Privacy policy

If you never sign in, we collect nothing about you. Browsing books, reading soundtracks, searching and scanning all work signed out, and none of it is tied to an identity.

When you create an account, we store:

• Your email address, so you can sign in and recover your account. If you use Sign in with Apple and choose to hide your address, we only ever see Apple's private relay address.
• Your display name and username, which are public — they appear next to the songs you nominate.
• What you nominate and how you vote, which is the app. Nominations are public. Individual votes are not shown to other people; only the resulting score is.

Passwords are handled by our authentication provider and stored only as a salted hash. We never see your password.

The app asks for camera access for one reason: to read the ISBN barcode on the back of a book. The camera feed is processed on your device and never recorded, stored or uploaded. No photo ever leaves your phone. You can decline camera access and type or search ISBNs instead.

• No advertising, and no advertising SDKs.
• No third-party analytics or tracking, in the app or on this site.
• No tracking you across other companies' apps and sites.
• We do not sell your data, and we do not share it for anyone else's marketing.
• No location, contacts, photo library, health or financial data is collected.

These services handle data on our behalf, and only to make the app work:

• Supabase — database, accounts and authentication. This is where your account and your nominations and votes live.
• Vercel — hosting for this website, which processes request logs including IP addresses for security and reliability.
• Apple — Sign in with Apple, and the App Store.

When you look up a book or search for a song, we query Open Library, Google Books, the Apple Music (iTunes Search) catalogue and, where enabled, Spotify. Those requests carry the search terms and the usual network metadata — never your identity or your account. Tapping a song hands you off to Apple Music or Spotify, where that company's own privacy policy takes over.

The app and this site remember the books you recently opened so you can get back to them. That list lives on your device, not on our servers. Clearing your browser storage or deleting the app removes it.

You can delete your account yourself, at any time, from inside the app: open the You tab and tap Delete account. It takes effect immediately, and it takes your email address, your display name, your username and your votes with it. If you'd rather not do it in the app, email contact@mallorygray.io from the address on the account and we will delete it within 30 days.

Songs you nominated stay on the book pages they belong to, detached from your name, so the soundtracks other readers voted on don't fall apart. If you would rather your nominations were removed too, say so in the same email and we will remove them.

Book Music is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, email us and we will delete it.

Depending on where you live, you may have the right to access, correct, export or delete the personal data we hold about you, and to object to our processing of it. Email us and we will act on it. We keep account data for as long as the account exists.

If this policy changes in a way that matters, the date at the top changes with it and the new version is posted here before it takes effect.

Book Music is operated by Mallory Gray. Questions about privacy, or a deletion request: contact@mallorygray.io.