Privacy policy

PagePurr works without an account and without ads. This page explains exactly which data goes where and when – and which never does.

Last updated 01.11.2026

This is a translation. The German version is legally binding.

Controller

Further details in the imprint. No data protection officer has been appointed because none is required by law.

Principle

There is no tracking, no analytics and no sharing with ad networks. Your library, reading times, notes, quotes and statistics stay on your device and – if you use iCloud – in your private iCloud database at Apple. I have no access to them.

Links to Spotify open the Spotify app; Spotify’s own privacy policy applies there.

iCloud (Apple)

If you are signed in to iCloud on your device, PagePurr syncs your library through your private CloudKit database. The provider is Apple; Apple’s privacy policy applies. I cannot see this data. Text you write yourself (notes, quotes, notes on reading sessions and reviews) is additionally end-to-end encrypted in iCloud. Exceptions are very long texts, which iCloud stores as attachments, and handwriting; Apple protects these with standard iCloud encryption.

Book information from the internet

When you search, or use “Complete book details”, “Load covers” or “Suggestions from the internet”, the app sends the search term or ISBN, title and author directly from your device to:

• German National Library (services.dnb.de, www.dnb.de), Germany;
• Open Library / Internet Archive (openlibrary.org, covers.openlibrary.org), USA.

For technical reasons, these services receive your IP address and common device information (e.g. app version). They process the data as independent controllers under their own privacy policies; I receive none of it. Legal basis: Art. 6(1)(b) GDPR (the search you requested) or (a) (your switch).

Third country: For the Internet Archive in the USA there is no adequacy decision and no safeguards agreed with me; the level of data protection there is not guaranteed to be equivalent (e.g. access by authorities). The transfer only takes place because it is necessary for the search you requested (Art. 49(1)(b) GDPR). According to its own statement, the Internet Archive usually does not store full IP addresses.

AI features

Default: Apple Intelligence on your device. Processing takes place on your iPhone; nothing leaves the device.

Optional: Claude by Anthropic – only with your explicit consent and from age 18.

What is sent

• in the chat, your message and a short overview of your library – favourite genres, favourite authors, highly rated books, what you are currently reading and your reading list (for books, only title and author); if you continue a saved conversation, also its previous text;
• when categorising, the book’s title, description and subjects; when detecting a series, title and author;
• for “Matches your taste”, the book’s title, author and genres plus the same library overview.

Never sent: notes, quotes, reading times, your review texts, your name, your Apple ID.

Your choice of books may allow conclusions about specially protected information (e.g. religion, health, sexuality, political views). By tapping “Agree” you explicitly consent to this information being processed for the AI response (Art. 9(2)(a) GDPR).

The route: my server at Cloudflare

The app sends the request to my server (Cloudflare Workers). It holds the access key and forwards the request to Anthropic. Anthropic receives neither your IP address nor any identifier of yours, only the text. The server stores no content and writes no logs. For technical reasons, Cloudflare processes your IP address to establish the connection.

• Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, as processor (data processing agreement under Art. 28 GDPR with EU standard contractual clauses). Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR).
• The server runs at the Cloudflare location closest to you – in the EU usually within the EU, without guarantee.

Usage counter

For the monthly allowance, the server stores only “month → amount used” per account, in Cloudflare Durable Objects with storage location EU. The account is a random installation ID that the app stores in your device’s keychain (not tied to any name or Apple ID).

Retention: I keep only the current and the previous month; older months are deleted automatically, at the latest at the end of the following month. An account that has not been used for two months is removed entirely. In addition, the server keeps a monthly total across all users (not linked to any person, 13 months) as a cost limit.

Device check and free limit (Apple DeviceCheck)

The app uses Apple’s DeviceCheck to create a short-lived token proving that the request comes from a genuine Apple device; I do not store the token. So that a device cannot get the free allowance several times by reinstalling, the server has Apple set a flag for your device (“this device had a free installation in month X”). Apple stores it for me; I cannot link it to any person. It remains after deleting the app or using “Delete all data” until the server changes it at a later free sign-up, and only applies to the month stated.

Anthropic

The recipient is Anthropic Ireland, Limited (Dublin, Ireland) as processor, which has the requests answered by Anthropic PBC in the USA (and possibly other countries).

• Purpose: only to generate the response. Not used to train AI models.
• Retention: Anthropic deletes inputs and outputs after 30 days at the latest. Only if a request is classified as violating Anthropic’s usage policy may Anthropic keep it for up to 2 years, and the score from Anthropic’s safety classifiers for up to 7 years.
• Third country: Anthropic is not certified under the EU-US Data Privacy Framework. The transfer to the USA is safeguarded by EU standard contractual clauses (Art. 46(2)(c) GDPR), part of Anthropic’s data processing agreement. You can request a copy from me.

Legal bases

• Sending content to Anthropic: your consent, Art. 6(1)(a), Art. 9(2)(a) GDPR.
• Usage counter, device check and DeviceCheck flag: my legitimate interest in preventing abuse and limiting the cost of each request (Art. 6(1)(f) GDPR, cf. Recital 47). The data is minimal (one amount per month, two bits), not linked to your identity and not shared.
• Storing the installation ID in the keychain and creating the DeviceCheck token on your device: strictly necessary to provide the Claude service you requested (§ 25(2) no. 2 TDDDG); both also happen only after your consent.
• Withdrawal at any time in Settings (“AI” → Apple or Off): after that, nothing more is sent and the consent is deleted on the device. Requests already sent remain with Anthropic until the period above expires.
• Objection to processing under (f) (Art. 21 GDPR): write to me; Claude will then no longer be available, because access is not possible without the usage check.

Only on your device

• Chat history: stays on this device only (not in iCloud, not in the device backup) and is deleted automatically 30 days after the last message. “Delete all” at any time under “Conversations”.
• “Matches your taste” explanations: remembered per book on the device, not in the backup.
• Reminders, widget, Live Activity, Siri shortcuts: local.

This website

This website is delivered via Cloudflare (provider and safeguards as for the server above). When you visit it, Cloudflare processes your IP address, the page requested, date and time and browser information for technical reasons, to deliver the page and protect it against attacks. I do not analyse this data. Legal basis: Art. 6(1)(f) GDPR (secure provision of the website). Cloudflare does not state a fixed retention period for this connection data; it keeps it only as long as needed to deliver the site and protect it against attacks. I have switched off logging in my account and do not store any access data myself.

The website sets no cookies, uses no tracking and loads nothing from third-party servers – even the fonts are hosted on this website itself.

When you write to me

If you send me an email, I process your address and the content in order to reply (Art. 6(1)(b) or (f) GDPR). My email provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Irland (iCloud Mail), as processor. I delete messages once your request has been dealt with, unless statutory retention obligations require longer storage (e.g. for business correspondence).

Deleting

Settings › Import and Export › Clean Up › Delete all data deletes your library, chat history, explanations, settings and the installation ID on the device (and, through iCloud, on your other devices). Not covered, because I cannot link them to any person:

• the monthly counters on the server – they delete themselves after the period stated above;
• the DeviceCheck flag at Apple (see device check);
• requests at Anthropic (period see Anthropic).

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of your consent (Art. 7(3) GDPR).

I don’t know your name. So that I can find data about you, send me your Device ID (Settings › AI › Device ID); otherwise I cannot identify you (Art. 11 GDPR).

You can lodge a complaint with any data protection supervisory authority, in particular with the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (www.baden-wuerttemberg.datenschutz.de).

No automated decisions

There is no automated decision-making with legal effect (Art. 22 GDPR). The AI makes suggestions; you decide.