Privacy Policy

Effective 25 February 2026

Shellf is operated by Productvamp Ltd (“we”, “us”). This policy explains what data we collect when you use the Shellf app, why we collect it, and how you can control it.

What we collect

Account data — Your email address and a hashed password, used to authenticate you and identify your library across devices.
Library & reading data — Books you add, their shelf status, ratings, reading progress, notes, and tags. This is the core of Shellf — without it the app doesn’t work.
Taste preferences — Responses from the onboarding quiz and your implicit preferences derived from ratings and reading behaviour. Used exclusively to power AI recommendations.
Usage data — Basic crash and error logs. We do not use third-party analytics trackers.

How we use it

We use your data to run the app — authenticating you, storing your library, generating recommendations, and providing reading statistics. We do not sell your data, rent it, or use it for advertising. We do not share it with third parties except as described below.

Third-party services

Supabase — Our database and authentication infrastructure. Your data is stored in EU data centres on Supabase-managed PostgreSQL. Supabase Privacy Policy ↗
OpenAI — When you request AI recommendations, your taste profile (a summary of your reading preferences — not a list of your books) is sent to OpenAI to generate suggestions. OpenAI does not use this data to train its models under our API agreement. OpenAI Privacy Policy ↗
Google Books & Open Library — Book search queries are sent to Google Books API and Open Library. These return publicly available book metadata. Your account is not identified to either service.

Your rights

You can export your library data at any time from Settings → Export. To permanently delete your account and all associated data, visit shellf.com/delete-my-account. Deletion is irreversible and processed within 30 days.

If you are in the UK or EEA, you have the right to access, rectify, or restrict processing of your personal data under UK GDPR / GDPR. Contact us and we will respond within 30 days.

Data retention

We retain your data for as long as your account is active. If you delete your account, all personal data is purged from our systems within 30 days.

Children

Shellf is not directed at children under 13. We do not knowingly collect data from anyone under 13.

Changes

We may update this policy. If we make material changes, we’ll notify you via the app or by email. Continued use after changes constitutes acceptance.

Contact

Questions or requests? hello@shellf.com

Productvamp Ltd, United Kingdom