Pip keeps your secrets 🤫

This is our privacy policy: first the friendly version, then the details. Effective July 14, 2026.

What we collect, and why

Grown-up account: your email address and a password. Sign-in is handled by AWS Cognito, so your password is never visible to us. Your email is used for the verification code and account recovery, nothing else.

Family PIN: stored scrambled (hashed). It protects settings, editing, and the book shop from curious young readers.

Reader profiles: a name (a nickname is perfect) and an avatar emoji. That's the whole list. We ask for nothing else about your kids, on purpose.

Reading data: the books you log (title, author, pages, ISBN, cover link), reading sessions (dates, pages, minutes), star ratings, and earned badges. This is your family's reading story, and it exists so you can look back on it.

What we never do

No advertising. No third-party analytics or trackers. No selling or sharing your data. No social features, followers, or leaderboards. No kid email addresses, ever. The kid experience never shows shopping links or leaves the app.

Kids and consent

Children use Chapterpillar through profiles inside a parent's account, and they never have credentials of their own. Creating the account and adding reader profiles is how a parent or guardian gives consent for this data to exist; deleting a profile (or the whole account) withdraws it, immediately and completely. We collect the minimum needed for the product to work. This is our approach to COPPA and GDPR-K by construction, not by checkbox.

Book covers and lookups

Book covers are loaded directly from Open Library (and its host, the Internet Archive) and Google Books. When a cover displays, those services see your device's network address, like any image on the web. Scanning a barcode or looking up an ISBN sends that ISBN to the same services to fetch title and author. We chose these sources because they're open, free, and require no account.

Book shopping links

Behind the grown-up PIN (and only there), Chapterpillar shows book recommendations with links to Amazon. As an Amazon Associate, Chapterpillar earns from qualifying purchases. Once you're on Amazon, Amazon's own privacy policy and cookies apply. Nothing about your family's reading is sent with the link beyond the book you clicked.

Where your data lives

On Amazon Web Services in the EU (Ireland region), encrypted at rest. There is no Chapterpillar office full of servers, and no employee dashboard browsing family data.

Like nearly every website, our servers keep standard access logs (which pages were requested, when, and from which network address). We use them to count visits and catch abuse, they involve no cookies and no third-party analytics services, and they are deleted after 90 days.

Your tools

In grown-up settings you can: export your family's complete data as a JSON file, delete a reader's profile and every book with it, or delete the entire account, which removes every trace, including your login. These aren't support tickets; they're buttons, and they work immediately.

Questions, requests, and complaints

If you have questions about our processing of personal data, or want to exercise any of your rights by email instead of the in-app buttons, contact us at gdpr@chapterpillar.com.

If you are dissatisfied with our processing of personal data, you can also send a complaint to your data protection authority. In Iceland, that is Persónuvernd (personuvernd.is).

Changes and contact

If this policy changes in a way that matters, we'll say so plainly on this page before it takes effect. General questions? hello@chapterpillar.com. A human reads it, and it may take up to 30 days to receive a response to your request.