PRIVACY
Privacy.
Effective 4 October 2026
The BOOKITCA app has no server, no user accounts, no ads and no analytics. The developer never sees your books or what you read or listen to.
Books and reading state
The app connects directly to the storage you choose (such as Dropbox, iCloud Drive or your own WebDAV server) and reads your books from there. Positions, bookmarks, highlights and notes are saved as small files in the same folder so your other devices can pick them up. Data only travels between your device and your service, under that service’s terms.
Signing in to your service
Access credentials (tokens, and for WebDAV your password) stay in the device keychain. Disconnecting the service removes them from your phone together with the library and downloads.
What stays on your phone
Reading and listening statistics, loans, downloaded books and app settings are never sent anywhere.
Collections and custom covers
Collections and covers you upload or photograph are saved in your own storage next to your reading state (the hidden .bookitca folder) so your other devices can pick them up. The book file is never changed and the photo goes nowhere else.
Loans
Loans stay on your phone, and due date reminders are local notifications. When you look up a loan by title or ISBN, the app sends the search text to the Open Library catalog (openlibrary.org) and downloads the cover from there. ISBN scanning happens on the phone and the camera image is never sent anywhere.
Widgets and Lock Screen
The widget, app icon quick actions and Lock Screen playback show your current book from data on your phone. Nothing is sent anywhere for them.
Book catalogs (OPDS)
When you open a catalog such as Project Gutenberg, the app connects to its server just like a browser would. That server sees ordinary connection data, such as your IP address.
Tips
Payments are handled by Apple. The app only learns that a purchase went through, never any payment details.
Crash reports
If you allow sharing with app developers in iOS Settings, Apple may pass anonymous crash reports to the developer.
Writing to the developer
An email sent from the app includes the app version, iOS version, device model, language and the name of the connected service. It is only used to reply.
This website
The beta form stores your email, language, time and consent version, only to send your beta invitation. The site counts visits anonymously with Vercel Web Analytics: no cookies and nothing stored in your browser, so visitors cannot be identified or tracked across sites. The developer only sees aggregate numbers (visits, pages, device type, where people came from). In your browser the site only remembers your light or dark appearance choice. The hosting provider (Vercel) processes standard technical access logs.
Contact
Send questions and deletion requests through the contact listed with the app on the App Store.