Privacy Policy — Pumpkin Library

Last updated: 13 October 2026

Pumpkin Library ("the app") is a mobile app for cataloguing your physical book library and keeping passages captured from photos of the page. It is published by Pumpkin41 ("we", "us"), the trade name of M HENRIQUE MENEGALE TEODORO DESENVOLVIMENTO DE SOFTWARE LTDA, a company based in Curitiba, Paraná, Brazil, registered under CNPJ 44.896.901/0001-89. Pumpkin41 is the controller of the limited personal data described in this policy.

• Website: https://pumpkin41.com
• Contact: [email protected]

This policy explains what information the app handles, where it goes, and the choices you have. It applies to Pumpkin Library on iOS and Android.

In short

• No accounts. You never sign up or log in to use the app.
• No servers of our own. We do not receive, store or see your library, your passages, your notes or your photos.
• No advertising, no tracking, no analytics of ours. The app contains no advertising, we run no analytics, and it does not track you across apps or websites. The few third-party components it relies on are listed in section 7.
• Your data lives on your device. It leaves the device only when you use a feature that needs it: looking up a book online, buying Pro, turning on sync with your own iCloud on iPhone and iPad, exporting a file you choose to share, or, on Android, through your phone's own backup if it is turned on.
• We do not sell or share personal data.

1. Information stored on your device

Everything you create in the app is kept in a local database and in the app's private storage on your device:

• your bookcases, shelves and books (title, author, ISBN, publisher, year, page count, cover, colour, location);
• passages (quotes) you save, their notes and categories;
• reading sessions recorded with the reading timer;
• book covers, downloaded or photographed by you;
• the name you choose to put on your bookplate (optional);
• your preferences (theme, language, season, lookup and sync settings).

We have no access to any of this.

2. Camera and photos

The app asks for camera access to:

• read ISBN barcodes when you scan books. The image is analysed on the device; only the resulting ISBN is used;
• photograph pages to capture a passage. The text is recognised on your device (Apple Vision on iOS, Google ML Kit on Android). Page photos are never uploaded, are excluded from every backup and export, and are deleted once you have reviewed them;
• photograph a book cover. The cropped cover is stored on your device and is included in iCloud sync, in a backup file you export and in your device backup (section 5).

When you choose an image from your photo library, the app uses the system photo picker and receives only the images you select. It does not have access to the rest of your library.

The app never requests microphone access and never requests your location or contacts.

Camera access can be granted or revoked at any time in your device's settings. Without it you can still add books and passages by typing.

3. Online book lookups

When you scan or type an ISBN, the app can ask public book catalogues for the book's details and cover. Only the ISBN is sent. The catalogues are operated by third parties, not by us:

As with any internet request, these services receive your IP address and basic technical details of the request. Requests to Google Books also carry an app key and the app's identifier, so that Google can recognise that the request comes from Pumpkin Library. No identifier of you or your device is added by us.

Your choices:

• Turn off Look up book details online in Settings and no catalogue is contacted; you enter book details by hand.
• Switch individual catalogues on or off in Settings → Scanning → Catalogues.
• Turn off Download covers to stop cover downloads.

Books you already own are recognised on the device without any request. Importing a CSV file makes no network request: the file is read on your device.

4. Purchases

Pumpkin Library Pro is a one-time purchase.

• Payment is handled entirely by the Apple App Store or Google Play. We never receive your name, email address, card or billing details.
• Purchase validation is handled by RevenueCat, Inc., which tells the app whether Pro has been bought, restored or refunded. Because the app has no accounts, RevenueCat identifies the installation by a random, anonymous ID. RevenueCat receives that ID, the purchase receipt and transaction details from the store, and technical information such as app version, operating system, device model, country/storefront and IP address. See https://www.revenuecat.com/privacy.

We can see anonymous purchase records (for example, that a purchase happened in a given country), but cannot link them to a person.

5. Backup and sync

Sync goes to your own iCloud account, never to us, and is available on iPhone and iPad only. On both platforms you can also export your library to a file that you keep yourself.

iCloud sync (iOS, Pro)

iCloud sync is off by default. When you turn it on, your library is stored in the private CloudKit database of your Apple Account and kept in step across your devices. It contains your bookcases, shelves, books, covers, passages with their notes and categories, reading sessions and bookplate name. Page photos awaiting review are never included.

Data in your private iCloud database is governed by Apple's privacy policy (https://www.apple.com/legal/privacy/). We cannot read it. You can turn sync off at any time, and Settings → Backup and sync → Delete iCloud data permanently removes the copy stored in iCloud.

Exported files (iOS and Android)

The Android version has no sync feature and no cloud backup of its own. On both platforms, Settings → Library data lets you take your data out of the app as a file and, for a backup, bring it back, for example when you change phones. These features are free.

• Export library as CSV creates a spreadsheet of your books (title, author, ISBN, publisher, year, pages, edition, condition, notes, reading status and where each book is shelved) and hands it to the app you pick in the system share sheet, such as your cloud storage or email app. Passages are not in it.
• Export a backup creates a file with the same library data iCloud sync holds: bookcases, shelves, books, covers, passages with their notes and categories, reading sessions and bookplate name. Page photos awaiting review and your preferences are never included.
• Exported files are not encrypted: anyone who has one can read it. After you share a file, what happens to it is governed by the privacy policy of the app or service you sent it to. We never receive it.
• The most recent export also stays in the app's private temporary storage on your device, until the next export replaces it or the system clears it.
• Restore a backup reads a backup file you choose with the system file picker and replaces the library on the device with it. The app receives only the file you select.

Device backup (Android)

Separately, if backup is turned on in your device's settings, Android may include the app's data (the same bookcases, shelves, books, covers, passages, reading sessions and preferences) in the backup of your Google Account, so it can be restored on a new device. Page photos awaiting review are kept in a folder that this backup never copies. That backup is created by Android, stored under Google's privacy policy (https://policies.google.com/privacy), and controlled in your device's settings. We cannot read it.

6. Sharing passages

When you share a passage as text, image or video, the content is created on your device and handed to the app you pick in the system share sheet. What happens next is governed by that app's own privacy policy.

7. Software components from third parties

The app includes no advertising and no analytics of ours. It does rely on a few third-party components that process information as described above:

• RevenueCat — purchase validation (section 4).
• Android backup service (Android, if enabled on your device) — device backup (section 5).
• Google ML Kit text recognition (Android) — reads the text of page photos on the device. Images and recognised text do not leave the device. As documented by Google, ML Kit may send Google technical diagnostics and usage metrics about the component itself (such as device and app information and performance data): https://developers.google.com/ml-kit/android-data-disclosure.
• Apple Vision and CloudKit (iOS) — on-device text recognition and iCloud sync.

Separately, Apple and Google may provide us with aggregated, anonymous statistics about installs and crashes if you have agreed to share diagnostics with developers in your device's settings. This is controlled by your device, not by the app.

8. How the information is used and legal bases

The limited information described above is used only to make the app's features work: finding a book's details, validating your purchase, and keeping your library in sync or backed up where you choose. Where data-protection laws such as the EU/UK GDPR or Brazil's LGPD apply, the processing is based on:

• performance of a contract — providing the features you use and validating your purchase;
• your consent — camera access, online lookups, iCloud sync and your device backup, which you turn on and can turn off at any time; an exported file exists only if you create one;
• legitimate interests — keeping the app working and preventing abuse of the lookup services.

We do not use your data for profiling, automated decisions, advertising or resale.

9. Retention and deletion

• On your device: data stays until you delete it. Settings → Delete all app data erases the whole library, covers, pending page photos and preferences. Uninstalling the app removes everything it stored on the device.
• In iCloud: until you use Delete iCloud data in the app or remove it in your iCloud settings.
• In a file you exported: until you delete the file, wherever you saved or sent it.
• In your Android device backup: until you delete the backup or turn backup off in your Google Account or device settings.
• Third parties (book catalogues, RevenueCat, Apple, Google) keep the information they receive according to their own policies.
• Emails you send us are kept only for as long as needed to answer you and keep a record of the conversation.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to its use, to withdraw consent, and to complain to your data-protection authority (for example the ANPD in Brazil, or your national authority in the EU/UK).

Because your library never reaches us, you exercise most of these rights directly in the app, in your iCloud or Google account and over the files you export, as described in section 9. We hold no data that would allow us to identify you. For anything else, including requests concerning the anonymous purchase records, write to [email protected] and we will help.

We do not sell personal information and do not share it for cross-context behavioural advertising.

11. International transfers

The third-party services mentioned in this policy may process information on servers outside your country, including in the United States. Each applies its own safeguards for such transfers, described in its privacy policy.

12. Security

Your library is stored in the app's private storage, protected by your device's operating system and its lock. All network requests made by the app use encrypted connections (HTTPS). iCloud sync and your device backup are protected by the security of your Apple or Google account; a file you export is protected only by where you keep it. No method of storage or transmission is completely secure, and you are responsible for keeping your device and cloud accounts protected.

13. Children

The app is intended for a general audience and is not directed at children. It does not knowingly collect personal information from anyone, including children.

14. Contacting us

If you write to [email protected], we receive your email address and whatever you include in your message, and use them only to reply to you.

15. Changes to this policy

If the app changes in a way that affects this policy, we will update this page and its date. Significant changes will also be mentioned in the app's release notes.

Pumpkin41 · M HENRIQUE MENEGALE TEODORO DESENVOLVIMENTO DE SOFTWARE LTDA · CNPJ 44.896.901/0001-89 · Curitiba, Paraná, Brazil https://pumpkin41.com · [email protected]