Privacy
Last updated 25 September 2026.
Your library stays on your device
When you use Biblio without signing in, every book you add, every cover, and every bit of metadata is stored in your browser's local database (or, on iOS, in Apple's on-device SwiftData store). Nothing is uploaded anywhere. You can close the tab, delete the app, or clear site data, and your library is gone — and so is every trace of it.
Biblio Cloud (optional)
If you subscribe to Biblio Cloud, your library is synced to
encrypted cloud storage so it follows you across devices. That
storage is provided by Supabase. You can export your library as a
.biblio file at any time, and cancel at any time — your
local copy stays.
iCloud sync (iOS, optional)
On iOS, you can instead sync your library through your own iCloud account using Apple's CloudKit, as an alternative to Biblio Cloud. In this mode your books, covers, and metadata are stored in your private iCloud database — Apple's infrastructure, encrypted with your Apple ID — and we never see or store that data on our own servers. The same goes for your journal, its entries, how each volume is bound, and any cover photograph you add: on this backend they travel through your iCloud, never through us. Preferences that describe your library, like the order of your shelf tabs, travel the same way. A few account settings are the exception, and are listed under Account data below. If you are signed in to a Biblio account, earlier versions of the app also kept those library preferences and journal cover photographs with your account, and biblio.ink or any device you sync through Biblio Cloud still reads and writes them there. We leave those copies in place, because removing them would reset biblio.ink and those devices; they go when you delete your account. You can turn iCloud sync off at any time in Settings; your local copy stays.
Usage analytics (iOS)
The iOS app logs a small number of anonymous, first-party events (like app opens and book imports) to help us understand how Biblio is used. These events are tied to a random per-install identifier, not your Apple ID or any advertising identifier, and never include book titles or content. You can turn this off anytime in Settings under Privacy ("Help improve Biblio").
Website analytics
biblio.ink counts page views and a few clicks, such as the App Store buttons, with Vercel Web Analytics. It sets no cookies and records no personal identifiers; visits are counted in aggregate.
What we don't do
No third-party trackers. No advertising networks. No ad-tracking cookies. No fingerprinting. No cross-app tracking (no ATT prompt needed, because we don't do that). No email newsletters unless you're a paying subscriber, and even then only for service notices.
Account data
If you create a Biblio Cloud account, we store your email address and subscription status, plus whatever you sync. Payment processing is handled by Stripe; we never see your card number.
A few settings are kept with your account whichever sync option you choose — including iCloud and local-only — because our servers are where they take effect: your newsletter preference, whether you contribute to the Ranking, and whether you are named on the founders' acknowledgement page. These are choices about your account rather than contents of your library; holding them only on your device would mean a preference you set that we never actually honoured. None of it is stored for people without an account.
Deleting your data
Free users: clear your browser's site data for biblio.ink, or delete the iOS app. iCloud sync users: turning off iCloud sync in Settings and deleting the app removes your local copy; your iCloud data is managed the same as any other app's, through your Apple ID. Biblio Cloud users: email hello@agenti.nz and ask for account deletion, or use "Delete Account" in the app. We'll remove everything within seven days.
Atelier
Atelier is our gallery app for iPhone, iPad, and Mac. Its privacy policy now lives on its own site: atelierapp.live/privacy. In short, your pictures stay on your devices and in your own iCloud, and only a collection you choose to publish leaves them, as a page anyone with its link can see. Publishing signs in with your Biblio account, and deleting that account removes every page you published.
Biblio Times
Biblio Times is our newspaper reader for iPhone, iPad, and Mac. It has no account. Each morning your device asks the publishers you chose for their public feeds, straight from their own sites, and sets what they sent as a paper. Nothing is routed through our servers, and we keep no copy of what you read. Each publisher sees the request your device makes, as it would from any reader; "Print on this page" asks the publisher's site for that one page. Editions, clippings and the count of papers on the house are kept on your device and, if you use iCloud, in your own iCloud, which Apple runs and we cannot see into.
Like Biblio, Biblio Times counts a small number of anonymous, first-party events: that the paper was opened or read, a source added or taken out and from which section, a story opened or printed on the page, a back issue read, a setting changed, the pass offered, bought or restored, with the edition, the version and the kind of device. They go under a random identifier made for the install, never a headline, a feed address, a name, or an Apple Account, and nothing is counted before you agree to the notice the paper opens with. Settings has the switch. The Press Pass is sold and processed by Apple; we see only that a pass is held.
Contact
Questions about this policy: hello@agenti.nz.