Privacy Policy

Effective from 1 November 2026

LibraryLog (librarylog.in and the LibraryLog apps) helps students find self-study libraries and helps library owners run them. LibraryLog is run by its founder, Himanshu, from Lucknow, Uttar Pradesh, India ("we", "us"). This policy explains what personal data we collect, why, who we share it with, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.

Summary

We collect only what we need to sign you in, show libraries and run the tools you use.
We do not sell your personal data, and we do not show advertising.
Fees are paid directly at the library. LibraryLog never collects payments or card details.
You can ask us to see, correct or delete your data at any time by writing to marked-puns.4f@icloud.com.

Data we collect

When you sign in

Your mobile number, used to send a one-time password (OTP) and to identify your account.
If you choose "Continue with Google": your Google account ID, email address and name, as shared by Google. We never see your Google password.
The IP address and time of each OTP request, to stop abuse.

Your profile

Your name, exam goal (for example UPSC or NEET) and preferred area, if you give them.

If you run a library

The library's name, address, Google Maps link and map location, phone and WhatsApp numbers, UPI ID, timings, shifts, fees, seats, facilities, rules and description. Most of this is shown publicly on the library's page so students can find and contact it.
Records you keep in LibraryLog about your students, staff, payments and expenses.

Students added by a library

A library can add its students to LibraryLog: name, mobile number, shift, seat, fee, payments, validity and notes. The library decides what to record and is responsible for having its students' permission to do so (see "Library owners and their students" below). When that student later signs in with the same mobile number, the record is linked to their account.

When you use the website

Pages visited, buttons tapped (for example Call, WhatsApp or Directions on a library page), device and browser type, approximate location from your IP address, and similar usage data, collected through Google Analytics using cookies. We do not send names, phone numbers, preview links or account IDs to Google Analytics.
If you tap "Libraries near me", your browser shares your location once, after asking you. It is rounded to about 10 metres, used only to measure distances to libraries, kept in your browser for that visit, and not stored by us.
Your sign-in session is stored in your browser so you stay signed in.

Why we use your data

To create and secure your account and sign you in (performing the service you asked for).
To show libraries, distances, fees, seats and directions.
To let library owners manage students, seats, fees and staff, and to send reminders they choose to send.
To prevent fraud and abuse, such as too many OTP requests.
To understand which features are used and improve LibraryLog (Google Analytics).
To meet legal obligations and respond to lawful requests.

We rely on your consent, which you give by signing up and using LibraryLog, and on the other grounds the law allows. You can withdraw consent at any time by deleting your account; this does not affect what we did before.

We share personal data only with the service providers that run LibraryLog for us, under their terms, and only for the purposes above:

Supabase — database (hosted in Mumbai, India).
Cloudflare — website hosting, security and content delivery.
Message Central (VerifyNow) — sending OTP text messages.
Google — "Sign in with Google" and Google Analytics.
Expo — app notifications, once our mobile apps launch.

Library pages are public: anything a library owner adds to their page is visible to everyone. Your details as a student are shared with the library you join or that added you. WhatsApp reminders and receipts are sent by the library owner from their own phone; LibraryLog only prepares the message.

Some providers may process data outside India. We do so only as permitted by Indian law. We may also disclose data if required by law, a court order or a government authority, or to protect the safety of our users.

Library owners and their students

When a library owner adds students and their details to LibraryLog, the owner decides why and how that data is used, and LibraryLog processes it on the owner's behalf. Owners must tell their students and have their permission, keep the records accurate, and use them only to run their library. Students can ask the library, or us, to correct or remove their details.

How long we keep data

OTP request records: up to 30 days.
Sign-in sessions: up to 180 days, or until you sign out.
Account, profile and library data: while your account is active. When you ask us to delete your account, we delete or anonymise your personal data within 30 days, except what we must keep by law (for example, records needed to resolve disputes or prevent fraud).
Analytics data: kept by Google for 14 months.

Security

Data is encrypted in transit (HTTPS). OTPs and sign-in tokens are stored only in hashed form, and access to the database is restricted to our server. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

Your rights

You can ask us to:

tell you what personal data we hold about you and how we use it;
correct, complete or update it;
delete it (erasure), or delete your account;
withdraw your consent;
nominate another person to exercise these rights on your behalf if you die or become unable to;
resolve a grievance about how we handle your data.

Write to marked-puns.4f@icloud.com from your registered email, or tell us your registered mobile number so we can verify it is you. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

Children

LibraryLog is meant for people aged 18 and over. Students under 18 may use LibraryLog only with the permission and supervision of a parent or guardian, who agrees to this policy for them. If you believe a child is using LibraryLog without that permission, write to us and we will remove the data.

Cookies

We use cookies and browser storage to keep you signed in (necessary) and for Google Analytics (to understand usage). You can block or delete cookies in your browser settings; LibraryLog will still work, but you may need to sign in again.

Grievance Officer

Himanshu, Grievance Officer, LibraryLog
Email: marked-puns.4f@icloud.com
Lucknow, Uttar Pradesh, India

We acknowledge complaints within 48 hours and aim to resolve them within 15 days.

Changes to this policy

We may update this policy as LibraryLog grows. We will change the date at the top and, for important changes, tell you in the app or on the website before they take effect.