Privacy Policy

1. Controller

Noah Garbe, Erlachgasse 14/33, 1100 Vienna, Austria
Email: hello@lecty.app

2. What data we collect

When you create an account and use Lecty, we store the following data:

Account — username and email address. If you register with a password, it is stored hashed with bcrypt and never in plain text.
Sign in with Apple — if you use Apple to sign in, we receive an anonymous user identifier from Apple and, if you allow it, your email address. If you choose “Hide My Email”, we only ever see Apple’s private relay address. The first name Apple passes on during your first sign-in is used once to suggest a username and is not stored separately.
Google Sign-In — if you use Google to sign in, we receive your Google user identifier, your email address and your first name, used the same way as above.
Profile details — avatar, bio, preferred genres and language, reading goal.
Reading activity — reading progress, swipes, reviews, reading lists, club memberships and follows.
Content you create — reviews, reading moments and reactions, and discussion posts in book clubs.
Notifications — if you turn them on, a device token for Apple Push Notification service (iOS app) or a push subscription for your browser (web).
Safety — reports you submit about content and the list of users you have blocked, so we can act on them.
Server logs — our server records technical data such as IP address, time and requested address for a short period, to keep the service running and to prevent abuse.

3. Purpose of processing

Your data is used solely to provide the Lecty platform — in particular for authentication, displaying content, social interaction with other readers, sending notifications you asked for, and handling reports so we can keep the community safe. We do not use your data for advertising, profiling or cross-app tracking.

4. Legal basis

Processing is based on Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(a) GDPR (consent, for example for notifications) and Art. 6(1)(f) GDPR (legitimate interest in the security and abuse prevention of the service).

5. Retention and deletion

Your data is stored for as long as your account is active. You can delete your account at any time under Profile → Settings → Delete account. Deletion is immediate and irreversible: your profile, reviews, reading moments, discussion posts, lists, club memberships and push tokens are removed from our database. Server logs are deleted on a rolling basis.

6. Service providers we work with

We do not sell your data, and we do not pass it to anyone for their own purposes. To run the app we rely on the following providers:

Hostinger — hosting of the server and database, in the EU.
Resend (resend.com) — delivery of transactional emails such as email verification and password resets, with servers in the EU.
Google Books API — when you search for books, your search term is sent to Google to retrieve book information.
Apple — for Sign in with Apple, and for delivering push notifications to the iOS app via Apple Push Notification service.
Google — for Google Sign-In, if you choose it.
Your browser vendor’s push service — for web push notifications, if you enable them in the browser.

We do not use any advertising networks, analytics services or tracking SDKs.

7. Hosting

Lecty runs on a server operated by Hostinger in the EU.

8. Cookies & local storage

Lecty does not use tracking cookies. For authentication, a JWT token is stored in your browser’s localStorage (in the iOS app, in its local storage). It contains no personal data and is removed when you log out. We also store small display preferences there, such as which notices you have dismissed.

9. What other people can see

Lecty is a social app. Your username, avatar, bio, reviews, reading moments and discussion posts are visible to other users, and posts inside a book club are visible to the members of that club. Your email address is never shown to other users. You can block other users and report content at any time.

10. Minimum age

You must be at least 14 years old to use Lecty. This follows the Austrian Data Protection Act, which sets 14 as the age from which you can consent to the processing of your data yourself. If you believe someone younger has created an account, contact us at hello@lecty.app and we will delete it.

11. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing (Art. 15–21 GDPR). For any request, contact us at hello@lecty.app. We respond within one month.

12. Right to lodge a complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority: www.dsb.gv.at

13. Changes to this policy

If we change how we handle your data, we update this page and the date below. Significant changes are announced in the app.