Privacy policy
Last updated: 2 November 2026
This policy covers Bookbeam: the Bookbeam Reader app for Android and BOOX, the web library at books.bookbeam.tools, the Bookbeam Chrome extension and this website. Bookbeam is run by MICHAŁ WŁOSIK EFC (Michał Włosik), ul. Północna 16/5, 54-105 Wrocław, Poland, which is the controller of your personal data. If you have a question about your data, write to hello@bookbeam.tools.
The short version: we collect what we need to run your library and nothing more. We don't sell your data, we don't show ads, and we don't use your books or reading for advertising or profiling.
What we collect
- Account: your email address and, if you choose one, a password (stored only as a hash). If you sign in with Google, we receive your email address and name from Google.
- Your library: books and documents you upload or send to Bookbeam, articles and YouTube transcripts you send from the extension, and their covers.
- Reading data: reading progress, highlights, notes, bookmarks and dictionary settings, so they sync between your devices.
- Devices: a name and identifier for each device signed in to your account, so we can apply your plan's device limit.
- Delivery settings: your e-reader's send-to-device email address (for example Kindle, PocketBook or reMarkable) and, if you connect them, access to a Bookbeam folder in your Dropbox or Google Drive.
- Purchases: your plan, its renewal date and your usage allowances (articles, videos, read-aloud time). Payments are handled by Google Play; we never see or store your card details.
- Web pages you send: the extension reads only the page you choose to send, when you click Send or press the shortcut. It doesn't read other tabs or your browsing history.
We don't collect your location, contacts, photos, microphone, browsing history or advertising IDs, and the app has no third-party analytics or advertising SDKs.
This website (www.bookbeam.tools) uses Google Analytics to count visits and see which pages help people, but only if you click Accept in the cookie notice. Until then no analytics cookies are set. Google Analytics receives your IP address (shortened by Google) and pages visited. You can change your choice by clearing this site's data in your browser. The legal basis is your consent.
How we use it
- To turn articles and videos into e-books and deliver them where you asked.
- To store your library and sync it between your devices.
- To read books aloud, translate text and write Book guide descriptions when you use those features.
- To manage your account, plan and purchases, and to answer support requests.
- To send emails about your account, such as sign-in codes and receipts. We don't send marketing emails unless you ask for them.
The legal bases are performance of our contract with you (running the service you signed up for) and our legitimate interest in keeping the service secure and working.
Who processes data for us
We use these service providers, only for the purposes above:
- Supabase (servers in Frankfurt, EU): accounts, database and file storage.
- Vercel: hosting for the web library.
- PikaPods: hosting for this website.
- Google Analytics: visit statistics for this website, only with your consent.
- Google Play: payments and subscriptions.
- Deepgram and ElevenLabs: natural-voice read-aloud. The text being read is sent to them to generate audio.
- Google Gemini API: Book guide descriptions, translation, and YouTube summaries when Chrome's on-device AI isn't available. The relevant text is sent to generate the result.
- Resend and Amazon SES: sending email, including books you send to an e-reader by email.
- Dropbox and Google Drive: only if you connect them as a destination.
Some of these providers are outside the European Economic Area. Where that's the case, transfers rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
On-device AI
When your computer supports it, the Chrome extension summarises and translates with Chrome's built-in AI, which runs on your computer. That text doesn't leave your device for those steps.
Google user data
Bookbeam's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in only to create and sign in to your account, and Google Drive access only to save the books you send to your Bookbeam folder. We don't use Google user data for advertising, sell it, or let people read it except where you ask us to (for support), for security, or where the law requires.
How long we keep it
We keep your data while your account is open. When you delete your account, your library, files, reading data and account are deleted within 30 days, including from backups. We keep purchase records for as long as tax and accounting law requires.
Deleting your account
You can delete your account in the app (Settings → Account → Delete account), in the web library settings, or by following the steps at books.bookbeam.tools/delete-account. You can also email us from the address on your account.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable format. Email hello@bookbeam.tools and we'll reply within 30 days. You can also complain to your data protection authority; in Poland that's the President of the Personal Data Protection Office (UODO).
Security
All data is encrypted in transit. Your library is private to your account and protected by access rules on our database and storage.
Children
Bookbeam isn't intended for children under 13, and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date at the top. For significant changes we'll also tell you in the app or by email.
