Shelfwren privacy policy

Last updated November 5, 2026. This policy covers the Android app Shelfwren: Reading Tracker (com.tinyfair.shelfwren) published by Tinyfair on Google Play.

The short version

The app works on your phone. We do not have accounts or servers, and we never receive your books, notes, photos or personal details. Data leaves your phone only to look up books (Open Library and Google Books), for ads, purchases, crash reports and anonymous usage statistics (Google), and for a small settings file the app downloads from our website, as described below.

Data that stays on your phone

Books, shelves and reading sessions: Your books, statuses, shelves, pages, timer sessions, ratings, reviews, goals and streak are kept in a database on your phone.
Notes and quotes: Kept on your phone with the book they belong to.
Barcode scanning: Done by Google Code Scanner in Google Play services. The app receives only the barcode number; it has no camera permission and does not see or store the camera image.
Photos (optional): A cover photo you take or pick for a book is saved in the app's private storage. A photo for Quotes from photos (Pro) is read on your phone by Google ML Kit text recognition and is never uploaded or sent to us. ML Kit may send Google basic information about how its features perform, never your photos.
Import, export and backup files: CSV and backup files are only read or written when you choose a file with the Android file picker, and they stay where you put them.
Android backup: If you use Android backup, Android may include your book database and settings in your Google account backup. Covers are not included.
Settings and reminders: Your goals, theme, timer and reminder choices are saved on your phone. The daily reminder is a notification made on your phone.
Purchases: Handled by Google Play; we never see your payment details.

Book search and covers (Open Library and Google Books)

When you search for a book or scan a barcode, the words you type or the ISBN are sent from your phone to Open Library (openlibrary.org) to find the title, author and page count, and the cover is downloaded from covers.openlibrary.org. If Open Library has no match, the same search or ISBN is sent to Google Books (www.googleapis.com, with cover images from books.google.com). The request contains only the search words or ISBN; no account, device ID or other personal data is sent. Covers are saved on your phone so they are downloaded only once. See the Internet Archive terms (Open Library) and the Google privacy policy.

Settings file from tinyfair.my.id

When it starts, the app downloads a small settings file from https://tinyfair.my.id/config/shelfwren.json (the minimum app version and which ad formats may appear). The request sends no personal data and no identifier. Like any web request, our web host sees your IP address in its standard server logs; we do not use it to identify you or link it to anything else.

Ads (Google AdMob)

The free version shows ads from Google AdMob: a small banner on the home screen, on the stats screen and in Settings, and a small native ad in the library and the quotes list once they hold 6 items or more. A full-screen ad may appear at a natural break: after you finish a timer session, after you mark a book as read, or after an import. It never appears in your first session in the app, at most once every 90 seconds and at most 8 times a day. There are no ads on the timer, the barcode scanner, the page logging, the note editor, the wrap card maker or the Pro screen, and no ad when you open the app. You can also choose to watch a short video to share one wrap card without the watermark, or two videos for 24 hours of Pro. Ad content is limited to no higher than the PG rating, and dating, social casino and similar ads are blocked. To show and measure ads, Google may collect your device's advertising ID, an approximate location from your IP address, information about ad interactions, and diagnostics. Your books, notes and photos are never passed to the ad SDK. In the European Economic Area, the United Kingdom and Switzerland the app asks for your consent first, and you can change it later under Settings, Privacy choices. You can reset or delete your advertising ID in your Android settings. See how Google uses information from apps that use its services. Pro removes all ads.

Crash reports (Firebase Crashlytics)

If the app crashes or hits a serious error, it sends a crash report to Firebase Crashlytics, a Google service that helps us find and fix the bug. A report contains the error and where it happened in the code, the app version, the device model, the Android version, and a random installation ID that is not linked to you, your Google account or your advertising ID. It never contains your books, notes, quotes, photos or anything that identifies you. Reports are kept for 90 days. See Firebase privacy and security.

Usage statistics (Google Analytics for Firebase)

To learn which features people use and where the app can be better, the app sends a few usage events to Google Analytics for Firebase, such as that the main screen opened, a reading session or a book was finished, a wrap card was made, or the Pro offer was shown or Pro was bought. Firebase adds the app version, device model, Android version, country, a random app instance ID and, when ad consent allows it, your advertising ID. Events never contain book titles, your notes, quotes, photos, your name, email or anything you type. Collection follows your choice (Google Consent Mode). We do not use Google signals, we do not send a user ID, and we do not sell this data. In the European Economic Area, the United Kingdom and Switzerland, statistics are only collected if you allow it in the consent form (Settings, Privacy choices lets you change this). Data is kept for 14 months. See Firebase privacy and security.

Purchases (Google Play)

Pro is sold through Google Play Billing as a one-time lifetime purchase or a yearly subscription with a 7-day free trial for new subscribers. You can cancel a subscription anytime in Google Play. We do not see your payment details; Google Play tells the app only whether Pro is active.

Permissions

Notifications, asked when you turn on the daily reminder or start your first timer, for the running timer, the reminder and one reminder 2 days before a Pro free trial ends. Start at boot, so reminders are set again after a restart. No camera permission: barcodes are read by Google Code Scanner, and photos are taken with your camera app or chosen with the Android photo picker. No location, contacts, microphone, storage or photos and media permission. Google's ad and purchase libraries add the advertising ID, network state and billing permissions. Internet is used for book search and covers, ads, purchases, crash reports, usage statistics and the settings file described above.

Children

The app is not directed at children under 13 and we do not knowingly collect information from them.

Your choices and deleting data

Shelfwren has no account and keeps no data on our side. To delete everything Shelfwren stores (your books, sessions, notes, quotes, covers and settings), uninstall the app or clear its storage in Android settings (Apps, Shelfwren, Storage). Backup and CSV files you saved stay where you put them until you delete them. If you use Android backup, Android may include this app data in your Google account backup. For ad and statistics data, use Settings, Privacy choices in the app or your Android advertising ID settings. Questions: support@tinyfair.my.id.

Changes and contact

If this policy changes, the new version will be posted on this page with a new date. Questions: support@tinyfair.my.id.