Privacy Policy
Last updated: 13 September 2026
1. Data controller
The data controller is Stefano Fragnière, Geneva, Switzerland. Contact: contact@mayalibri.com - mayalibri.com.
2. A local-first application
Maya Libri can be used without an account. Without Maya Cloud, your library, notes, reading history, loans and borrowings, Pantheon, personal photos and preferences remain on your device.
3. Maya Cloud
Maya Cloud is optional. It currently provides backup and restore for your library. Backups are started manually with “Back up now”; automatic multi-device synchronization is not yet available.
4. Account and authentication
A Maya Cloud account uses only an email address. Sign-in is performed with a temporary six-digit code sent by email, without a password.
5. Supabase hosting
Supabase provides authentication, database and private cover storage. The project is hosted in Ireland (eu-west-1). Transfers use HTTPS/TLS and RLS policies isolate each user's data.
6. Photos and covers
Personal photos are cropped and recompressed before storage and are uploaded to Maya Cloud only when a backup is made. Deleting a book, replacing a cover and resetting the app now clean the related local files; each backup also removes orphaned cloud covers. Systematic removal of any EXIF/GPS metadata still requires technical confirmation.
7. Open Library
An ISBN may be sent to the public Open Library API to retrieve bibliographic information. Maya Libri does not use a personal Open Library account.
8. Sign-in emails - Resend
Resend is used only to send temporary sign-in codes. The recipient email address, code and fixed message content are required. Final log-retention and tracking settings still need to be confirmed with the provider.
9. Newsletter
The website newsletter is managed separately through Infomaniak Newsletter and is not automatically linked to a Maya Cloud account.
10. No advertising or analytics
Maya Libri currently includes no advertising, advertising identifiers, behavioural analytics, telemetry or intentional geolocation collection.
11. Third-party services
The main external services are Supabase, Resend, Open Library, Infomaniak and Stripe. Stripe is used only through external links for voluntary support.
12. Sharing
Sharing a book entry uses the operating system's native share sheet. Any subsequent processing depends on the service voluntarily selected by the user.
13. Loans and borrowings
Users may enter a third party's name for a loan or borrowing. This remains local unless voluntarily backed up to Maya Cloud. Users are responsible for the information they enter.
14. Voluntary support
Financial support is optional and takes place on an external Stripe page. Maya Libri does not receive financial data inside the app.
15. Security
Network communications use HTTPS/TLS. The Supabase administrative secret is never embedded in the app. The session token is currently stored in AsyncStorage; migration to Keychain/Keystore through expo-secure-store is planned for the next Android build cycle.
16. Account deletion
In Settings → Cloud account, “Delete my account and data” now provides self-service deletion with double confirmation. A server function removes personal cloud covers and then the authentication account; the associated backup is deleted by cascade. Local books remain on the device.
17. Access and export
Automated in-app export is not yet available. Access or export requests can be sent to contact@mayalibri.com.
18. Retention
Local data remains on the device until deleted. Maya Cloud data remains until deleted by the user. Some provider-specific technical log retention periods still need confirmation.
19. Minors
Maya Libri currently asks for no date of birth and intentionally collects no age data.
20. Future features
Automatic multi-device synchronization, Apple/Google sign-in, web access and other features are contemplated but are not active. This policy will be updated before any material change in data processing.
21. Changes
This policy may be updated to reflect functional, technical or legal changes to Maya Libri.
22. Your rights and contact
For access, correction or deletion requests: Stefano Fragnière, Geneva, Switzerland - contact@mayalibri.com. Reasonable verification of identity or control of the account email address may be requested.
