Bookno Privacy Policy
Effective date: September 8, 2026
Last updated: September 8, 2026
Applicable versions: Bookno 1.0 and later versions that expressly reference this policy
Bookno (“the app”) is provided by the app’s developer (“we”). We care about your privacy. This policy explains what data the app processes, for what purposes, how data is stored, and how you can manage or delete it.
1. Policy summary
- The app contains no advertising SDKs, performs no cross-app or cross-site tracking, and does not sell or rent personal information.
- The app does not require a Bookno account, and we operate no servers of our own for storing your reading data.
- Books, notes, tags, covers, import records, and OCR scans are stored on your device by default.
- Bookno PRO is an optional one-time in-app purchase that unlocks unlimited capacity, iCloud sync, and other benefits; purchase and payment are handled by the Apple App Store, and the app collects no payment information from you.
- Only when you actively purchase Bookno PRO and enable iCloud sync will relevant data be stored via Apple CloudKit in the private iCloud database associated with your Apple ID and synced across your devices.
- The WeRead API key and AI OCR API key (if enabled) are stored only in the current device’s system keychain; they are not uploaded to Bookno servers and are not synced with Bookno’s iCloud data.
- Camera, photo library, files, and clipboard contents are used only when you actively choose the corresponding features.
- OCR uses the device’s built-in Apple capability by default; only after you actively enable “AI OCR” and complete the connection setup will book page images be sent to the provider you configure, with your consent requested beforehand.
- Internet book search, barcode scanning, and general AI features (such as auto-tagging, summaries, or Q&A) are not yet available; this policy does not describe unreleased placeholder features as current data processing activities.
2. Data we process
2.1 Reading data you create or import
The app may process the following:
- Book metadata such as title, author, publisher, ISBN, publication date, language, category, pinned status, and covers;
- Highlights, excerpts, thoughts, chapters, page numbers, locations, tags, rich text, and embedded images;
- Content imported from Apple Books, Kindle, BOOX, WeRead, or other supported formats;
- Necessary records such as import source, import time, deduplication identifiers, and import results.
Purpose: creating, editing, searching, organizing, importing, exporting, and backing up reading notes, and syncing across devices after you purchase Bookno PRO and choose to enable iCloud.
Storage: on your device by default. Reading data can be stored in your iCloud private database after you purchase Bookno PRO and actively enable iCloud sync.
2.2 Camera, photo library, and OCR scan data
When you use “physical book OCR import,” the app may process:
- Book pages you photograph with the camera;
- Images you actively select through the system photo picker;
- Image enhancement results, text recognition results, and recognition confidence information.
OCR text recognition runs on device using Apple’s system capability (Vision) by default. Unless you actively enable the “AI OCR” feature described below or turn on iCloud sync, scanned images and recognition results do not leave the device because of Bookno’s features.
If you actively enable “AI OCR” under “Me > OCR Configuration” and complete the connection setup, the app will send the book page images you select for recognition (preprocessed on device with enhancement and cropping; possibly partial regions) over an encrypted connection to the API service address you enter. The preset service is Alibaba Cloud Bailian’s Qwen OCR; you may also enter another service compatible with the Chat Completions API. Before sending book page images to a service address for the first time, the app displays an explanation and asks for your consent; your consent is recorded on device per service address, and consent will be requested again if you change the address. Recognized text returns to the device as a note draft and is saved only after you confirm. “Save & Test Connection” sends one app-generated test image to the service to confirm the configuration works. After you turn off “AI OCR,” the app no longer sends any book page images.
Images sent to a third-party AI OCR service are governed by that provider’s terms and privacy rules, and the service may charge you based on usage; review the provider’s published information before use. After purchasing Bookno PRO and enabling iCloud sync, scan images and recognition results saved into notes sync to your iCloud private database with the corresponding notes.
The app never browses your entire photo library on its own; it only handles images you explicitly select through system interfaces.
2.3 Files and clipboard contents
When you actively choose to import a file, tap paste, or invoke the system paste control, the app may read:
- Clipboard text from Apple Books or other supported sources;
- Kindle TXT, text, or PDF note files;
- BOOX TXT, PDF, PNG, JPEG, HEIC, and other supported export files;
- Bookno JSON full backup files you actively select.
Files and clipboard contents are used for parsing, preview, import, or restore. Markdown is Bookno’s export format, not the backup/restore format of the current version. A full JSON restore first validates the backup; after your further confirmation, it replaces the books, notes, tags, sources, covers, OCR scan pages, and import records in the current Bookno database. Export your existing data before performing a restore.
The app does not monitor the clipboard in the background and does not read files you have not actively selected. Parsing usually happens on device; parsed results are stored locally as described in this policy, or synced after you purchase Bookno PRO and enable iCloud.
2.4 WeRead connection data
When you actively use “WeRead notes import”:
- The WeRead API key you provide is stored in the current device’s Apple keychain;
- The app uses the API key as a credential to make the requests you actively initiate directly to the WeRead API at
i.weread.qq.comover an encrypted connection; - Requests may involve your WeRead bookshelf, book identifiers, titles, authors, cover URLs, highlights, thoughts, chapters, and related timing information;
- Retrieved data is processed on device first, and you decide whether to import it into Bookno; imported data can sync to your iCloud private database after you purchase Bookno PRO and enable iCloud sync;
- To fill in book covers, the app may download images from the cover URLs returned by WeRead.
We never receive or store your WeChat account password. You can choose “Disconnect WeRead Skill” in the app to delete the API key from this device’s keychain. WeRead’s own handling of data is governed by its own terms and privacy rules; please review them via WeRead’s official channels before use.
Bookno is an independent app and is not an official product of WeRead, Tencent, Apple Books, Kindle, Amazon, or BOOX, nor is it endorsed by them unless expressly stated in writing.
2.5 iCloud and Apple service data
iCloud sync is an optional benefit included with Bookno PRO (one-time in-app purchase). Only after you purchase Bookno PRO and actively enable sync does the app use Apple CloudKit to sync books, notes, tags, covers, OCR scan images, and necessary related information in your Apple ID’s private database.
- iCloud sync must be actively enabled (it is not available in the free version) and depends on your Apple ID, network, iCloud storage, and Apple service status;
- After enabling or disabling iCloud sync, you must close and reopen Bookno for the actual storage mode to switch; if switching fails, the app keeps using the local data copy and never proactively deletes or replaces existing data;
- Credentials such as the WeRead API key and AI OCR API key are excluded from Bookno’s iCloud sync;
- Turning off iCloud sync only stops this device from syncing; it does not delete data already in iCloud;
- Apple processes iCloud, App Store, push notifications, and related technical data under its own privacy policy and terms. See the Apple Privacy Policy.
2.6 Diagnostics and analytics
The app currently integrates no third-party advertising, user profiling, behavioral analytics, or crash statistics SDKs, and creates no advertising user profiles.
If you choose to share diagnostic and usage data with developers in your Apple device settings, Apple may provide us with crash, performance, or diagnostic information per your system settings. Apple controls the collection and provision of this information; it is generally not used to identify you directly and is used only for troubleshooting and stability improvements.
3. System permissions
The app may request or invoke the following system capabilities:
| Permission or capability | Use case | Required? |
|---|---|---|
| Camera | Photographing physical book pages for OCR | Only when using the capture feature |
| System photo picker | Choosing book covers or book page images for OCR | Only when actively selecting images |
| System file picker | Importing supported Kindle/BOOX files, or selecting a JSON backup to restore | Only when actively importing or restoring |
| Clipboard paste | Importing Apple Books or other note text you actively copied | Only when actively pasting |
| iCloud/CloudKit | Syncing reading data across devices with the same Apple ID | Optional (Bookno PRO benefit) |
| Background remote notifications | Triggering background sync when iCloud data changes | Used when iCloud sync is enabled |
You can manage camera, photo, and iCloud permissions in iOS or iPadOS Settings. Denying an optional permission does not affect features unrelated to that permission.
4. Purposes and legal basis of processing
We process data only to:
- Provide the book management, notes, tags, import, OCR, export, and sync features you actively use;
- Save your settings and operation results;
- Maintain security, data integrity, deduplication, and failure recovery;
- Locate and solve problems when you request support;
- Comply with applicable legal requirements.
In regions where applicable law requires a processing basis, processing is generally based on performing our service agreement with you, your active requests or consent, our legitimate interest in maintaining service security, and legal obligations. You may withdraw withdrawable consent by stopping use of the relevant features, revoking system permissions, or deleting data as described in Section 7.
5. Data sharing, sale, and tracking
We do not sell or rent your personal information, do not use your reading content for advertising, and do not track you across companies, apps, or websites.
Only when you actively use the relevant features may data be processed by:
- Apple: providing the App Store (including Bookno PRO purchase, payment, and restoration), iCloud/CloudKit, the system keychain, photo picker, camera, file picker, on-device OCR, push notifications, and other system services;
- WeRead (
i.weread.qq.com): verifying the API key and returning your WeRead data and cover URLs when you actively connect and initiate an import; - The AI OCR provider you configure (optional): only after you actively enable “AI OCR” and consent, book page images preprocessed on device are sent to the service address you enter (e.g., Alibaba Cloud Bailian’s Qwen OCR, or another OpenAI-compatible service you enter) for text recognition; fees, data retention, and privacy rules for recognition are determined by that provider;
- Legally required recipients: only where we must respond to valid legal process, or as strictly necessary to protect users, the public, or the security of the service.
If we introduce third-party services or SDKs that access user data in the future, we will update this policy and the App Store privacy disclosure before enabling them, and will require those services to provide protections no weaker than this policy and applicable law.
6. Retention and security
Retention
- Local books, notes, tags, images, import records, and settings: retained until you actively delete them, replace the data with a full backup, or uninstall the app;
- iCloud data: retained until you delete the relevant content on a device with sync enabled, or delete it through Apple’s iCloud management;
- WeRead and AI OCR API keys: retained until you disconnect WeRead and delete the key in the app, or delete the API key in OCR Configuration. Due to how the Apple keychain works, keychain items may survive a simple uninstall, so perform these deletions before uninstalling;
- Bookno PRO purchase status: managed by Apple StoreKit and your App Store account; the app only reads the status on device to determine entitlement validity and stores no purchase credentials or payment information. If a purchase is refunded or reversed, the related benefits may be revoked;
- Support emails or feedback you actively send us: retained only for the reasonable period needed to handle the request, meet legal obligations, and resolve disputes.
Security
We adopt measures appropriate to the product’s current scale and data risks, including storing API keys in the system keychain, using Apple’s private CloudKit database, limiting permission scopes, and never logging real keys.
No storage or transmission method is absolutely secure, however. Protect your device passcode, Apple ID, WeRead API key, and AI OCR API key, and regularly use the app’s export and backup features to preserve important data.
7. Your choices, access, and deletion
You can:
- View, edit, or delete books, notes, tags, and scans in the app;
- Export a restorable full JSON backup, or Markdown files for reading and migration to other note apps;
- Replace current Bookno data with a full JSON backup after explicit confirmation;
- Revoke camera, photo, or other permissions in system settings;
- Turn off iCloud sync under “Me > Sync” (iCloud sync is a Bookno PRO benefit);
- Disconnect and delete the local API key on the WeRead connection page;
- Turn off AI OCR or delete the API key under “Me > OCR Configuration” to stop sending book page images to third-party services;
- Delete the app to remove data in its local app container;
- Manage data stored in iCloud through Apple’s iCloud management features.
Note: turning off sync does not delete data already in iCloud, and deleting the app does not necessarily delete keychain or iCloud data. To delete synced data, first delete the content on a device with iCloud sync enabled, confirm syncing has completed, and then disable sync or uninstall the app as needed.
The app offers no Bookno account registration, so there is no separate Bookno online account to close. For data we actually hold, such as support communications, you may request access, correction, or deletion via the contact in Section 11. We cannot read or delete, on your behalf, data that exists only on your device, in Apple’s private iCloud database, or in your WeRead account.
8. Cross-border processing
Apple, WeRead, or their service providers may process data related to their services outside your country or region, per their infrastructure and applicable terms. Such processing is the responsibility of the respective providers under their privacy rules. We operate no cross-border servers that centrally receive your reading data.
9. Minors
The app is not directed at children under 13, or other minimum ages set by the law of your region. Minors should use the app and external services under guardian supervision. If you believe we actually hold personal information of a minor that we should not process, contact us under Section 11.
10. Changes to this policy
We may update this policy due to changes in features, the law, or Apple platform requirements. Significant changes will be explained via in-app notices, release notes, or the policy page, and the date at the top will be updated. Where the law requires renewed consent, we will seek it before the relevant processing begins.
11. Contact us
If you have questions about this policy, data processing, or privacy rights, contact:
- Email: luoyixiao13@gmail.com
We will handle reasonable requests within the period required by applicable law. To protect data security, we may need to verify the relationship between the requester and the relevant information.
