Last updated: October 15, 2026
Vellicor ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Vellicor mobile application ("the App").
Account Information: When you create an account, we collect your name, email address, and a password (or authentication token if using Sign in with Apple). If you sign in with Apple and Apple shares your name, we use it as your display name; otherwise we ask you to choose one. We also generate a username and avatar for your profile.
Profile Information: You may choose to add a bio and customize your avatar color. This information is visible to other users.
Book Rankings: We store your book rankings, notes, sentiment ratings, and reading preferences. Rankings marked as "stealth" are only visible to you.
Social Data: We store your follow relationships, book club memberships, and lending records.
Messages: We store messages you send within the app (direct messages, book club chats, lending conversations).
Usage Data: We collect product analytics about which features you use — signing in, ranking a book, following someone, and similar actions — to understand what works and what doesn't. These events are labelled with your account identifier, which makes them pseudonymous rather than anonymous: the identifier is a random ID carrying no name or email, but it is stable, so events from one account can be linked together. We do not send the text of your searches, notes, reviews, or messages to our analytics provider.
Search Queries: To look up book details and cover art we send what you type to Google Books, Open Library, and Hardcover. Those requests carry no account identity — the providers see the query, not who asked.
Imported Libraries: If you import a Goodreads export file, it is read on your device. Books you have read go into a ranking queue that is stored only on your device, together with your Goodreads star rating and read date, which are used only to sort that queue. Nothing is ranked until you rank it yourself. Books on your to-read, currently-reading and did-not-finish shelves are saved to your account with their title, author, cover, page count and the date they were added. ISBNs are sent to Open Library to look up book details, without your account identity. Your Goodreads reviews and private notes are discarded on your device and never sent to us. Imported books are not posted to your followers' activity feeds.
Bug Reports: If you send a bug report from the app (Settings > Help & Support > Report a Bug), we store what you write together with your account identifier, the app version, your iOS version, and your device model (for example "iPhone16,2"). We use these only to investigate and fix the problem you reported.
Contacts: Vellicor does not access your contacts.
Device Information: Apart from the app version, iOS version and device model attached to a bug report you choose to send, we do not collect device information. We do not collect device identifiers, advertising identifiers, or location data of any kind.
We do not sell your personal information. We share data only in these circumstances:
We take reasonable measures to protect your information:
You have the right to:
Vellicor is not directed at children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
The App contains links to bookstores and external websites. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Your continued use of the App after changes constitutes acceptance of the updated policy.
We retain your data for as long as your account is active.
When you delete your account, your account data is removed immediately, not on a delay — profile, rankings, shelves, reviews, notes, follows, messages you sent, and push tokens. Your product analytics profile and its event history are deleted from PostHog as part of the same request. Deletion is final; we do not keep a recoverable copy.
Three exceptions, stated plainly. Bug reports you sent are kept after deletion so we can finish fixing the problem, but the link to your account is removed; if you would like a report deleted entirely, email us. Crash and performance reports already sent to Sentry are not deleted on request — they carry only your account identifier, never your name, email, or anything you wrote, and Sentry provides no per-user deletion. They are purged automatically on our 90-day diagnostic retention. Separately, aggregated statistics that no longer identify you (such as global book rankings) may be retained indefinitely.
Product analytics events are retained for 12 months, then deleted. Server logs are rolled and purged on a 30-day basis.
If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your data. We do not sell personal information.
If you are in the European Economic Area, you have additional rights including data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is your consent (account creation) and legitimate interest (service improvement).
If you have questions about this Privacy Policy or your data, contact us at:
Email: support@vellicor.app
Website: vellicor.app