Effective Date: May 15, 2026 Last Updated: May 15, 2026
The Last Page (“we,” “us,” or “our”) is a mobile application that helps you preserve the closing words of every book you finish. You take a photograph of the last page, the app identifies the book, and you write down the final sentence that mattered. Your library of endings builds itself, ending by ending.
We take privacy seriously, and this app was designed around a single principle: the words and feelings you write down for each book are sacred and never leave your device. This Privacy Policy explains exactly what data is processed, where it lives, what is and is not sent off your device, and what rights you have over it.
If you have questions or concerns, contact us at: cankatsarac@gmail.com
| Data | Purpose | Storage |
|---|---|---|
| Final sentence you save for each book | The core experience — your private record of the words that mattered | On-device only |
| Feeling / note you save for each book | Your private reflection on the ending | On-device only |
| Photograph of the last page of each book | Visual record, plus single-use input to the book identification service (see Section 4.1) | On-device only (a temporary copy is sent for identification — see 4.1) |
| Book metadata (title, author, cover, Open Library identifier) | Build your shelf, display book covers | On-device only |
| Finished-at timestamp for each ending | Order your shelf chronologically | On-device only |
| App preferences and onboarding state | Personalization and navigation | On-device only |
| Notification opt-in flag | Decide whether to schedule the biweekly local reminder | On-device only |
| Premium subscription status | Feature gating (managed by RevenueCat — see Section 4.2) | On-device cache; on RevenueCat for entitlement record |
All of the personal content described in Section 1.1 — your sentences, your feelings, the photographs of your last pages, your book list, and your settings — is stored exclusively on your device using local storage (AsyncStorage on iOS and Android). It is never transmitted to our servers (we do not run any), never uploaded to the cloud, and never synchronized across devices.
This architecture means:
The only exceptions, both narrow, are described in Sections 4.1 (book identification) and 4.2 (subscription processing).
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process data under the following legal bases:
| Data Category | Legal Basis |
|---|---|
| Sentences, feelings, photos stored on your device | You act as the sole data subject and sole controller of this data on your own device. We do not process it. |
| Book identification request (photo sent once for AI identification) | Performance of a contract / your explicit request (Article 6(1)(b) GDPR) — necessary to provide the identification feature you triggered |
| Open Library metadata queries | Legitimate interest (Article 6(1)(f) GDPR) — providing the book lookup you requested, with no personal data transmitted |
| Premium subscription | Performance of a contract (Article 6(1)(b) GDPR) — required to deliver the subscription you purchased |
The Last Page deliberately keeps third-party processing to the minimum needed to deliver the features you trigger. The third parties below are the only ones who ever receive any data related to your use of the app.
When you take or pick a photograph of the last page of a book, the app sends only that photograph to an AI vision model (currently Google Gemini 2.5 Flash, accessed through the Rork Toolkit hosted endpoint) for the sole purpose of identifying the book’s title and author. The model is invoked once per book and is given a strict instruction to return only {title, author, confidence} as JSON.
What is sent:
What is NEVER sent:
The response (title, author, confidence) is used only to look up canonical metadata in Open Library and is then discarded.
Note: As with any HTTP request, the underlying network connection exposes your IP address to the receiving server. We do not control how the upstream model provider handles transient inference data; you should treat their policies as the authoritative reference for how the photograph is processed once it arrives:
If you do not wish to send any photograph to an AI service, you may identify books manually via title search instead of using the camera capture flow.
The Last Page uses RevenueCat to manage in-app subscriptions and entitlements. When you start a free trial or purchase a premium subscription, RevenueCat processes:
RevenueCat does not receive any of your sentences, feelings, photographs, book list, or any other in-app content.
RevenueCat Privacy Policy: https://www.revenuecat.com/privacy
The Last Page queries the public Open Library search API at openlibrary.org to retrieve canonical book metadata (title, author, cover image, work identifier). Queries contain only the search terms (a title, an author, or an ISBN) — never your sentence, feeling, photograph, or any account-style identifier.
As with any web request, your IP address is visible to Open Library’s servers. Open Library is operated by the Internet Archive: https://archive.org/about/terms.php.
Your in-app purchases, subscription renewals, restoration, and refunds are processed by Apple or Google according to your platform. Their privacy policies govern this processing:
We do not use:
The Last Page requests only the permissions strictly required to deliver the features you trigger.
| Permission | When Requested | Why |
|---|---|---|
| Camera | When you choose to capture a last page in the app | To take the photograph of the last page used for book identification (Section 4.1) and visual record |
| Photo Library | When you choose to pick an existing photo of a last page | So you can select a photograph you have already taken |
| Notifications | When you opt in to the biweekly reminder | To deliver a single local “did a book end this week?” nudge every 14 days |
All three are optional. The app remains usable for manually entered endings and book lookups without granting camera, photo library, or notification access.
Photographs taken or selected through the app are stored on your device. A copy is transmitted only once, only for the identification step described in Section 4.1.
The Last Page sends only local notifications. There are no push notifications. There is no push token. We do not run a notification server.
If you opt in, the app schedules a single biweekly reminder (“Did a book end this week?”) using the device’s local notification scheduler. The schedule is re-armed on the device. No notification content, identifier, or scheduling metadata is transmitted to us or any third party.
You can disable the nudge at any time from the app’s settings, or from your operating system’s notification settings.
The Last Page is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13.
For users in the European Economic Area, the minimum age is 16 unless verifiable parental consent has been obtained, in line with Article 8 GDPR and applicable national digital-age-of-consent rules.
If you are a parent or guardian and believe your child has used the app, please contact us at cankatsarac@gmail.com. Because all in-app content is local to the device, you can permanently delete it by uninstalling the app or by using the in-app delete option.
You have the right to:
California residents have the right to:
To exercise CCPA rights, contact: cankatsarac@gmail.com
Although your library never leaves your device, we still take reasonable steps to promote data security:
The security of your device, lock screen, and any cloud backup you enable through iOS or Android is your responsibility. We recommend enabling device-level encryption and a strong passcode. If you enable iCloud or Google Drive device backups, photographs and AsyncStorage data may be included in those backups, governed by Apple’s or Google’s privacy terms — not ours.
Because all in-app content is stored locally on your device, you control retention entirely:
We do not retain any copies of your library on our servers.
Identification requests (Section 4.1) are transient and not retained by us. We do not control how the upstream model provider handles transient inference data; refer to their terms.
RevenueCat subscription records are retained for as long as necessary to provide subscription services and comply with Apple/Google billing requirements.
Because your sentences, feelings, photographs, and book list do not leave your device, there are no international transfers of that data.
When the identification request, Open Library lookup, or subscription event is processed, the receiving service may operate servers in jurisdictions outside your country of residence (typically the United States and the European Union). Those transfers are governed by the receiving service’s privacy terms and their own compliance with applicable data transfer mechanisms (including EU Standard Contractual Clauses where applicable).
We may update this Privacy Policy from time to time. Material changes will be communicated via an in-app notice on the app’s next launch after the change. The “Last Updated” date at the top will reflect the most recent revision.
Continued use of The Last Page after a policy update constitutes acceptance of the updated policy. If you do not accept material changes, you should discontinue use and uninstall the app, which will delete all of your data.
For any privacy-related questions, requests, or concerns:
Email: cankatsarac@gmail.com Developer: Cankat Saraç
We will respond to all verified requests within 30 days.
This Privacy Policy applies to The Last Page mobile application available on the Apple App Store and Google Play Store.