Your data, kept simple and safe.

Bookvise — Privacy Policy. Version 1.0 · Effective and last updated 4 May 2026.

01Overview

This Privacy Policy describes how Bookvise ("Bookvise", "we", "us", "our") collects, uses, stores, shares, and protects information about the people who use our website and applications (the "Service"). Bookvise is a focused workspace for self-learners that pairs structured eBooks with section notes, visual guides, flashcards, quizzes, and timed mock tests.

We have written this policy to be readable. The summary at the top of this page captures the essentials; this section and those that follow are the formal, controlling text. By using Bookvise, you agree to the practices described here.

02Information we collect

We collect only the information needed to provide the Service. The categories below correspond to fields actually stored by Bookvise; we do not maintain hidden profiles.

2.1 Information you provide

• Phone number. Required for sign-in. Bookvise is currently available for Indian (+91) numbers only.
• Display name. The name you set during sign-up or in your profile. You can change it any time.
• Email address. Optional. If you choose to add one, we use it only for privacy and account communications.
• School profile. Optional fields for school name, grade level, education board, and pincode. Used to suggest relevant books; you can leave them blank or remove them.
• Reader preferences. Theme, font family, font size, and layout choices for the questions and flashcards views.

2.2 Information generated by your use of the Service

• Quiz attempts. The quizzes you take, the answers you select, the time spent per question, and the resulting reports.
• Flashcard reviews. Spaced-repetition data — which cards you have reviewed, your responses, and scheduling state.
• Revision progress. Items you mark for revision and the progress you make through them.
• Shelves. The books you save and the structure of your personal shelves.

2.3 Information collected automatically

• Session metadata. When you sign in, we record an issued-at time, expiry, last-seen time, and a revoked flag for the session.
• IP address and user-agent. Captured for each session so you (and we) can recognise unusual activity. We do not derive a precise location from your IP; the location field on your session is left blank unless we explicitly enable a coarse-grain lookup in future.
• Diagnostic logs. Standard server logs — request paths, status codes, error traces — which may incidentally include your IP and user-agent.

2.4 Information from third parties

When you sign in, our identity provider (Google Firebase Authentication) verifies that the OTP delivered to your phone matches and returns a signed token. We receive the verified phone number and the token; we do not receive your contacts, social profiles, or anything else from the provider.

03How we use your information

We use your information for the following purposes, and only these purposes:

• Operate the Service. Sign you in, keep you signed in, and route you to your books, shelves, quizzes, and flashcards.
• Save your progress. Persist quiz attempts, flashcard reviews, revision progress, and shelf structure so your study continues across sessions and devices.
• Personalise your experience. Apply your reader preferences (theme, font, layout) and surface content relevant to your school profile if you have provided one.
• Protect accounts. Detect and respond to suspicious activity using session metadata and rate signals; protect the login page using reCAPTCHA Enterprise.
• Improve Bookvise. Analyse aggregated, anonymised usage patterns — for example, average time spent on a question or completion rates of a chapter — to improve content and tools. We do not single you out in any analysis we publish.
• Communicate with you. Send service messages such as security alerts, policy updates, and responses to your privacy requests. We do not send marketing messages without your consent.

04Legal basis

We rely on the following bases under applicable Indian law (including the Digital Personal Data Protection Act, 2023) and, where relevant, comparable laws in other jurisdictions:

• Performance of the Service. Processing required to deliver Bookvise once you sign up.
• Consent. For optional fields such as school profile or email, and for any future processing that goes beyond providing the Service.
• Legitimate interests. Keeping accounts secure, preventing abuse, and improving the Service through aggregated analysis.
• Legal obligations. Where we must retain or disclose data to comply with valid laws or court orders.

05Sharing and processors

We do not sell your personal information. We share it only with the limited set of service providers ("processors") who help us run Bookvise, and only to the extent each provider needs it.

Each processor is bound by a written agreement to use your data only on our instructions, to keep it secure, and to return or delete it when our relationship ends.

We may also disclose information when we believe in good faith that disclosure is required by law, to enforce our terms, or to protect the rights, property, or safety of Bookvise, our users, or the public. We will give you notice of any such request unless we are legally prohibited from doing so.

06Retention

• Account and profile. Retained while your account is active. If you delete your account, we delete or anonymise account and profile data within 30 days, except where we are required to retain it by law.
• Learning activity. Retained alongside your account so you can return to your progress. Deleted on account deletion.
• Sessions. Each session expires automatically. Revoked or expired sessions are pruned from our records on a rolling basis.
• Server logs. Retained for up to 90 days for security and debugging, then deleted or aggregated.
• Backups. Encrypted backups roll off according to a fixed schedule (typically 30–60 days). Deletions take full effect once backups age out.

07Security

We protect your data with measures appropriate to its sensitivity:

• Transport. All traffic between your browser and Bookvise is encrypted with HTTPS/TLS.
• Storage. Data is stored on managed databases with encryption at rest.
• Authentication. Sessions are bound to a JWT delivered through an Authorization cookie marked HttpOnly, Secure, and SameSite=Strict, so it is not readable by JavaScript and is not sent on cross-site requests.
• Access controls. Production access is limited to a small set of engineers, audited, and gated by per-person credentials.
• Bot mitigation. The sign-in page is protected by Google reCAPTCHA Enterprise to discourage automated abuse of phone numbers.

No method of storage or transmission is perfectly secure; we work to keep risks low and to respond quickly if anything goes wrong.

08Your rights and choices

You have the following rights over your personal information. We will honour valid requests free of charge and within 30 days.

• Access. You can view your name, school profile, and reader preferences in the app, and request a portable copy of your account data.
• Correction. You can edit your display name, school profile, and reader preferences directly in your profile and settings.
• Deletion. You can ask us to delete your account and the personal data attached to it.
• Withdraw consent. Where we rely on consent (e.g. optional fields), you may withdraw it at any time without affecting earlier processing.
• Object. You can ask us to stop processing your data for a specific legitimate-interest purpose; we will weigh your reasons and respond.
• Sign out everywhere. Logging out invalidates your current session token; you can request that we revoke all of your active sessions.
• Complaint. If you are not satisfied with how we have handled a privacy request, you may complain to the relevant data-protection authority in your jurisdiction.

To exercise any of these rights, write to us at privacy@bookvise.net from the email address we have on file, or from the phone number registered with your account.

09Cookies and similar technologies

Bookvise uses a small, fixed set of essential cookies and storage. We do not use advertising or cross-site tracking cookies.

10Children's privacy

Bookvise is designed for self-learners, including students. If you are under 18, you should use Bookvise only with the involvement of a parent or guardian, and should not provide your phone number, email, or school details without their consent. We do not knowingly collect personal data from children below the age of 13. If you believe a child below that age has provided us with personal data, please contact us and we will delete it.

11Changes to this policy

We may update this policy as Bookvise evolves. When we do, we will:

• Increment the version number and update the "Last updated" date at the top of this page.
• Keep an archive of previous versions available on request.
• Tell you in-app or by email about any change that materially expands what we collect or how we use it, and obtain consent where required.

12Contact us

For privacy questions, requests, or complaints, write to:

• Email: privacy@bookvise.net
• Subject line: "Privacy request — <your registered phone or email>"

We will acknowledge your request within 7 working days and aim to resolve it within 30 days.

End of policy. Bookvise · Version 1.0 · Last updated 4 May 2026.