Privacy Policy

Who is responsible

matlas.cloud is responsible for your data (the data controller). For any privacy question, write to contact@matlas.cloud.

What we collect

• Account: when you sign in with Apple or Google, we receive an anonymous identifier from that company. We don't ask for your name or email address.
• Your library: the books you add — title, authors, publisher, ISBN, category, description, format, read status and your buy-later list.
• Images and files you choose: cover photos you take or pick from your photo library, audio files you attach and PDFs you send for narration. The app only accesses the camera and photos when you use them, and only the images you pick.
• Purchases: payments are handled entirely by Apple (App Store) or Google (Google Play). We never see your payment details; the app only checks with the store whether you have an active plan.
• Technical logs: the server keeps short-lived logs (such as IP address, time and the request made) to keep the service running and secure.

What we don't do

We don't show ads, track you across other apps or websites, use third-party analytics, sell data or build profiles about you.

Why we use your data

We use your data to provide the service you ask for: storing your library, finding book details and covers, and generating descriptions, categories, author portraits and narrations. The legal basis is performing our contract with you (Article 6(1)(b) GDPR). Technical logs rely on our legitimate interest in keeping the service secure (Article 6(1)(f)).

Service providers

• Hosting provider in the European Union: hosts our server and database.
• Cloudinary (USA): stores covers, author portraits and audio.
• OpenAI (USA): reads cover photos to identify books, writes descriptions and categories, creates author portraits and turns PDF text into narration. By default, OpenAI doesn't use data sent through its API to train its models. OpenAI is only used when you turn on AI. If you use your own OpenAI key, it is kept only on your phone: it goes with each request to our server, is used for that request only and is never stored in the database or the logs. If you subscribe to mbooks AI, the app sends the store's signed proof of purchase so we can check the subscription; we don't store that either.
• Amazon and Open Library: receive an ISBN or title to look up book details; they receive no personal data.
• Apple and Google: sign-in and payments.

Where data leaves the European Union, we rely on the safeguards these providers offer, such as the EU Standard Contractual Clauses.

Website

The mbooks.cloud website presents the app and uses no advertising or analytics cookies. Your library is never made public.

Retention and deletion

We keep your data for as long as you have an account. Settings → Delete account permanently deletes your books, images, audio and authors from our database and media storage. Signing out doesn't delete your data.

Deleting your account doesn't cancel a subscription: cancel it in your App Store or Google Play account settings.

Your rights

You have the right to access, correct, delete and export your data, and to object to or restrict its processing. Write to contact@matlas.cloud. You can also complain to the data protection authority in your country — in Portugal, the CNPD (www.cnpd.pt).

Children

mbooks isn't aimed at children under 13, and we don't knowingly collect data from children.

Security

Data travels between the app and the server over encrypted connections (HTTPS), and access to the server and providers is restricted.

Changes

If we change this policy, we'll update the date at the top. We'll announce significant changes in the app.