Privacy Policy

BookFlik is a children's reading comprehension and quiz application developed and operated by Value Vista Ltd, a company registered in England and Wales.

BookFlik is available on Android and iOS and is designed for use by children aged 5–16, their parents, and schools in the United Kingdom.

For the purposes of UK GDPR, Value Vista Ltd is the data controller for personal data processed through the BookFlik application.

We collect only the minimum data necessary to provide the BookFlik service.

We do not collect home address, phone number, precise location, payment card details, or any biometric data.

When BookFlik is used by a child under the age of 13, we require parental or guardian consent before the account is created. For school (B2B) accounts, the school acts as the responsible party and is required to have appropriate parental consent in place.

We do not:

• Show advertising to children
• Sell children's data to any third party
• Use children's data for profiling or automated decision-making beyond in-app features
• Collect more data than is strictly necessary
• Allow children to make their profiles public

Parents and guardians may request access to, correction of, or deletion of their child's data at any time by contacting us at privacy@bookflik.com.

We use the data we collect solely to provide and improve the BookFlik service:

• Authenticate users and maintain accounts
• Track reading progress, quiz attempts, and scores
• Award XP, coins, badges, and reader ranks
• Generate AI-powered book quizzes via the Gemini API
• Provide school administrators and teachers with class reading reports (B2B)
• Monitor app performance and fix technical issues
• Send transactional notifications (e.g. badge earned, quiz results)

We do not use your data for advertising, sell it to data brokers, or share it with third parties for their own marketing purposes.

BookFlik uses the following third-party services to operate. Each acts as a data processor on our behalf under appropriate data processing agreements:

Data processed by these services may be stored on servers outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) in accordance with UK GDPR.

We retain personal data only for as long as necessary:

• Active accounts: Data is retained for the duration of the account
• Deleted accounts: Personal data is deleted within 30 days of account deletion
• School accounts: Pupil data is deleted within 30 days of a school ending its subscription, or upon written request
• Quiz and reading data: Retained for the lifetime of the account to support long-term progress tracking

You may request deletion of your account and associated data at any time through the app settings or by emailing privacy@bookflik.com.

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restrict processing — request we limit how we use your data
• Right to data portability — request your data in a machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@bookflik.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure:

• All data is stored in Google Firebase with encryption at rest and in transit
• Authentication is handled via Firebase Authentication with secure token management
• Access to production data is restricted to authorised personnel only
• Firestore security rules enforce per-user data access controls

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, please contact us immediately at privacy@bookflik.com.

We may update this Privacy Policy from time to time. When we make material changes we will notify users via the app and update the effective date at the top of this page.

Continued use of BookFlik after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or how we handle your data, please contact us: