Wormi
Privacy Policy
Effective date: July 14, 2026
Wormi helps you scan bookshelves, build a library, and find your next read. This policy explains what data Wormi collects, why, and what happens to it. The short version: we collect what the product needs to work, we don't track you across other apps, and you can delete everything from inside the app.
What we collect
| Data | Source | Why |
|---|---|---|
| Name and email (or Apple private relay email) | Sign in with Apple | Account creation. Apple ID is the only sign-in method. |
| Device identifier (app-generated, per-install) | App | Powers your taste profile before you sign in; abuse prevention. |
| Taste profile (quiz answers: favorite books, mood, pace, length, context) | Onboarding quiz | Recommendations. |
| Library, shelves, wishlist, reading preferences | You | The core product. |
| Shelf photos (“shelfies”) and scan results | Camera | Book identification; stored to power scan history and improve recognition. |
| Usage events (e.g. book added, recommendation viewed, purchase-intent taps) | App telemetry | Product improvement. |
| Purchase and subscription status | Apple / RevenueCat | Unlocking Supporter features. |
What we don't collect: precise location, your contacts, or any tracking of your activity across other companies' apps and websites. Wormi does not use your data for advertising.
How photos are handled
- Shelf photos are uploaded to Wormi's cloud storage (Google Cloud) and linked to your account.
- Explorer scans are retained for 30 days, then deleted automatically. Supporter scans are kept until you delete them.
- Photos may be used to improve Wormi's scanning accuracy. They are never shared publicly or sold.
Third parties (processors)
Wormi uses a small number of service providers to run the product. Each receives only what it needs:
- Apple: sign-in and payments.
- RevenueCat: subscription management.
- Google Cloud: hosting, storage, and Vision OCR.
- OpenAI / Anthropic / Replicate: book identification and recommendations. Scan images and extracted text are processed by these services to identify books.
- Bookshop.org / Amazon: outbound affiliate links. No data is shared with them beyond the click itself.
Wormi does not sell your personal data.
Retention & deletion
- Account deletion is available in the app: Profile → Settings → Delete Account. It removes your account and associated data. See how to delete your account.
- Explorer scan history expires after 30 days automatically.
- For data requests (access, correction, deletion), contact hello@wormi.app.
Children
Wormi is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we'll delete it.
Security
Data is encrypted in transit. Authentication tokens are kept in your device's secure storage. No system is perfectly secure, but we work to protect your data with industry-standard measures.
Changes to this policy
If this policy changes materially, we'll note it in the app or on this site and update the effective date above.
Contact
Questions about privacy? Email hello@wormi.app.