- a book's ISBN, when you scan or look one up, so its details can be filled in;
- your purchase, through Apple or Google, so Premium unlocks;
- six anonymous usage events, so we can tell whether the app is working for people.
1. Introduction
Riband ("we", "our", or "us") is a mobile application that helps you keep your place in books, audiobooks, podcasts, films and TV series. This Privacy Policy explains what information the app uses, where it goes, and the choices you have. It applies to all users of Riband on iOS and Android.
By using Riband, you agree to the use of information in accordance with this policy. If you do not agree with it, please do not use the app.
2. Information We Collect
2.1 Information that stays on your device
Everything you add to Riband is stored only on your phone: the titles you track, your progress, schedules, reminders, statistics, achievements and settings. We do not have a copy of it, and we cannot see it. It is not "collected" by us in any sense.
2.2 Book lookups
When you scan a book's barcode or type an ISBN, Riband sends that ISBN to Open Library to fetch the title, author, page count and cover image. The request contains the ISBN and nothing about you. Like any website, Open Library's servers see your device's IP address when they answer.
2.3 Camera
The camera is used only to read a book's barcode while the scanner is open. Barcodes are read on your device; no photo or video is stored or sent anywhere.
2.4 Purchase information
Premium is a one-time purchase, and the 30-day trial on iOS is a free in-app purchase. These are handled by Apple's App Store or Google Play, and verified through RevenueCat. RevenueCat receives your purchase history under an anonymous, randomly generated app user ID, along with basic technical details such as your platform, app version and store country. It is not linked to your name, email or any account. We never receive or store payment card details.
2.5 Usage analytics
Riband sends six anonymous events to Aptabase, a privacy-focused analytics service: the upgrade screen was shown, the free limit was reached, a trial started, a trial ended, a purchase was made, and purchases were restored. Each event carries only the event name, a random session number that changes regularly, and your device's language, operating system and app version. There is no user ID, advertising ID or device ID. Aptabase uses your IP address only briefly to work out your country and region, and does not store it.
2.6 Notifications
Reminders and "pick it back up" nudges are scheduled on your phone by the app itself. No notification data, push token or schedule is sent to us or anyone else.
2.7 Backups and sharing
When you export a backup or share a progress card, the file is created on your phone and goes only where you choose to send it.
3. How We Use Your Information
- To provide the app: filling in book details from an ISBN, and unlocking Premium after a purchase or trial.
- To improve the app: the six anonymous events tell us how many people reach the free limit, start a trial and buy, in aggregate.
We do not use your information for advertising, we do not build profiles, and we do not track you across other apps or websites.
4. How We Share Your Information
4.1 With Service Providers
We use a small number of trusted third parties, each receiving only what it needs:
| Service | What it receives | Why |
|---|---|---|
| Open Library (Internet Archive) | The ISBN you look up; your IP address, as with any web request | Book title, author, pages and cover |
| Apple App Store / Google Play | Your purchase, under your own store account | Payment for Premium and the trial |
| RevenueCat | Purchase history under an anonymous app user ID; platform, app version and store country | Verifying purchases so Premium unlocks |
| Aptabase | Six anonymous events with language, operating system and app version; IP used only briefly to derive country | Understanding, in aggregate, how the app is used |
4.2 For Legal Compliance
We may disclose information if required by law. Because we hold almost nothing about you, there is very little we could disclose.
4.3 Business Transfers
If Riband is ever sold or transferred, this policy continues to apply to any information involved, and we will tell you before anything changes.
We do not sell your information.
5. Data Storage and Security
5.1 On your device
Your library is stored in the app's private storage on your phone, protected by your device's own security. Deleting the app deletes it, so export a backup first if you want to keep it.
5.2 With our service providers
Connections to Open Library, RevenueCat and Aptabase use encrypted HTTPS. Each provider protects the data it holds under its own security practices and privacy policy.
5.3 Data Retention
RevenueCat keeps purchase records for as long as they are needed to verify your purchase. Aptabase keeps the anonymous events to show usage over time; they cannot be traced back to you. We keep nothing else.
6. Your Rights and Choices
6.1 Your data is yours
You can export your whole library as a backup at any time from the app, and delete it at any time by removing it in the app or deleting the app.
6.2 Your Legal Rights (POPIA, GDPR, CCPA)
We operate from South Africa, so the Protection of Personal Information Act (POPIA) applies. Depending on where you live, you may also have rights under the GDPR or the CCPA, such as the right to access, correct or delete personal information, or to object to its use. Because Riband does not know who you are, the information we could act on is limited to what our providers hold under an anonymous ID; contact us and we will help however we can. You also have the right to complain to South Africa's Information Regulator or to your local data protection authority.
7. Children's Privacy
Riband is not directed at children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
8. International Data Transfers
Our service providers may process data outside your country: Open Library and RevenueCat in the United States, and Aptabase in the European Union. Where this happens, it is limited to the data described above and protected by the providers' own safeguards.
9. Third-Party Links and Services
Purchases are made through Apple or Google under their own terms and privacy policies. We are not responsible for the practices of third-party services, and we encourage you to read their policies.
10. Changes to This Privacy Policy
We may update this policy from time to time. When we do, we will change the "Last Updated" date above, and where the change is significant we will let you know in the app or on the app's store page. Continuing to use Riband after a change means you accept the updated policy.
11. Data Breach Notification
If a breach ever affected information about you, we would:
- Notify the relevant authorities, including South Africa's Information Regulator, within the time limits the law requires
- Tell affected users as soon as reasonably possible
- Take immediate steps to contain the breach and prevent it happening again
12. Contact Us
13. Consent
By using Riband, you consent to the handling of information as described in this Privacy Policy. If you do not agree with it, please do not use the app.