Worm Privacy Policy

Information we collect

Account information. When you sign in with Google, we receive your email address, a Google account identifier, and basic profile information such as your name and profile picture, if available. We use Google sign-in to identify you and give you access to your Worm account. Worm does not receive your Google password or request access to your Gmail, Google Drive, contacts, or calendars.

Reading and profile information. We store the information you add to Worm, including your display name, settings, book lists, ratings, reviews, reading sessions, progress, and goals.

Information from using the app. Worm and its service providers process basic connection and request information to deliver the app, diagnose problems, and help keep it secure. We use sign-in cookies to keep you signed in.

How we use your information

We use your information to create and maintain your account, save your reading activity, and provide the features you choose to use. We also use it to resolve problems and protect accounts from unauthorized access.

Your Google sign-in information is used for account access and identification. Your email appears in your Worm profile. Your Worm display name is separate from your Google name, and you can change it in the app. We do not use your Google profile picture as your Worm avatar.

How we store and protect your information

Your account and reading information are stored by the service providers that help us run Worm. We use authenticated access to protect your account and limit access to your saved reading information. Your browser also stores the sign-in information needed to keep you signed in.

Who processes your information

We use Supabase to manage sign-in and store account identity information, including the basic profile information received from Google. Railway hosts our application service and stores your Worm account and reading information. Cloudflare delivers our website and processes the requests needed to use it. These providers process information to support those services.

We do not sell your personal information or use your Google account information for advertising. We do not share your Google account information with book information providers.

Our handling of information received from Google is subject to the Google API Services User Data Policy.

Keeping and deleting your information

We keep your account and saved reading information so you can return to it while you use Worm. You can edit or delete reading entries using the controls available in the app. To request deletion of your account and its associated personal information, contact us using the support contact below.

Your choices

You can update your Worm display name and sign out from your profile. You can also remove Worm's access in your Google Account connections. Removing Google access stops that connection; it does not delete the account or reading information already saved in Worm. Contact us separately if you want that information deleted.

Changes during the beta

As Worm develops, we may update this policy to reflect changes to the app or how we handle information. We will publish updates on this page and change the date above. If we want to use Google account information for a new purpose, we will explain the change and ask for your consent before doing so.

Contact us

For privacy questions or to request deletion of your account, email [email protected]. For account requests, please write from the email address you use to sign in to Worm so we can verify the request.