📚boook한국어

boook Privacy Policy

Effective date: October 12, 2026

1. Principles

PpomStudio ("we", "us") complies with the Personal Information Protection Act of the Republic of Korea and other applicable laws. boook (the "Service") can be used without creating an account. Your reading records and other data you enter are stored only on your device and in your own Google Drive, not on our servers. We process only the minimum information needed to provide the Service, as described below.

2. Information we process

(1) Information you enter or save — stored only on your device

  • Book information (title, author, publisher, page count, genre, rating, progress, cover image)
  • Reading notes, saved passages, and shelf layout
  • Reading timer records, daily / weekly / monthly statistics, and reading goals
  • Character name, attendance / mission / marathon records, points, rewards, and poka collection
  • App settings such as language and the daily reading reminder (on / off, time), and the data reset password

This information is stored in the app's private storage on your device and is not sent to our servers.

(2) Information sent when you search for books or scan barcodes

When you search for a book or scan a barcode, your search terms (such as title or author) or the ISBN are sent to the external services below to find book information. This information is not used to identify you, and we do not store it.

  • Google Books
  • Aladin (when the app language is Korean or English)
  • Kyobo Book Centre (when the app language is Korean or English)

(3) When you connect a Google account (optional, for Premium cloud backup)

If you connect a Google account for backup and restore, the following information is stored in your device's secure storage (iOS Keychain / Android Keystore). It is used only for Google Drive backup and restore and is not sent to our servers.

  • Google account identifier and email address
  • Display name and profile photo URL (if provided by Google)
  • Authentication tokens (access to the app-specific storage area of Google Drive)

(4) Google Drive backup data — stored in your own Drive

When you run a backup, the data in (1) above is saved to the app-specific storage area (appDataFolder) of your own Google Drive. Only you can access this data; we cannot.

(5) Friend invitations

When you get an invite code or enter a friend's code, the following information is sent to the friend invitation server we operate (hosted on Cloudflare infrastructure).

  • An installation identifier (installId) randomly generated by the app on each device — it is not linked to your name, email, or hardware identifiers.
  • The invite code, its issue / redemption / reward status, and timestamps

The server stores only the following.

  • The inviter's installation identifier, the invite code, and its status
  • The installation identifier of a friend who enters a code, the code entered, and when it was entered — used only to keep the same person from receiving invitation rewards repeatedly (preventing duplicate rewards).

(6) Advertising (Google AdMob)

Free users see ads (banner ads and rewarded ads) provided by Google AdMob. To serve ads and measure their performance, Google may process the following information.

  • Advertising identifier: on iOS, the IDFA only if you allow App Tracking Transparency (ATT); on Android, the Advertising ID
  • Device and app information (device model, OS version, language, etc.), IP address, and ad impression / click information

In regions where consent is required by law, such as Europe, an ad consent screen is shown first, and personalized or non-personalized ads are served based on your choice. No ads are shown while you have an active Premium subscription.

(7) In-app subscription payments

Premium subscription payments are processed directly by the Apple App Store or Google Play. We do not receive your payment card or other payment method information. The app only checks the purchase information provided by the store (product and subscription status) on your device to confirm your subscription.

(8) Customer support

If you contact us by email, we receive your email address and the content of your inquiry in order to respond.

(9) Device permissions

  • Camera: scanning book barcodes and taking photos of covers or pages (optional)
  • Photos: importing covers or passages from saved photos (optional)
  • Notifications: showing reading timer progress in notifications and on the lock screen, and the daily reading reminder (optional — for the daily reading reminder, permission is requested when you turn it on in My Page → Notification time)

The daily reading reminder is scheduled only on your device, and the reminder time and content are not sent to our servers. Photos you take or select are stored in the app's private folder on your device and are not sent anywhere. Text recognition (OCR) of passages in photos is performed on your device (Google ML Kit). You can use the rest of the Service without granting these permissions.

(10) Information we do not collect

We do not collect the following.

  • Account information such as name or phone number (no sign-up)
  • Location information (location permission is not requested)
  • Contacts, call logs, or calendars
  • Payment card information

3. Purposes of use

  • Information you enter: providing features such as reading records, statistics, characters, and missions
  • Search terms and ISBNs: looking up book information and cover images
  • Google account information and Drive backup data: backup, restore, and moving data to another device
  • Installation identifier and invite codes: issuing invite codes, verifying redemption, granting rewards, and preventing duplicate rewards
  • Advertising information: serving ads, measuring ad performance, and preventing ad fraud
  • Purchase information: confirming Premium subscription status
  • Email address and inquiry content: responding to inquiries

4. Retention period

  • Data on your device: kept until you delete the app or reset / delete the data yourself.
  • Google Drive backup data: kept in your Drive until you delete the backup file.
  • Google authentication information: deleted from your device immediately when you disconnect Drive.
  • Friend invitation server data: kept for 90 days from the date the invite code was issued. However, if a friend has entered the code and the inviter has not yet claimed the reward, it is kept until the reward is claimed. Codes past their retention period are no longer used and are destroyed.
  • Records of a friend who entered a code (installation identifier, the code entered, and when it was entered): kept for 90 days from the date the code was entered, then destroyed.
  • Customer support: destroyed without delay once the inquiry has been answered, unless the law requires it to be kept for a certain period.
  • Advertising information: retained according to Google's policies.

5. External services and third parties

We do not sell or provide your personal information to third parties. However, the Service communicates with the external services below to function, and these services may process information needed for communication, such as your IP address. Each service follows its own privacy policy.

  • Google Books: looking up book information by search terms or ISBN
  • Aladin and Kyobo Book Centre: looking up book information and cover images by search terms or ISBN (when the app language is Korean or English)
  • Google Sign-In and Google Drive: account authentication and saving backups to your own Drive
  • Cloudflare: operating the friend invitation server (processes installation identifiers, invite codes, and IP addresses)
  • Google AdMob: serving and measuring ads (advertising identifier, device information, IP address, etc.)
  • Apple App Store and Google Play: subscription payments, subscription status checks, and app update checks
  • Google Fonts: downloading the font files used on screen

6. Processing by service providers and international transfers

To operate the friend invitation server, we process information outside Korea as follows.

  • Recipient: Cloudflare, Inc. (United States)
  • Items transferred: installation identifiers (the inviter and the friend who enters a code), invite code and its status and entry time, IP address used for communication
  • When and how: sent over the network when you use the friend invitation feature
  • Purpose: issuing invite codes, verifying redemption, granting rewards, and preventing duplicate rewards
  • Retention: same as the friend invitation server retention period in Section 4

To serve ads, Google LLC (United States) may process the information in Section 2 (6), and such processing follows Google's privacy policy. If you do not use the friend invitation feature, no information is sent to the friend invitation server.

7. Deletion of information

  • Deleting the app deletes all data on your device.
  • My Page → Reset data deletes your reading data on the device.
  • Tapping [Delete backup file] on the Backup / Restore screen deletes the backup file in Google Drive immediately. After your subscription ends, you can delete boook's hidden app data in Google Drive settings → Manage apps.
  • Disconnecting Drive deletes the Google authentication information on your device immediately.
  • Friend invitation server data and support inquiries are deleted in a way that cannot be recovered once their retention period ends.

8. Security measures

  • All external communication is encrypted with HTTPS.
  • Google authentication information is kept in iOS Keychain / Android Keystore secure storage.
  • Backup data is stored in the app-specific storage area of your own Google Drive, which we cannot access.
  • The friend invitation server stores only installation identifiers, which cannot directly identify you, invite codes, their status, and entry times.

9. Your rights and how to exercise them

You can exercise the following rights at any time.

  • Delete data on your device with My Page → Reset data, or by deleting the app
  • Delete backup files on the Backup / Restore screen or in Google Drive settings
  • Revoke access with My Page → Disconnect Drive, or in Google Account → Security → Third-party connections
  • Change your ad consent in My Page → Privacy settings (shown in regions where consent is required)
  • Limit or reset the advertising identifier in iOS Settings → Privacy → Tracking, or in Android Settings → Privacy → Ads
  • Revoke camera, photo, and notification permissions in your device settings
  • For other requests to access, correct, or delete information, such as friend invitation server data, email the contact below

10. Children

The Service is not directed to children under 14. If we learn that information of a child under 14 has been processed, we will delete it without delay at the request of a parent or guardian.

11. Changes to this policy

If we change this policy, we will notify you before the change takes effect through an app update or an in-app notice. If you do not agree to the changes, you can stop using the app and delete your data as described in Section 9.

12. Privacy contact

  • Contact: PpomStudio Privacy Team
  • Email: studioppom@gmail.com
  • Address: 723-1, 7F, Royal Plaza, 50-20 Dolmun-ro, Gimpo-si, Gyeonggi-do, Republic of Korea

13. Remedies

If you need to report or consult about a privacy infringement, you can contact the following Korean authorities.

This English version is provided for convenience. If there is any difference between the Korean and English versions, the Korean version prevails.