Privacy Policy

For the purposes of UK GDPR, Value Vista Ltd is the data controller for personal data processed through the BookFlik application.

Value Vista Ltd is a company registered in England and Wales. Questions about how we process data? Contact us at contact@bookflik.com.

We collect only the minimum data necessary to provide the BookFlik service.

We do not collect home address, phone number, precise location, payment card details, or any biometric data.

When BookFlik is used by a child under the age of 13, we require parental or guardian consent before the account is created. For school (B2B) accounts, the school acts as the responsible party and must have appropriate parental consent in place.

We do not:

• Show advertising to children
• Sell children's data to any third party
• Use children's data for profiling beyond in-app features
• Collect more data than is strictly necessary
• Allow children to make their profiles public

Parents and guardians may request access to, correction of, or deletion of their child's data at any time by contacting contact@bookflik.com.

We use the data we collect solely to provide and improve the BookFlik service:

• Authenticate users and maintain accounts
• Track reading progress, quiz attempts, and scores
• Award XP, coins, badges, and reader ranks
• Generate book quizzes via the Gemini API
• Provide school administrators and teachers with class reading reports (B2B)
• Monitor app performance and fix technical issues
• Send transactional notifications (e.g. badge earned, quiz results)

We do not use your data for advertising, sell it to data brokers, or share it with third parties for their own marketing purposes.

BookFlik uses the following third-party services. Each acts as a data processor on our behalf under appropriate data processing agreements:

Data may be stored on servers outside the UK. Where this occurs, we ensure appropriate safeguards (Standard Contractual Clauses) in accordance with UK GDPR.

We retain personal data only for as long as necessary:

• Active accounts: Data retained for the duration of the account
• Deleted accounts: Personal data deleted within 30 days of account deletion
• School accounts: Pupil data deleted within 30 days of a school ending its subscription, or upon written request
• Quiz and reading data: Retained for the lifetime of the account to support long-term progress tracking

Request deletion at any time through app settings or by emailing contact@bookflik.com.

Under UK GDPR you have the following rights:

• Right of access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restrict processing — request we limit how we use your data
• Right to data portability — request your data in a machine-readable format
• Right to object — object to processing based on legitimate interests

To exercise any right, contact contact@bookflik.com. We will respond within 30 days.

You may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take reasonable technical and organisational measures to protect personal data:

• All data stored in Google Firebase with encryption at rest and in transit
• Authentication via Firebase Auth with secure token management
• Access to production data restricted to authorised personnel only
• Firestore security rules enforce per-user data access controls

If you believe your account has been compromised, contact us immediately at contact@bookflik.com.

Cookies are small text files placed on your device when you visit a website. BookFlik's website uses the following types of cookies:

Strictly necessary cookies (like bflik_consent) are set without consent as they are essential for the website to function correctly.

Analytics cookies are only set if you click "Accept Analytics" on the cookie banner. If you decline, no analytics cookies are placed and Google Analytics does not collect any data about your visit.

We use Google Consent Mode v2 — Google Analytics is loaded in a restricted state by default, and only activates after you give explicit consent. We never use cookies for advertising or personalisation.

You can withdraw your consent at any time by clearing your browser cookies for this site. The banner will reappear on your next visit and you can make a new choice.

For more information about Google Analytics cookies, see Google's Privacy Policy.

We may update this Privacy Policy from time to time. When we make material changes we will notify users via the app and update the effective date at the top of this page.

Continued use of BookFlik after changes are posted constitutes acceptance of the updated policy.

Questions about this Privacy Policy or how we handle your data?