providers receive requests that contain no personal data. We may disclose data if the law requires it. If you share something with another user, they receive it.
4. Where it is stored and transfers
Data is stored on servers we control. Some providers above process data outside Uruguay (for example in the United States and the European Union); they must protect it with appropriate safeguards.
5. How long we keep it
We keep your data while your account exists. If you turn on the automatic file clean-up, the old files you chose stop being shown and stop counting against your storage; on a plan that includes recovery we keep them in our systems only until the recovery period of your plan ends (for example up to 365 days on Pro) so you can bring them back, and after that they are deleted for good; if your plan stops including recovery, they are deleted after a grace period. The data taken from those files (for example the lines of a receipt) is kept. When you delete your account from the app (or ask us to), we delete your account and your data, including your files, from our systems straight away; copies in our own backups disappear within 35 days. We keep what the law requires us to keep (for example payment records held by PayPal) and security logs without your content for up to 12 months. Because other people are involved in shared features, deleting your account also removes the direct chats you were in, the groups you created, and the shared expenses and settlements you created, for everyone in them; your messages in other chats stay as “deleted message” without your content.
6. Your rights and choices
You can see and change your data in the app, export all of it at any time, and delete your account from Security (or from the page on our website, or by writing to us). You can also ask for access, correction, deletion, restriction or portability, and object to a use, under the Uruguayan data protection law (Law 18.331) and, where it applies, the GDPR or other laws of your country. You can turn notifications off in the app. If you think we handled your data wrongly you can complain to the data protection authority of your country (in Uruguay, the Unidad Reguladora y de Control de Datos Personales).
7. Security
Connections are encrypted; passwords are hashed with Argon2id; two-step verification is mandatory; sessions can be reviewed and closed; sensitive actions ask you to sign in again; the audit log records security events. No system is perfectly secure; if there is a breach that affects you we will tell you as the law requires.
8. Cookies and similar technology
We use only the cookies and storage that are strictly necessary: the session cookie, a security token, your language and the local copy that lets the app open fast. We do not use advertising or tracking cookies.
9. Children
The Service is not for people under 18 and we do not knowingly collect their data. If you think a minor has an account, tell us and we will delete it.
10. Changes
We may update this policy. If the change matters we will tell you by email or inside the app before it applies. The date at the top shows the latest version.
11. Contact
For privacy questions or to use your rights, write to info@bookstracker.com.