Privacy
Last updated: 14 October 2026 · Leggi in italiano
This policy explains what data the KanzenComix app (for iPhone and Android) and this website process, why, how long the data is kept and what your rights are.
In short
- No ads, no tracking across other companies' apps and websites, no data sold.
- Your collection stays on your phone and is also backed up to our online service, even without an account, so you don’t lose it.
- An Apple or Google account is optional.
- A photo of a shelf leaves your phone only if you allow it.
- You can delete your account from the app and ask us at any time what data we hold.
Who processes the data
The data controller is Andrea Libutti, sole proprietorship, VAT number IT18598921007, based at Via Riva Ligure 44, 00163 Roma, Italia. On this page "we" means him. For any privacy question, or to exercise your rights, write to support@kanzencomix.app.
What data, why and for how long
Your collection
The books you mark, the series you follow, the entries you add by hand, release reminders and settings, including the notes, prices, dates and shops you write on your copies, plus a random code of the phone that ties the collection to the installation. We back them up so you can get your collection back if you reinstall the app or change phone: this is the service the app offers you (performance of the service you asked for, Art. 6(1)(b) GDPR).
With an account we keep it as long as the account exists. Without an account, if you don’t open the app for 180 days the online copy is deleted (the books stay on your phone); you can also delete it yourself, in Settings → Privacy.
Your account, if you create one
If you sign in with Apple or Google: your email address (with Apple it can be the hidden one you choose), the identifier of your Apple or Google account and, from Apple, your name. For Sign in with Apple we also keep, encrypted, the code that lets us ask Apple to revoke the sign-in when you delete your account. We need them to sign you in and to link your collection to your account (Art. 6(1)(b)). Sign in with Google goes through a Google library inside the app, which exchanges the sign-in data with Google under Google’s rules; Sign in with Apple goes through the iPhone’s system.
We keep them as long as the account exists. If you delete it, the account is locked straight away and deleted for good after 30 days: see Deleting your account.
Connecting to the service
Each time it opens, the app asks our service whether there is a new catalogue, sending a random code of the phone (on iPhone it stays even if you reinstall the app), the app version and the language. As with any connection to the Internet, the service sees the IP address and writes it in its logs, with the time. This keeps the app working and protects the service from abuse and failures (legitimate interest, Art. 6(1)(f)). Logs with the IP address are deleted after about 10 days.
How many installations there are
For each installation we count the platform (iPhone or Android), the app version and the day of the first and last connection, tied to a code derived from the phone’s code in a way that cannot be traced back, and without any account. This tells us how many people use the app and which versions are still around (legitimate interest). An installation that hasn’t connected for 180 days is deleted.
A photo of a shelf, only if you allow it
Only the shelf you framed is sent, as an image, with no location or date. It goes to our service, which passes it to Google (Gemini API) to recognise the volumes. We don’t keep the photo. We use Google’s paid service, under which Google undertakes not to use photos and responses to improve its products; it may keep a record for a limited period, only to detect abuse. The computers that process it may be outside the European Union.
Reading photos online is based on your consent (Art. 6(1)(a)), which you can withdraw at any time in Settings → Privacy: without it the photo is read on the phone, where the phone allows it. For the usage limit we keep the IP address for at most 72 hours and the phone’s code with the number of photos read for 400 days after the last one (legitimate interest: protecting the service from abuse).
Entries you add by hand
When you add a volume or a series that isn't in the catalogue, only its title, publisher, numbers and barcode reach the catalogue curator as a report, with no notes, prices or dates of your copies, to correct and complete the catalogue for everyone (legitimate interest). The curator can read them for at most 60 days, then the text is deleted; if you delete the entry, the report is withdrawn straight away. Details that are checked and published stay in the catalogue, with no link to you.
"Find it"
When you tap a shop in "Find it" we record which shop, which volume, from which screen and at what time, not your account. Then the shop’s website opens: it receives the volume to search for and, if there is an agreement, the KanzenComix code. From there on the shop’s own rules apply, as with any website you visit. This tells us which shops are useful and, where there are agreements, lets us recognise purchases that started in the app (legitimate interest).
Release reminders
Reminder notifications are created on your phone: our service doesn’t send you notifications. The list of reminders is backed up with your collection.
If you write to us
Your email address and what you write to support@kanzencomix.app, so we can reply (legitimate interest, or performance of the service if you ask for help with the app). The mailbox is forwarded by Cloudflare to a Google mailbox. We keep messages for as long as needed to handle the request and its follow-ups.
Backups
The database is copied every night so it can be restored after a failure. Copies are kept for at most 30 days, so deleted data may remain in a copy for up to 30 more days.
Who receives the data
Only the providers needed to run the app, who process it on our behalf:
- OVH: the service’s server, in Strasbourg, France;
- Cloudflare: the network between the app and the service, this website and mail forwarding;
- Google: reading photos, if you allow it; Sign in with Google, if you use it; the support mailbox;
- Apple: Sign in with Apple, if you use it.
We don’t sell data, don’t use it for advertising and don’t give it to anyone else, unless the law requires it.
Outside the European Union
Cloudflare, Google and Apple are US companies and may process data in the United States or elsewhere. Transfers take place with the safeguards set out in the GDPR: the European Commission’s adequacy decision for companies certified under the EU-US Data Privacy Framework, or the standard contractual clauses approved by the Commission.
Your rights
You can ask us to access your data, correct it, delete it, restrict its use and receive it in a readable format, and you can object to processing based on legitimate interest. You can withdraw your consent at any time, without affecting what was done before.
- In the app: Settings → Account → "Delete my account"; Settings → Privacy for photo reading and, without an account, the copy backed up online.
- For everything else: support@kanzencomix.app. We reply within one month.
If you think your data is not being handled properly, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of the country where you live.
Minimum age
The app is meant for people aged 14 or over. Younger users can use it with a parent’s permission, and the parent gives consent to reading photos online for them.
This website
kanzencomix.app uses no cookies, analytics or third-party services that track visitors, and asks for no data: there are no forms or sign-ups. Fonts are served by the site itself. Pages are hosted by Cloudflare, which processes the technical data of the connection, such as the IP address, to deliver them.
Changes
If the way we process data changes, we update this page and the date at the top.