Privacy policy

The short version

We collect the minimum data needed to make Plumerie work. We never sell your data. We never show you ads. We never share your reading habits with anyone. You can export or delete your data at any time.

What we collect

Account information

When you create an account, we store your email address and display name. If you sign in with Google, we receive your name and email from Google — nothing else.

Library data

The books you add, your reading status, tags, notes, ratings, locations, and lending records. This is the core of what Plumerie does, and it’s stored so you can access your library from any device.

Usage data

We use PostHog for basic analytics: which features are used, how often, and where people get stuck. This helps us improve Plumerie. We respect Do Not Track browser settings. We don’t track individual reading habits for advertising — because we don’t advertise.

Technical data

Standard server logs: IP address, browser type, device type, and timestamps. These are used for security and troubleshooting, not for tracking you.

What we don’t collect

• We don’t track which specific books you read or how long you spend reading them.
• We don’t build behavioral profiles for advertising.
• We don’t collect data from your contacts, camera roll, or other apps.
• We don’t use cookies for advertising. We use only the cookies needed to keep you signed in.

How we use your data

• To provide and improve Plumerie (your library, family sharing, lending tracking)
• To send you important account-related emails (like a borrower invite or a password reset)
• To understand how Plumerie is used overall (aggregate analytics, not individual tracking)
• To respond to your feedback and support requests

We never use your data to show you ads, sell you books, or recommend purchases.

Who can see your data

• You: You can see and export all of your data at any time.
• Your family members: If you create or join a family library, members of that family can see the shared book collection. They cannot see your private account information.
• Borrowers: If you send a borrower invite, the borrower can see the details of the specific book you lent them. They cannot see the rest of your library.
• Us (Avec Nous): We can access your data for technical support and troubleshooting, but we don’t browse user libraries for fun.
• Nobody else: We don’t sell, rent, or share your personal data with any third parties.

Where your data is stored

Your data is stored on Google Cloud (Firebase) servers in the European Union. Google Cloud meets industry-standard security and compliance requirements.

Plumerie is operated by Avec Nous, a company based in Helsinki, Finland.

Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your data — you can export your entire library as a CSV file at any time from Settings.
• Correct your data — you can edit any book, tag, location, or account detail directly in the app.
• Delete your data — you can delete your account and all associated data from Settings. This action is permanent.
• Port your data — the CSV export includes all of your library data in a standard format you can use anywhere.
• Object to processing — if you have concerns about how we use your data, contact us.

Data retention

We keep your data for as long as your account exists. If you delete your account, all of your data is permanently removed within 30 days.

Third-party services

Plumerie uses the following third-party services:

• Google Cloud / Firebase — data storage, authentication, cloud functions
• Google Books API — book metadata and cover images (no personal data is sent)
• Open Library (openlibrary.org) — book metadata and cover images (no personal data is sent)
• Finna (finna.fi) — Finnish book metadata, provided by the National Library of Finland (no personal data is sent)
• Vercel — website hosting
• PostHog — privacy-friendly analytics (respects Do Not Track)
• Resend — transactional emails (borrower invites, feedback notifications)
• Stripe — payment processing (when premium plans launch — Stripe handles all payment data; we never see your card number)

Children

Plumerie is not designed for children under 16. We do not knowingly collect data from children. If you believe a child under 16 has created an account, please contact us and we will delete it.

Changes to this policy

If we make meaningful changes to this policy, we’ll notify you by email or through the app. Minor wording updates won’t trigger a notification but the “last updated” date will change.

Contact

If you have questions about this privacy policy or how we handle your data:

Email: hello@plumerielibrary.com
Company: Avec Nous, Helsinki, Finland