Bookmark Privacy Policy

Data we collect

Depending on how you use Bookmark, we process:

• Account — email address, password (stored as a one-way hash), and an internal user id. Password reset tokens are short-lived and bound to your current password.
• Library content — items you save (title, author, URL, extracted HTML, tags, reading progress), highlights, notes, catalogs, and reading status.
• AI features — chat messages, article text sent for embeddings, summaries, recommendations, and text-to-speech audio generation.
• Purchases — subscription status and identifiers from Apple In-App Purchase (via RevenueCat) and/or Stripe (website billing). We do not store full card numbers.
• Usage — product events such as discovery save/dismiss when stored server-side so recommendations can improve.
• Optional integrations — a Readwise access token you paste in Settings (stored encrypted), and an email-forwarding address we generate for newsletter ingest.
• Chrome Clipper — when you click Save, the extension sends the active tab’s URL, title, and extracted HTML to your Bookmark account. Auth tokens stay in Chrome local storage.

Data that stays on your device

• Face ID / Touch ID — optional reauthentication. Your password is stored in the iOS Keychain on that device; biometric templates never leave the device.
• Camera / photos for book-page OCR — scanning uses on-device Apple Vision. Page photos and recognized text are not uploaded for OCR. You choose which lines to save as a highlight.
• Offline article downloads and session tokens in the iOS Keychain / app storage.

How we use the data

We use this information to provide Bookmark: sign you in, store your library, search, recommend, generate AI assistance and listen-to-article audio, process subscriptions, and operate email forwarding. We do not sell personal data. We do not use library content for advertising. We do not use an advertising identifier (IDFA) or App Tracking Transparency.

Processors and sharing

We share data with service providers only as needed to run Bookmark:

• Hosting: Railway (API, website, and database).
• AI: OpenAI and/or Anthropic for chat, embeddings, article enrichment, and text-to-speech.
• Website billing: Stripe.
• Apple In-App Purchase: Apple and RevenueCat (app_user_id is your Bookmark user id).
• Product analytics: PostHog (screen and page views, in-app events, and session recordings). When you are signed in we identify events with your Bookmark user id, email, and username.
• Email delivery: our email provider (for password reset and similar transactional mail).

We may disclose information if required by law. We do not share Clipper or library data with advertising or data brokers.

Account deletion

You can delete your account in the app: iOS More → Account → Delete account, or on the website under Settings → Account. We ask for your password to confirm.

Deletion starts immediately. We remove your account, library items, highlights, notes, catalogs, Readwise token, email-forwarding address, and our copy of subscription records from production systems. This is typically complete within 24 hours and in any case within 30 days, except where we must retain limited records (for example billing or security logs) as required by law or a payment processor.

Deleting your Bookmark account does not cancel an App Store subscription. Cancel that in iOS Settings → Apple ID → Subscriptions (or the App Store account subscriptions page). Website Stripe subscriptions are cancelled as part of deletion when possible. Apple, Stripe, and RevenueCat may keep purchase records under their own policies.

Your choices

• Sign out to clear session tokens on that device or browser.
• Remove your Readwise token or disable email forwarding in Settings.
• Uninstall the iOS app or Chrome extension to clear local storage on that client.
• Delete individual items, highlights, and notes without deleting the whole account.

Security

Traffic to the Bookmark API uses HTTPS. Passwords are hashed. Readwise tokens are encrypted at rest. No method of transmission or storage is perfectly secure.

Children

Bookmark is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Contact

Questions about this policy: [email protected].