Legal and privacy

Sub-processors

The companies that store or process data on our behalf, and what each one sees.

Last updated 8 October 2026

We use a small number of companies to run Bookyard. Each one processes data only on our instructions and only for the purpose named below. This list is the complete set; if we add one, this page changes and its date changes with it.

Current sub-processors

Provider What it does What it sees
OVHcloud Hosts our servers, in the European Union. The data described in the Privacy Policy, as our hosting provider.
Cloudflare Stores and delivers cover photos, and runs our domain. Cover photos, and connection details such as IP address.
Google (Firebase Authentication) Signs you in. An account identifier, the sign-in method, your name if your provider shares it, and your email address. Nothing about your library or readers.
Google (Firebase Cloud Messaging) Delivers push notifications. Your device's notification token and the text of each notification.
RevenueCat Manages subscriptions bought through the App Store and Google Play. An account identifier and purchase events. Nothing about your library or readers.
Apple and Google (app stores) Distribute the app, take payments for subscriptions, and provide Sign in with Apple and Google. Your store account and payment details, which we never receive.

Book catalogues

To fill in a book's details, we look its ISBN or title up in public catalogues. Those lookups are made by our servers and carry no personal data.

What is not on this list, deliberately

  • No analytics provider. There is no analytics SDK in the app and no analytics script on this website.
  • No advertising network. Bookyard has no ads, so there is no ad network, attribution SDK or advertising identifier.

Where the data sits

Our database and cover photos are stored in the European Union. Some of the providers above operate internationally, including in the United States. Where personal data leaves the European Economic Area, we rely on the transfer mechanisms those providers offer, including the European Commission's Standard Contractual Clauses.

Changes to this list

We update this page before a new sub-processor starts processing your data. To be told when it changes, write to [email protected] and we will add you to the notice list.

Questions about this document?

Email [email protected] with the name of this document in the subject line.