Privacy Policy

Your data, plainly explained.

Last updated: April 18, 2026

Who we are

Honor Library is a mobile app operated by V2C Inc, a US 501(c)(3) nonprofit (EIN 33-3915449), doing business as v2c.org. We can be reached at contact@honorlibrary.org.

What we collect

We collect only what's needed to make the app work:

  • Phone number, used as your account identifier and to send you a one-time verification code at sign-in.
  • Display name and (optional) location, shown to friends in your circle.
  • Profile photo, if you upload one. Stored on Cloudflare R2.
  • Books in your library (title, author, ISBN, cover, your sharing status). Visible to friends in your circle.
  • Cryptographic hashes of your phone contacts (HMAC-SHA-256, server-side secret), used only to find friends who already use Honor Library. Plain phone numbers are never stored on our servers.
  • Push notification token from OneSignal, used only to send notifications related to your activity.
  • Crash and error reports, via Sentry, with no personal content beyond your account ID.

What we do not collect

  • We do not collect your contact list itself, only hashes.
  • We do not track your location (beyond the city/region you type yourself).
  • We do not collect device ad identifiers.
  • We do not sell or rent your data to anyone.
  • We do not run advertising.

SMS and WhatsApp verification

When you enter your phone number on the sign-in screen, tick the consent checkbox confirming you accept these terms, and tap "Continue", we send a single one-time six-digit verification code to your phone. WhatsApp is the default channel; you can switch to SMS on the next screen. This is the only verification message you will ever receive from Honor Library. We do not send marketing, promotional, or follow-up messages of any kind. Message and data rates from your carrier may apply for SMS. To stop receiving any future messages, simply do not request a code, or delete your account from the in-app Settings screen. Full opt-in details are documented at honorlibrary.org/sms-consent.

SMS and WhatsApp delivery is operated by Twilio Inc on our behalf. Your phone number is shared with Twilio for the sole purpose of sending the verification code.

How we share data

We share data only with the service providers needed to operate the app:

  • Supabase - hosts our database and handles authentication.
  • Twilio - sends sign-in verification SMS.
  • OneSignal - sends push notifications.
  • Cloudflare - hosts our website and book cover images.
  • Sentry - receives crash and error reports.
  • Public book metadata APIs - queried with the ISBN of any book you scan, to look up title, author, and cover information. No personal information is ever sent to these services.
  • Anthropic - if you use the optional cover-photo lookup, your photo is sent to Anthropic for OCR. The image is not retained.

We will share data with law enforcement only when legally compelled to do so.

Friends and circle visibility

Other people in your circle can see your name, optional location, optional profile photo, and the books in your library along with your sharing status. People outside your circle cannot see any of this. We do not surface your data publicly anywhere.

Children

Honor Library is intended for users 13 years of age or older. We do not knowingly collect data from anyone under 13. If you believe a child has created an account, contact us and we will delete it.

Your rights

You can:

  • See and edit your profile, books, and circle from inside the app at any time.
  • Delete your account from Settings. This permanently removes your profile, books, contact hashes, devices, and audit log entries from our database within 24 hours.
  • Email contact@honorlibrary.org to request an export of your data.
  • If you are in the EU, UK, California, or another jurisdiction with data-protection rules, you have additional rights under GDPR, UK GDPR, CCPA, and similar laws. Email us to exercise them.

Security

All data travels over HTTPS/TLS. Phone contact matching uses HMAC-SHA-256 with a server-side secret so plain phone numbers never leave your device unhashed. Sessions are stored in your device's secure storage (iOS Keychain / Android Keystore). We do our best, but no system is perfectly secure - if you discover a vulnerability, please email us before disclosing publicly.

Changes to this policy

When we change this policy in a way that affects you, we will update the "Last updated" date at the top and, for significant changes, notify you in the app. Continued use after a change means you accept the updated policy.

Contact

Questions about anything on this page: contact@honorlibrary.org.