Privacy policy

1. General information

  1. This Privacy Policy explains how personal data is processed when using the Cover to Cover Club online service (hereinafter referred to as the "Service").
  2. The Service is operated by the owner of the www.covertocoverclub.com domain (hereinafter referred to as the "Operator").
  3. The Policy applies to all users of the Service, including visitors, registered users, and people contacting the Operator.

2. What data may be processed

  1. The scope of processed data depends on how the user uses the Service and what functionalities are enabled.
  2. The Service may process in particular:
    1. email address,
    2. account credentials and data necessary to maintain the user account,
    3. content voluntarily entered into the Service by the user,
    4. technical and diagnostic data, including IP address, browser, operating system, device, and activity timestamps,
    5. additional category-specific functional data described in supplementary sections dedicated to a given Service.
  3. Providing data is voluntary, but some data may be necessary to register an account, sign in, or use selected Service features.

3. Purposes and legal grounds of processing

  1. Personal data may be processed for the following purposes:
    1. creating, maintaining, and securing the user account,
    2. providing the Service and its individual functionalities,
    3. handling technical issues, support requests, and communication with the user,
    4. ensuring security, preventing abuse, and enforcing the Terms of Service,
    5. fulfilling legal obligations imposed on the Operator,
    6. pursuing the Operator's legitimate interests, such as improving stability, performance, and quality of the Service.
  2. Where required, processing is based on the user's consent, which may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data recipients

  1. Personal data is not sold to third parties.
  2. Data may be entrusted to entities supporting the operation of the Service, in particular:
    1. hosting and infrastructure providers,
    2. technical service and maintenance providers,
    3. entities whose involvement is required by applicable law or a lawful request from public authorities.
  3. Such entities may access data only to the extent necessary to provide their services or fulfil legal obligations.

5. Data retention

  1. Personal data is stored only for as long as necessary to fulfil the purposes for which it was collected.
  2. Account-related data may be stored for as long as the user maintains an account, and then for the period necessary to secure claims, fulfil legal obligations, or handle abuse prevention.
  3. Data that is no longer needed is deleted or irreversibly anonymized, unless longer retention is required by law.

6. User rights

  1. Subject to applicable law, the user has the right to:
    1. access their personal data,
    2. rectify inaccurate data,
    3. erase data,
    4. restrict processing,
    5. object to processing,
    6. data portability,
    7. withdraw consent where processing is based on consent.
  2. To exercise these rights, the user should contact the Operator using the contact details available within the Service.

7. Security

  1. The Operator takes reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or unlawful disclosure.
  2. Despite these safeguards, no internet-based service can guarantee absolute security, so users should also protect their own credentials and devices.

8. Changes to the Privacy Policy

  1. The Operator may update this Privacy Policy when the Service, legal obligations, or data processing practices change.
  2. The current version of the Policy becomes effective upon publication in the Service.

9. Reading activity data

  1. In Cover to Cover Club, additional data related to features that support a daily reading habit may also be processed, in particular:
    1. books added by the user and the history of scanned books,
    2. reading progress information, including the completion percentage of a book,
    3. reading reports, including page ranges and entry dates,
    4. the history of reading days shown in the activity calendar.
  2. This data is processed solely to present reading history, support regular reading motivation, and provide progress synchronization between devices.

10. Reader profile and shared notes

  1. Some features of the app show part of your data to other readers:
    1. the nickname given to your account or one you choose yourself, and your avatar or profile photo,
    2. notes on your reading entries that you mark as shared, together with the book, the page range and the date of the entry,
    3. your likes of other readers' notes.
  2. Notes are private by default. You can stop sharing a note at any time on its entry, and remove your profile photo.
  3. Before other readers see it, a profile photo is automatically checked for prohibited content by Amazon Rekognition (Amazon Web Services, EU region, Frankfurt) and, when in doubt, by an administrator. The photo is stored as a square image without metadata such as location.
  4. You can report a note or a reader and block a reader. Reports are reviewed by an administrator, and a note that breaks the rules may be hidden. Reports are kept for moderation.