Privacy Policy

1. Information We Collect

Account information. When you sign up, we collect your email address and password (your password is hashed and stored securely by our authentication provider — we never see or store it in plain text). You may optionally provide a display name and profile photo.

Content you create. This includes book reviews, star ratings, optional reader-insight slider answers (e.g., how much prior Torah knowledge a book requires, how easy it is to follow), shelf entries (books you've read, want to read, etc.), replies to other users' reviews, and your reactions to reviews (Totally Agree, Interesting Take, Disagree).

Anonymous reviews. You can choose to post a review anonymously. Anonymous reviews display as "Anonymous" to other users, but they are still linked to your account in our database. We use that link to enforce one review per book, send you notifications about replies, and handle abuse or legal requests. Site administrators can see which account posted an anonymous review if needed for moderation. We won't reveal your identity to other users.

Mailing list. If you join our mailing list or pre-launch list, we collect your email address (and name if you provide it) so we can send you updates about Lishma. You can unsubscribe at any time using the link in any email.

Usage data. We automatically collect basic technical data when you use the Service: IP address, browser type, device information, pages visited, and timestamps. This is used for security, debugging, and understanding how the Service is used.

Cookies and session data. We use cookies/local storage to keep you logged in and remember your preferences. See Section 6.

Camera access (admin users only). If you're an administrator using the barcode scanner feature, the Service requests camera access to scan book barcodes. Scanned images are processed to extract ISBN data and are not stored.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Display your reviews, ratings, and reactions to other users (anonymous reviews appear without your name)
• Calculate community averages, including reader-insight slider averages shown on each book's page
• Operate core features like browsing, filtering, your shelves, and the Quote of the Day
• Show or hide children's books based on your Kids section preference
• Send you email updates if you joined our mailing list
• Communicate with you about your account (password resets, important updates)
• Detect and prevent abuse, spam, or violations of our Terms, including reviewing content that users flag for moderation
• Improve and maintain the Service

We do not sell your personal information to third parties.

3. How We Share Information

Other users. Your display name, reviews, ratings, reactions, replies, and public profile content are visible to other users of the Service. Anonymous reviews are shown without your name. Reader-insight slider answers appear publicly as averages on a book's page, and individual answers are visible on your review (unless it's posted anonymously, in which case they're shown without your name).

Service providers. We share data with the vendors who help us run the Service:

• Supabase (database hosting, authentication, and session management)
• Vercel (application hosting)
• ConvertKit (email list management and sending, for mailing list subscribers)
• Book data sources — Google Books, Open Library, and Sefaria — which we query to look up book information and cover images. We send only book details (like an ISBN or title), never your personal data. We may also retrieve cover images from publisher websites the same way.

These providers only receive the data needed to perform their function and are bound by their own privacy/security obligations.

Legal requirements. We may disclose information if required by law, subpoena, or to protect the rights, safety, or property of Lishma or others.

Business transfers. If Lishma is acquired or merged, user information may be transferred as part of that transaction. We'll notify you if this happens.

4. Data Retention

We retain your account and content data for as long as your account is active.

5. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing

To exercise any of these rights, contact us at abigailjtepper@gmail.com. California residents have specific rights under the CCPA, and EU/UK residents have rights under the GDPR — both are covered by the list above.

6. Cookies

We use essential cookies/local storage to keep you signed in and to remember basic preferences (such as whether you've chosen to show children's books). We do not currently use third-party advertising or tracking cookies. If that changes, we'll update this policy and provide a cookie consent banner where required.

7. Children's Privacy

The Service is not directed at children under 13 (or 16 in the EU), and we do not knowingly collect personal information from them. Our "Kids" section lists children's books for parents, educators, and other adult readers to browse. It is not a space for children to create accounts or post. If you believe a child has created an account, contact us and we'll delete it.

8. Data Security

We use industry-standard security practices, including encrypted connections (HTTPS), row-level security on our database, and hashed passwords. No system is 100% secure, so we can't guarantee absolute security, but we take reasonable steps to protect your data.

9. International Users

Your data may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you via email or an in-app notice. Continued use after changes means you accept the updated policy.

11. Contact Us

Questions about this policy? Reach us at abigailjtepper@gmail.com.