Privacy policy

We take privacy seriously. This policy explains what personal data we collect when you use the Knjiglas app and the knjiglas.com website, why we use it and what rights you have. We process data in accordance with the Law on Personal Data Protection of the Republic of Serbia (“Official Gazette of RS”, No. 87/2018) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who the controller is

The data controller is Knjiglas. For any privacy question or to exercise your rights, write to us at podrska@knjiglas.com.

2. What data we collect

Type of data	Examples
Account data	name, email address, password (stored only in hashed form), chosen language and app settings
Usage data	listening and reading progress, bookmarks and notes, favorite books, downloads, votes and book suggestions, time spent with books per day
Device and sign-in data	platform and operating system version, device model, app version, sign-in tokens (stored hashed), time of last activity
Technical data	IP address and basic request data in server logs, for security and troubleshooting
Parental controls	parental PIN (hashed), maximum age and daily limit — we do not collect personal data about the child

We do not collect payment data during the free launch, we do not use advertising networks and we do not track you on other websites or apps.

3. Why we use data and on what basis

• Providing the Service — your account, listening and reading, progress sync, downloads, kids mode and voting (performance of our contract with you).
• Security — protecting accounts, preventing abuse and limiting sign-in attempts (legitimate interest).
• Improving the catalog — aggregated listening statistics help us decide which books to translate next (legitimate interest).
• Communication — account-related messages such as password reset codes and account deletion confirmations (performance of contract).
• Legal obligations — where required by law.

4. Cookies and local storage

The website uses only essential cookies for the session and form protection, plus your browser’s local storage to remember your chosen theme (light or dark). We do not use analytics or advertising cookies. On your device, the app stores your sign-in token, settings and downloaded content.

5. Who we share data with

We do not sell your data or share it for advertising. Data may be processed only by our service providers, on our instructions and under contractual safeguards:

• hosting and content storage providers (servers and content delivery network, e.g. DigitalOcean),
• our email delivery provider,
• Apple and Google, to the extent required to distribute the app through their stores.

If data is transferred outside the Republic of Serbia, we do so only to countries with an adequate level of protection or with appropriate safeguards such as standard contractual clauses.

6. How long we keep data

• We keep account and usage data while your account is active.
• When you delete your account, the data is permanently deleted from our database immediately and from backups within 30 days at most.
• Server logs are kept for up to 14 days.
• Book suggestions you submitted may remain visible, but are no longer linked to your account.

7. Security

Communication with the Service is encrypted (HTTPS). Passwords, PINs and sign-in tokens are stored only in hashed form, and data can be accessed only by authorized people who need it to do their work.

8. Your rights

You have the right to request access to your data, its correction or deletion, restriction of processing and data portability, and to object to processing based on legitimate interest. You can change most of your data yourself in the app, and delete your account in the app or on the account deletion page. For other requests, write to us at podrska@knjiglas.com — we will reply within 30 days.

If you believe your data is processed unlawfully, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (www.poverenik.rs).

9. Children

Knjiglas is intended for a general audience, and content for children is available in kids mode, managed by a parent through their own account. We do not knowingly collect personal data from children under 15 without parental consent. If you believe we have collected such data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The date of the last change is shown at the top of the page, and we will notify you of material changes in the app or by email.

Have a question? Write to us at podrska@knjiglas.com.