This Privacy Policy explains what information BooX app ("BooX", "we", "us") collects when you use the BooX app, why we collect it, and the choices and rights you have. It applies to all users worldwide, with specific sections below for users in the European Union/UK (GDPR) and the United States (CCPA/CPRA).
BooX app operates the BooX mobile application, a collaborative story-writing service where users take turns adding words or sentences to shared "books." For any privacy question or request, contact us at hello@boox.quest.
Account information: your email address, display name, profile photo, and authentication identifiers from the sign-in method you choose (email/password, Google, Apple, or anonymous sign-in). Content you create: the words, sentences, book titles, genres, comments, and reactions you contribute, along with which books you've authored, joined, published, or reported. Purchase information: whether you have an active subscription and your AI-cover-credit balance. Purchases are processed by Apple, Google, and RevenueCat — we do not receive or store your payment card details. Device and usage information: a device identifier, push notification tokens, app language, and standard analytics/crash data (via Firebase Analytics, Crashlytics, and Performance Monitoring) such as app version, crash logs, and feature usage. AI-generated content: if you generate an AI book cover, the relevant excerpt of your book's text is sent to our AI image provider (OpenAI) to produce the prompt and image. See "Third parties" below.
To provide and operate the collaborative writing service, including turn-taking, notifications, comments, likes, and publishing. To process subscriptions and AI-cover-credit purchases, and to enforce the limits tied to your plan. To generate AI book covers you request. To send you push notifications you've opted into (e.g. "it's your turn," co-author requests, likes, book finished). To moderate content: reviewing reports, enforcing our content rules, and banning accounts that violate them (see Terms of Service). To maintain and improve the app, including diagnosing crashes and understanding feature usage through aggregated analytics. To comply with legal obligations and enforce our Terms.
We do not sell your personal information. We share data only with service providers who help us run the app: Google Firebase (Firestore, Authentication, Cloud Functions, Cloud Storage, Cloud Messaging, Analytics, Crashlytics, Performance Monitoring) — our backend infrastructure. OpenAI — receives book-text excerpts you choose to turn into a cover, solely to generate that image. RevenueCat — manages subscription and purchase state across Apple and Google. Apple App Store / Google Play — process payments for subscriptions and in-app purchases under their own privacy policies. We may also disclose information if required by law, to protect the rights and safety of BooX or its users, or in connection with a merger, acquisition, or sale of assets.
We retain your account and content for as long as your account is active. You can delete your account at any time from Account > Settings > delete account. Deleting your account: reassigns turn-taking away from you on any books you're still an author on, gives you the choice to also delete every book you created, and anonymizes your profile (display name, photo, and email are removed) rather than deleting shared collaborative content outright, since other authors' contributions live in the same book. Some information may be retained longer where required by law (e.g. financial records related to purchases).
If you're in the European Economic Area or United Kingdom, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You may withdraw consent at any time where processing is based on consent. To exercise these rights, contact hello@boox.quest. You also have the right to lodge a complaint with your local data protection supervisory authority. BooX's services are operated using infrastructure that may process data in the United States; we rely on our providers' standard contractual safeguards for any such international transfer.
If you're a California resident, you have the right to know what personal information we collect, to request deletion or correction of that information, and to not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights, contact hello@boox.quest.
BooX is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If a parent or guardian believes a child under 13 has provided us personal information, contact hello@boox.quest and we will delete it. Users in countries where the applicable age of digital consent for data processing is older than 13 (for example, some EU member states set this at 16) must have a parent or guardian's consent to use BooX until they reach that age.
We use reasonable technical and organizational measures to protect your information, including relying on Firebase's and our other providers' security infrastructure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you in the app or by other reasonable means before the change takes effect. The "Effective date" above reflects the last update.
Questions about this Privacy Policy or your data: hello@boox.quest.