Privacy Policy
Updated
Last updated: October 21, 2026
This Privacy Policy explains how Blue Office Inc. ("Blue Office", "we", "us") collects, uses and shares information when you use BookNotion (including the Z plan), the BookNotion iOS app, the BookNotion browser extensions and the websites booknotion.site and z.booknotion.site (together, the "Service").
Who we are. Blue Office Inc., 2F Ginza Otake Residence, 1-22-11 Ginza, Chuo-ku, Tokyo 104-0061, Japan. Contact: sho@booknotion.site. Blue Office is the controller of the personal data described here.
1. Information we collect
Information you give us
- Account information: your email address, name and profile photo (if you sign in with Google), and your password (stored only in hashed form by our authentication provider).
- Settings: language, time zone, Kindle store, reminder time and frequency, and notification email address.
- Notion connection: when you connect Notion, we store the access token Notion issues to BookNotion and the IDs of the workspace, pages and databases you choose. We use them only to write your books and highlights to the Notion pages you selected.
- Messages you send to support.
Your reading content
- Kindle: if you install the BookNotion browser extension, it periodically opens your Kindle notebook page (for example, read.amazon.com/notebook) using your existing Amazon sign-in in that browser, and sends us the list of your books (title, author, ASIN, cover image) and your highlights and notes (text, color, location). The extension does not read or send your Amazon password or cookies to us.
- Other sources you choose to save: highlights from web pages, X posts, PDFs and YouTube, and photos of book pages you submit for text recognition.
- BookNotion Web Marker (Chrome and Safari) for web highlights: when you select text on a web page and save it, the extension sends us the text you selected, a little of the text around it (to find the passage again), any note you add, and that page's URL, title, author, site name and image. To show your saved highlights when you come back, the extension keeps a list of IDs of pages you have saved from and checks the current page against it on your device; it asks our servers about a page only if you have saved from it. We do not collect your browsing history, and we never receive the URLs of pages you have not saved from. In Chrome, the extension uses your z.booknotion.site sign-in cookie to call our API and does not send the cookie's value anywhere else; in Safari, it uses a key issued to it by the BookNotion app instead.
Information collected automatically
- Device and app information, such as push notification tokens, app version and crash reports.
- Usage information, such as pages viewed and actions taken, through Google Analytics and Firebase Analytics.
- Your approximate country, derived from your IP address when you check out, to show prices in the right currency. We do not store your IP address for this purpose.
- How you found us: the campaign (UTM) parameters, referral link or partner code, referring site and landing page of your first and latest visits.
- Email interactions: whether our emails were delivered, opened or clicked, and your unsubscribe choices.
Payment information We do not receive or store your full card number. Payments are processed by Stripe (web) or Apple (in-app purchases). We receive your subscription status, plan, amount, currency and the payment provider's customer and subscription IDs.
2. How we use information
- To provide the Service: import your highlights, sync them to Notion, and send the highlight reminder emails and notifications you set up. (Legal basis: performance of our contract with you.)
- To process payments, free trials and referral rewards. (Contract; legal obligation for tax and accounting records.)
- To respond to your support requests. We may use an AI model to help draft replies; a member of our team reviews them before sending. (Contract; legitimate interests.)
- To send you service updates and announcements. You can unsubscribe at any time from the link in each email. (Legitimate interests, or consent where required.)
- To understand and improve the Service, measure which channels bring new users, and prevent fraud and abuse. (Legitimate interests.)
- To create aggregated statistics about books, as described in section 3. (Legitimate interests.)
We do not sell your personal information, and we do not use it for targeted advertising.
3. Aggregated reading statistics
We combine highlights across many users to produce statistics about books, such as how many readers highlighted a book and which passages are highlighted most often. We use these statistics in BookNotion's recommendations, on our book media site Yomunavi (yomunavi.com) and in our social media posts. We only publish statistics for books read by multiple users, and we never publish who highlighted what, your name or your notes. A passage from a book may be shown when it was highlighted by several different readers. We may use AI models to summarize these aggregated passages; we do not send your name, email or user ID with them.
4. How we share information
We share personal data only with service providers that process it on our behalf, and only as needed to run the Service:
| Provider | Purpose |
|---|---|
| Google (Firebase, Google Cloud, Google Analytics) | Hosting, database, authentication, notifications, analytics, text recognition |
| Vercel | Website hosting |
| Stripe and Link (Stripe's consumer service) | Web payments. For purchases in US dollars, Link is the reseller and merchant of record, and its own terms and privacy policy also apply |
| Apple and RevenueCat | In-app purchases and subscription management |
| Twilio SendGrid | Sending email |
| Notion | Writing your highlights to your Notion workspace, at your direction |
| Rewardful | Referral program tracking |
| OpenRouter and the AI model providers it routes to (such as Anthropic) | Drafting support replies; summarizing aggregated passages (section 3) |
| Slack | Internal notification of support requests |
We may also disclose information if required by law, to protect the rights and safety of our users or others, or in connection with a merger or acquisition (in which case we will notify you).
5. International transfers
Blue Office is based in Japan. Our main database is hosted by Google in the United States, and other providers may process data in other countries. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on adequacy decisions (Japan has one) or on standard contractual clauses offered by our providers.
6. How long we keep information
We keep your account information and reading content while your account is active. Deleting your account in the app or on z.booknotion.site closes your account and removes your sign-in. To have your books, highlights, settings and other data erased as well, email sho@booknotion.site from the email address of your account; we will erase them within 30 days. We keep records we must keep by law (such as payment and tax records, generally kept for 7 years in Japan), and backups expire on a rolling basis. Aggregated statistics that cannot identify you may be kept. Data in your own Notion workspace is controlled by you and is not deleted by us.
7. Your choices and rights
- You can change your settings, disconnect Notion and unsubscribe from emails at any time.
- You can delete your account from the account settings in the app or on z.booknotion.site. To also erase your books and highlights, email us (see section 6).
- You can export your highlights to Notion at any time. You can also email us to request a copy of your data.
- Depending on where you live (for example, in the EEA, the UK, California or Brazil), you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise these rights, email sho@booknotion.site. We will respond within the time required by law. You also have the right to complain to your local data protection authority.
8. Cookies and similar technologies
We use cookies and local storage to keep you signed in, remember your language, remember a referral link or partner code (up to 1 year), and record how you found us (up to 180 days). We also use Google Analytics and Rewardful cookies. You can block or delete cookies in your browser settings; some features, such as signing in, may not work without them.
9. Security
We use encryption in transit, access controls and the security measures of our providers. No method of transmission or storage is completely secure.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from them.
11. Changes to this policy
We may update this policy. If we make material changes, we will notify you by email or in the Service before they take effect.
12. Contact
Blue Office Inc., 2F Ginza Otake Residence, 1-22-11 Ginza, Chuo-ku, Tokyo 104-0061, Japan — sho@booknotion.site