App privacy policy

Complaints and AI assistance

When a complaint is raised, we store the reporting account, the reference to an order or review received, messages, handling status and timestamps. The conversation is visible only to the reporting account and the responsible Relibro administration team. The other party to the purchase cannot access this conversation.

Cloudflare Workers AI assists with the initial assessment and the choice of a follow-up question or guidance. It receives the message text and necessary details such as book title and order status. Payment data, delivery addresses and reviews that are still hidden are not automatically sent to the AI. Please do not enter passwords, bank or card details in messages. The AI cannot issue refunds, restrict accounts or remove reviews. Personal review can be requested at any time.

We use this data to handle the request and provide the complaints process under Article 6(1)(b) GDPR. Conversations and handling records are retained for processing and necessary evidence, then deleted unless statutory obligations or outstanding claims require continued retention.

Seller profiles, listing reviews, reports and ratings

On each listing, we display the seller's public name and their stated private or business status. Business profiles also publish the company name and business address. The account address and internal user ID are not published as seller contact details.

To review listings before publication, Cloudflare Workers AI and our administration team process listing details and uploaded photos. The AI does not receive sign-in passwords or account tokens for this purpose. A review note is stored with the listing status. Listings that raise concerns or cannot be checked for technical reasons are held for human review. The legal basis is Article 6(1)(f) GDPR; our interest is to prevent fraud, spam and unlawful listings. You can send objections to this review to info@apptheism.de.

When a listing is reported, we store the listing reference, reason, description, time and any contact address provided voluntarily. These details are visible only to the responsible administration team. To prevent abuse, we use time-limited request counters; for reports, these use an identifier derived from the IP address that changes daily. Reports and reasoned moderation decisions are retained for processing and necessary evidence, then deleted unless legal obligations or outstanding claims prevent this. The legal basis is Article 6(1)(f) GDPR.

Reviews are linked to the submitting account, the reviewed account and the completed order. Buyers and sellers can review each other. Until both have submitted or the 14-day period ends, reviews stay hidden from the other person and the public. After that, stars, date and the role as buyer or seller appear on the profile; averages and counts also include only visible reviews. Order verification and display are provided as part of the review feature under Article 6(1)(b) GDPR.

Data controller

Apptheism®, owner Jörg Klausewitz, Fischmarkt 17, 78462 Konstanz, Germany. Privacy enquiries: info@apptheism.de. The general privacy notice for the Website also applies when you open relibro.de or publish listings.

Data on your iPhone

“My Shelf” and the wishlist store data on your iPhone. This includes your book drafts and the photos you have selected for them. When creating a listing, selected photos and an optional title may already be sent to Relibro for automatic recognition. The app stores your sign-in in the iOS Keychain and removes it from this iPhone when you sign out. You can remove local books individually or delete the app. A listing already published remains visible on relibro.de until it is also removed there.

Camera and photos

When scanning, Apple's VisionKit reads the ISBN barcode or book title on your iPhone. A scan image selected from your photo library is also analysed on the device. Through the iOS photo picker, Relibro only receives the images you select yourself. The separate scanner processes images on the device. In the listing form, however, selected book photos and an optional title are sent to Relibro and Cloudflare Workers AI before publication to suggest editable book details and a condition description. Relibro does not save these recognition photos as a listing or in photo storage. Only “Publish on Relibro” submits the selected photos together with the book listing for publication. The legal basis for this publication is Article 6(1)(b) GDPR.

Book search and external services

The iPhone app first sends book searches to Relibro. If no suitable result is available there, it may search Open Library directly and consult the German National Library for ISBN data. These services then receive your search terms or ISBN and technical connection data, such as your IP address. The app may load covers directly from Open Library. The legal basis for search is Article 6(1)(b) GDPR; we base cover display on Article 6(1)(f) GDPR.

Account, publications and recipients

Sign-in is handled by Supabase Auth, which processes your email address, sign-in details and session. Automatic recognition sends photos and an optional title to Relibro. A listing is saved only after you instruct us to publish it. We then store the listing data in Cloudflare D1 and the uploaded photos in Cloudflare R2. Both become publicly visible to visitors. When connecting to relibro.de, Cloudflare also processes technical connection data. The legal basis for the account and listing is Article 6(1)(b) GDPR. The services named may process data outside the European Economic Area. Details of transfers and the providers' data protection agreements can be found under Website privacy notice.

Retention and rights

Items stored only in your iPhone Shelf remain there until you delete them. For published books, we delete the uploaded photos when you remove the listing. We delete the book record marked as removed once we no longer need it for operations, preventing abuse or possible claims. Your account remains until deletion, unless we are legally required to retain certain details for longer.

You can request account deletion under “My Shelf”. Through info@apptheism.de you can also request access, rectification, restriction, a copy of your data or deletion, and object to processing based on legitimate interests. You can lodge a complaint with a data protection supervisory authority. Further steps are explained by our Support.