Legal

Privacy Policy

Last updated: 2 October 2026 · Effective: 2 October 2026

This Privacy Policy explains how the InLibrary mobile app (“InLibrary”, “the app”, Android package com.dhruv.inlibrary) handles your information. InLibrary is developed and operated by Dhruv Kumar, an individual developer based in India (“we”, “us”). For the purposes of India’s Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described below.

In short

  • Your study sessions, planner, notes and note photos are stored only on your phone. We never receive them.
  • Signing in with Google and using the Library tab are optional. Only then is some data stored online, with our provider Supabase.
  • We do not show ads, use analytics or tracking tools, or sell or rent your data.
  • You can delete your account and data at any time, in the app or by emailing us.

1. Information stored only on your device

Most of InLibrary works offline. The following is saved in the app’s private storage on your phone and is not sent to us or to anyone else:

  • Study sessions: start and end times, duration, and the subject or topic you studied.
  • Planner: your subjects, topics, to-dos and daily study goal.
  • Notes: note titles and text, and any photos you attach (copied into the app’s storage).
  • App settings, your setup choices, and the in-app lamp and reward progress.

The only exception is if you join a library: then your weekly study total and the name of the subject you are currently studying are shared with that library, as described in section 2. Individual sessions, notes and photos are never uploaded.

This data stays on your phone until you delete it in the app, use “Delete account”, or uninstall the app. It may be included in your phone’s own backups if you have enabled them in your Android settings; those backups are controlled by you and Google, not by us.

2. Information processed online (optional features)

We only process data on our servers if you choose to sign in or use the Library tab. Our backend is provided by Supabase (database, sign-in and real-time services).

Sign in with Google

If you sign in with Google, Google shares your basic profile with us: your name, email address, profile picture link and Google account identifier. We use your name and email to identify your account and show you who you are signed in as. We never see your Google password.

Library tab (study rooms)

If you create or join a library without signing in, the app creates an anonymous account for you: a random identifier with no name or email. Whether you sign in or not, using a library stores:

  • The library’s name and invite code (if you create one).
  • Your library membership: the display name you choose, your role (admin or member), when you joined, and your total study time for the current week.

While you are studying, the app also shares your display name, when your current session started, and the name of the subject you are studying with the members of your libraries in real time (“live presence”). This live information is not stored. It disappears as soon as your session ends or you go offline.

Technical data

When the app connects to our servers, our provider automatically processes technical data such as your IP address, request times and error logs. This is used only to run the service, keep it secure and fix problems.

3. Device permissions

PermissionWhy
CameraTo scan a page into a note, only when you tap the scan button.
Photos / mediaTo attach a picture to a note, only when you choose one.
Audio settingsTo play session sounds. The app does not use the microphone or record audio.
InternetFor optional sign-in and the Library tab.

Photos and scans stay on your device. You can withdraw permissions at any time in your phone’s settings.

4. How we use information

  • To provide the app’s features: your account, libraries, weekly totals and live presence.
  • To keep the service secure and prevent abuse.
  • To respond to your requests and support emails.
  • To comply with legal obligations.

We do not use your data for advertising, profiling or automated decision-making, and we do not sell, rent or trade it.

5. Who we share information with

  • Other library members see your display name, weekly study total and live presence, as described above. Only people in the same library can see this.
  • Service providers who process data on our behalf: Supabase (hosting, database, sign-in; Supabase privacy policy) and Google (sign-in; Google privacy policy).
  • Authorities, if we are required to by law or to protect the rights and safety of users.

Our service providers may store data on servers located outside India. When that happens, we rely on their contractual and security safeguards and transfer data only as permitted by Indian law.

6. How long we keep information

  • On-device data: until you delete it or uninstall the app.
  • Account and library data: for as long as your account exists. When you delete your account, it is removed from our live database immediately (in the app) or within 30 days of your email request.
  • Live presence: never stored; it disappears when you go offline.
  • Technical logs and backups kept by our provider may hold residual copies for a short period before they are automatically overwritten.

7. Deleting your data

If you signed in with Google, go to Settings → Delete account in the app. This deletes your account, your library memberships and any library you created from our servers, and erases all InLibrary data on your phone. You can also email us. Full steps are on the account deletion page.

8. Security

Data sent between the app and our servers is encrypted in transit (HTTPS/TLS). Database access rules mean each user can only read and change what the app allows them to. No method of storage or transmission is completely secure, but we work to protect your data and will notify you and the authorities of a personal data breach as required by law.

9. Children

InLibrary is not directed at children under 13, and you must be at least 13 to use it. If you are under 18, you should use the app with the consent of a parent or legal guardian where the law requires it. If we learn that we hold personal data of a child under 13, we will delete it. Parents can contact us to request this.

10. Your rights

You can ask us to:

  • tell you what personal data we hold about you and how we use it;
  • correct or update inaccurate data;
  • delete your data;
  • withdraw your consent. You can stop using online features or delete your account at any time; this does not affect processing done before withdrawal;
  • nominate another person to exercise your rights if you die or become incapacitated, as provided under Indian law.

Email us at yehdhruvkr@gmail.com. We will respond within 30 days.

11. Grievance officer (India)

In line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules, you can contact our Grievance Officer about how your data is handled:

Dhruv Kumar
Email: yehdhruvkr@gmail.com

We will acknowledge your grievance and aim to resolve it within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

12. Changes to this policy

We may update this policy when the app or the law changes. We will post the new version on this page and change the “Last updated” date above. Please check this page from time to time.

13. Contact

Dhruv Kumar, India
Email: yehdhruvkr@gmail.com

Back to top