Privacy policy

Last updated: 2026-10-01

Who we are

Diavazo (getdiavazo.com) is run by Diavazo. For any privacy question write to support@getdiavazo.com.

What we process

Account: email, username, display name, bio and password (stored only as a one-way hash, never in plain text).

Reading: the books on your shelves, progress and reading sessions, ratings, reviews, margin notes, quotes, loans, recommendations sent and received, the people you follow.

Imports: when you sync a Kobo or a Kindle, the device’s file is read in your browser and only the list of books, progress and highlights reaches us. The same goes for Goodreads, StoryGraph and aNobii CSV files.

Camera: used only to read a book’s barcode. No photo is taken or stored.

Technical data: IP address and device type, for security and to limit abuse.

Why

To provide the service you signed up for (contract, GDPR art. 6.1.b): your shelves, statistics and social features.

To keep the service secure and prevent abuse (legitimate interest, art. 6.1.f).

To show ads: personalised ads only with your consent (art. 6.1.a), which you can change at any time in the app’s Settings.

What others see

Your profile (username, name, bio) is visible to other users. Public margin notes, reviews and quotes are visible to readers of the same book, according to the visibility you choose. You can make your activity private in Settings.

Who we share data with

Providers that help run Diavazo, each only for its job: application hosting (Render) and database (MongoDB Atlas), with servers in the European Union.

Google (AdMob and AdSense) for advertising: it receives device identifiers and usage data under its own policy (policies.google.com/privacy). On iOS we ask first, through Apple’s tracking prompt.

To look up books we query Open Library, Google Books and Wikidata: we send titles, authors or ISBNs, never data that identifies you.

We do not sell your data.

How long

We keep your data while you have an account. When you delete it we immediately erase your shelves, sessions, notes, quotes, loans and recommendations; loans other users recorded with you stay theirs, unlinked from your account. Technical backups are overwritten within 30 days.

Your rights

You can ask for access, rectification, erasure, restriction, portability, or object to processing by writing to support@getdiavazo.com. Much of it you can do yourself in the app (edit your profile, delete your account). You may also complain to your data protection authority (in Italy, the Garante: garanteprivacy.it).

Minimum age

Diavazo is for people aged 14 and over.

Changes

If we change this policy in a significant way we will tell you in the app.