Privacy Policy
MediaShelf is built on a simple principle: your personal library data belongs to you. Everything you add — your books, notes, and cover images — is stored on your device and never transmitted to us.
The sections below explain in full what data is collected, by whom, and why. If you have questions, email us at hello@mediashelfapp.com.
01 — Overview
Who we are
MediaShelf is developed and operated by Minimal Cloud, based in Calgary, Alberta, Canada. References to "we", "us", or "our" in this policy refer to Minimal Cloud.
This policy applies to the MediaShelf iOS application and the supporting API infrastructure at mediashelfapp.com. It does not apply to third-party websites or services that MediaShelf links to.
02 — Your Library Data
Data stored on your device
All personal library data is stored locally on your iPhone using Apple's SwiftData framework. This includes:
- Physical media items — across Print, Music, Video, and Games — that you add to your Library or Wishlist
- Titles, authors, publishers, ISBNs, and other metadata
- Personal notes you write for any item
- Custom cover images you choose from your photo library
- Library and Wishlist organisation, including named libraries you create
- Your app preferences (theme, library display density, wishlist settings)
None of this data is transmitted to our servers, stored in the cloud, or accessible to us. Deleting the app from your device permanently deletes all of this data.
iCloud Backup (optional): If you enable iCloud Backup in Settings → Data, your library data is stored in a location iOS includes in iCloud backups. This data is encrypted by Apple and managed entirely through your iCloud account. We do not have access to it.
JSON Export (optional): You can export your library data as a JSON file at any time from Settings → Data. This file is delivered directly to you and is not transmitted to us or any third party.
03 — Barcode Scanning
Camera access
MediaShelf requests access to your device camera solely to scan barcodes and ISBN codes. The camera feed is processed entirely on your device using Apple's AVFoundation framework. No images or video frames are captured, stored, or transmitted. Camera access is only active while the Scan tab is open and you have not dismissed it.
You can revoke camera permission at any time in iOS Settings → Privacy & Security → Camera → MediaShelf. Manual barcode entry remains available if you revoke camera access.
04 — Photo Library
Photo access
MediaShelf requests access to your photo library only when you choose to replace a cover image while editing an item. The selected image is saved to your device's local app storage. No photos are uploaded or transmitted. Photo library access is requested on-demand and only when you explicitly tap the cover image in edit mode.
You can revoke photo library permission at any time in iOS Settings → Privacy & Security → Photos → MediaShelf.
05 — API Requests
Outbound data requests
When you scan a barcode, MediaShelf sends the barcode number to third-party lookup services to retrieve metadata. The barcode number is the only data transmitted. No personal identifiers, device identifiers, or account information are included in these requests.
When you add an item manually and ask MediaShelf to look up its details, the title you typed (and a category derived from the media format you selected) is sent to UPC Item DB to find a matching product. Only the title and format category are transmitted — no personal identifiers, device identifiers, or account information. This lookup happens only when you choose to add an item manually; if you decline the suggested match, nothing further is sent.
When you view the Discover section, MediaShelf fetches book data from our API proxy at mediashelfapp.com. These requests include standard HTTP metadata (IP address, device type, iOS version) that is processed transiently by Cloudflare and is not logged or stored by us.
Third-party services contacted during normal app use:
- Open Library (Internet Archive) Book metadata and cover art lookup by ISBN. Privacy info
- UPC Item DB Product data for non-book barcodes, and title-based lookups when you add an item manually. Privacy info
- The New York Times Bestseller and new release lists, via our API proxy. Privacy info
- Cloudflare Workers API proxy and caching layer for book discovery data. Privacy info
- Amazon Wishlist "View on Amazon" links open Amazon in your browser. No data is transmitted to Amazon by MediaShelf; Amazon's own privacy policy applies once you navigate to their site. Privacy info
06 — Amazon Affiliate Links
Wishlist & View on Amazon
The Wishlist feature includes a "View on Amazon" button that opens Amazon in your device's browser. MediaShelf constructs these links using your device's region setting to direct you to the appropriate Amazon storefront (for example, amazon.ca for Canadian users).
These links may include an Amazon Associates affiliate tag. If you make a purchase after following a View on Amazon link, MediaShelf may earn a small commission from Amazon at no additional cost to you. This is disclosed in accordance with the Amazon Associates Program Operating Agreement and applicable advertising disclosure regulations.
MediaShelf does not transmit any personal data to Amazon. Once you tap a link and your browser opens Amazon's website, Amazon's own privacy policy governs the interaction. Amazon may set cookies and collect data as described in their Privacy Notice.
You can disable the View on Amazon button entirely in Settings → Wishlist.
Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or its affiliates.
07 — Advertising
Google AdMob
The Discover section of MediaShelf displays advertisements served by Google AdMob. By using the Discover section, you may be subject to Google's data collection practices for ad serving purposes.
AdMob may collect and use the following for ad personalization:
- Advertising identifier (IDFA), subject to your App Tracking Transparency (ATT) consent choice
- Device type, operating system version, and language settings
- Coarse location (country/region level, derived from IP address)
- Ad interaction data (impressions, taps)
Before AdMob collects your advertising identifier, MediaShelf will present Apple's App Tracking Transparency prompt. You can decline tracking and ads will still be shown, but they will not be personalized. You can change your ATT choice at any time in iOS Settings → Privacy & Security → Tracking.
Google's data practices are governed by the Google Privacy Policy. You can opt out of personalized advertising via Google Ad Settings.
08 — Analytics & Crash Reporting
Diagnostics
MediaShelf does not use any third-party analytics SDK. We do not track how you use the app, which features you access, or how long sessions last.
If you have opted into Apple's diagnostic data sharing in iOS Settings, Apple may share anonymized crash reports with us through App Store Connect. This data is aggregated, contains no personal information, and is used solely to identify and fix software bugs. You can manage this in iOS Settings → Privacy & Security → Analytics & Improvements.
09 — Children's Privacy
Children under 13
MediaShelf is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information through the app, please contact us at hello@mediashelfapp.com and we will take appropriate steps.
Note that Google AdMob's data collection policies apply to the Discover section. If you are using MediaShelf with or for a child, we recommend avoiding the Discover section or ensuring appropriate parental controls are in place.
10 — Your Rights
Data rights & residency
Because MediaShelf does not collect or store your personal library data, most traditional data rights (access, correction, deletion, portability) are exercised directly on your device by managing or deleting the app.
For data processed by third-party services (Google AdMob in particular), your rights are exercised through those services directly. Relevant links are provided in the Advertising section above.
MediaShelf is operated from Canada and is subject to Canadian federal privacy law (PIPEDA) and Alberta's Personal Information Protection Act (PIPA). If you are located in the European Economic Area, the United Kingdom, or California, additional rights may apply to data processed by third-party SDKs integrated into the app. Please contact us if you have questions about your specific jurisdiction.
11 — Policy Changes
Updates to this policy
We may update this Privacy Policy from time to time, particularly as new features are added to MediaShelf. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes — such as the addition of new third-party data processors — we will provide notice within the app.
Continued use of MediaShelf after a policy update constitutes acceptance of the revised policy.
12 — Contact
Get in touch
If you have questions, concerns, or requests regarding this Privacy Policy or the data practices described herein, please contact us: