Privacy policy
This translation is provided for convenience; only the French version is legally binding.
Data controller
The controller of your data is ADVIJU INVESTISSEMENT SAS, a simplified joint-stock company (société par actions simplifiée) with a share capital of €1,000, whose registered office is at 22 rue Durantin, 75018 Paris, registered with the Paris Trade and Companies Register (RCS) under number 919 110 387 (intra-community VAT number FR55919110387). Contact: contact@adviju.fr.
Aldus is a personal library. It contains no advertising, no advertising trackers and no audience measurement tools: your data is used to run the application, and for nothing else. It is never sold.
Data collected
Your account: you sign in with Apple, with Google, or with an email address and a password. With Apple or Google, we receive that account’s identifier and its email address (or the hidden address provided by Apple if you choose it), as well as your first name when Apple shares it: no password is stored. With an email address, we keep that address and your password in hashed form, which nobody can read back, not even us.
Your library: the books you add, their places, your notes, quotes, reviews, reading statuses, wish lists and collections, the corrections you make to book records and the cover photos you take. This content is private: only the members of your library have access to it, except what you choose to show your friends.
Your loans: the name of the person you lend a book to, which you enter yourself, and the dates of the loan. This is data about a third party: only enter what you need to get your book back.
Your identity in Aldus: your display name and your @handle, created automatically from your name, which you can change. They are visible to your friends and to anyone who enters your exact handle. Your name also appears on the invitations you send.
Your friends: the people you add, your requests, the accounts you block and the invitations you create.
Sharing your library: by default, nobody sees it. If you open it to your friends, or to some of them (Settings › Sharing), they see the title, cover and category of your books, the date they were added, whether a book is lent, and the books on your wish list when they have that book in common with you or are looking for it. They never see the place, condition, price, your notes or the borrower’s name. A book you hide does not appear.
Your messages: the text and books you exchange with your friends are stored on our servers so they can be delivered to the other person. They are not end-to-end encrypted. We do not read them, except those reported to us.
Reports: when you report an account or a message, we receive the reason, your details and, for a message, the last 20 messages of the conversation. The reported person is not told.
Notifications: if you allow them, we keep your phone’s notification identifier, its operating system and its time zone (to respect quiet hours). The sender’s name and the text of a message pass through Expo, then Apple or Google, to appear on your phone.
Referrals: who invited you, the people you invited and their status (on trial, subscribed), and your free months. On Android, the invitation code reaches you through Google Play at installation. On iPhone, Aldus asks for your consent before reading the link copied by the invitation page.
Scanning: the barcode is decoded on your phone; only the ISBN is sent to our servers to find the book’s record. Camera images do not leave your phone, except the cover photo you choose to save.
Technical operation: the identifier of the active session (so that a library is only modified from one device at a time), and the application’s technical errors (error message, screen concerned, linked to your account), with no IP address and no advertising identifier.
Your subscription: if you subscribe to Aldus Pro, payment is processed by Apple or Google; we only receive the fact that you are subscribed, the store, the plan and the dates of the subscription, never your bank details.
Loan reminders remain local notifications, scheduled on your phone.
Purposes and legal bases
Providing the service (account, library, backup, sync, book records, loans, Aldus Pro subscription): performance of the contract formed by the terms of use.
Friends, sharing, messages, notifications and referrals: performance of the contract, these being features you choose to use.
Handling reports and enforcing the rules of conduct: ADVIJU’s legitimate interest in protecting its users.
Fixing errors and securing the service (error log, active device): ADVIJU’s legitimate interest in providing a reliable application.
To find a book’s record, our servers query bibliographic sources (BnF, Open Library, Google Books, ISBNdb) with the ISBN or the text of your search, without any data about you. To find a missing cover, only the edition’s information (title, authors, publisher, ISBN) may be sent to OpenAI; no data from your account or your library is sent. If you search for a cover online, our servers send the text of your search to Brave, and your phone loads the suggested images from Brave, which then sees your IP address.
Our processors: Supabase (database and storage, in Paris), Vercel (website and API servers), Expo (application updates and sending notifications), RevenueCat (management of Aldus Pro subscriptions), Resend (sending password reset emails), Brave (cover image search), Apple and Google (sign-in, payment and notifications). Some are established in the United States; transfers are governed by the European Commission’s standard contractual clauses or the EU-U.S. Data Privacy Framework.
Retention periods
Your account and your library are kept for as long as your account exists.
When you delete your account (Settings › My account, or from the “Delete my account” page of the website), deletion is immediate: your account, libraries, books, places, loans, notes, quotes, reviews, lists, cover photos, settings, friends, invitations and free months are erased from our servers.
The messages you sent remain in the other person’s conversation, marked “Deleted account”. To remove one before you leave, delete it: its text is erased from our servers.
The text of a notification is erased as soon as it is sent, and the notification 30 days later. Reports are kept for one year, then erased. After an account is deleted, the record of a referral no longer identifies anyone.
Technical error logs are no longer linked to any account after it is deleted. Your subscription history remains with Apple or Google and with RevenueCat, under their own rules: this is what makes it possible to restore Aldus Pro if you come back.
Shared catalog records (a book’s title, authors, publisher, ISBN) are not personal data and remain in the catalog.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. The application lets you export your library at any time (Settings › Export my library) and delete your account yourself.
To exercise your rights, write to contact@adviju.fr from the address linked to your account. We reply within one month.
If you believe your rights are not being respected, you can file a complaint with the CNIL (cnil.fr).
Contact
ADVIJU INVESTISSEMENT SAS — Personal data, 22 rue Durantin, 75018 Paris · contact@adviju.fr.
This policy may change along with the application; the date of the latest update appears at the top of the page, and any significant change is notified to you in the application.