Updated 28 October 2026
Privacy, with care.
Your books and memories are personal. Here is what we collect, why we need it, and the choices that stay yours.
Who looks after your information
Prause by Bookish Baddie is operated by Gracious Nyoni in Johannesburg, South Africa. For privacy, access or deletion requests, contact bookishbaddie18@gmail.com.
What you share, and why
We use your account email and identifier to create your account, secure sign-in, send essential account emails and help you recover access. An email and password are required for a synced account; without them, we cannot provide that service. Your password is handled by our authentication service and is not stored by Prause in readable form.
You choose your reader name, books, session details, reflections, quotes, photographs, voice recordings and videos. We store what you save so you can return to it and use your account across devices. Music details may accompany a memory. These additions are voluntary; you can keep text without granting microphone, camera or photo access.
We process account and saved-content information to provide the service you request; essential security and limited account-activity information to protect and operate it; and optional AI content with your consent. We do not sell your reading memories, publish them in a feed, or use them for advertising.
The services that help Prause work
Specialist providers support website hosting, secure account access, private storage, encrypted backups and account-email delivery. They receive the information needed for those purposes. Account emails can include time-limited sign-in or recovery links and delivery or open-tracking information; they do not include your reading memories. Service providers may also process connection and security information, including IP addresses and request times.
Synced content is primarily stored in Germany. Encrypted recovery backups are stored in the United States. Email, optional AI and other provider processing may take place in additional countries, where privacy laws may differ from South Africa or your country. Contact us for details of the providers and applicable transfer arrangements. We do not promise that all processing stays in one country.
Optional AI, music and book searches
AI is optional. When you request transcription or a reflection, the content you select is sent to OpenAI for that request. This can include words, audio, selected images or video frames, and associated book and soundtrack context. You can edit the result or keep your own words. OpenAI states that API content is not used for model training by default; provider security and abuse-monitoring retention may still apply. See OpenAI’s data controls. Declining AI does not prevent ordinary reading or saving.
Connecting Spotify shares sign-in and playback information with Spotify. Your connection stays linked to your account until you disconnect; you can also revoke access in Spotify. Spotify audio is not mixed into voice memories. See Spotify’s privacy policy.
Book searches go to Open Library; cover images and external links may send ordinary connection information to their providers. Your private reflections are not sent with a book search. See Internet Archive’s policies.
Device storage and activity
Essential cookies and account-scoped device storage keep you signed in and support saving and recovery. We do not use advertising trackers or a third-party app analytics tracker. We keep a limited account-activity summary, including your first and latest activity and the number of different days you return, to understand whether readers use the service. It does not inspect memory contents or track your reading progress. It is removed with account deletion.
How your memories are protected
Your account is private to you. We use access controls and encryption in transit; recovery backups are encrypted before storage. This is not end-to-end encryption: authorised operators and service providers may need access for maintenance, security or support. No service can guarantee against every loss or unauthorised access. Protect your device and keep a personal export of irreplaceable memories.
Keeping and removing information
Your saved content stays with your account until you remove it or delete the account. Limited recent save history supports recovery. Removing an individual memory may not immediately erase associated files or its appearance in earlier saves; contact us for a specific erasure request.
Account deletion is available in account settings. It removes access and attempts to remove the account’s online content; if it fails, retry or contact support. Downloaded exports and copies on other devices must be removed separately. Protected backup copies may remain for at least seven days. Backups currently have no fixed automatic deletion date and remain until manually removed; deletion requests can include those copies, subject to protection periods and legal retention requirements. Providers may retain limited security or legally required records under their own policies.
Your choices and rights
You can review and edit your content, export your memories, decline or withdraw consent for future optional processing, disconnect Spotify, and delete your account. Contact us to request access, correction, deletion, restriction, portability where applicable, or to object to processing. We may verify ownership before acting. Withdrawing consent does not undo processing already lawfully completed. We do not make automated decisions that determine legal or similarly significant outcomes about you.
You can complain to South Africa’s Information Regulator at POPIAComplaints@inforegulator.org.za, or to your local privacy authority where applicable. You can contact us first, but are not required to do so.
Keep your words yours. Never send passwords, sign-in codes or private recordings in an initial support email. Read Keeping your memories safe for personal exports and recovery.