Privacy notice

Last updated: September 2026 · Effective September 2026 · Notice under Türkiye’s Personal Data Protection Law No. 6698 (KVKK)

Data controller

Readers is a Consentimus product: you pick books you’ve read, answer a question or two per book, and compare answers with someone else. The data controller is Nordera Works Teknoloji ve Danışmanlık A.Ş. · Metrocity, Esentepe, Şişli, Istanbul, Türkiye. Privacy and data requests: hello@aynisayfa.app · Abuse and safety reports: safety@aynisayfa.app

What we hold, why, and on what basis

• Name or nickname, avatar choice, your book list and your answers — to build your reader card and work out the match with the person you invite (performance of the contract, KVKK art. 5/2-c). A nickname is fine; a real name is not required.
• Year of birth — to keep the service to adults, 18 and over (legitimate interest and legal obligation). The age derived from it is shown on your reader card, in the invite link preview (the card that WhatsApp, Instagram and similar apps show before the link is opened) and in notification emails.
• Profile photo (optional) — processed with your explicit consent if you upload one; shown on your reader card and in Open shelves. Remove it any time with “Remove”, or permanently with “Delete my data”. You don’t need one — everything works with a drawn avatar.
• City (optional) — to rank nearby readers first. Entirely up to you (explicit consent). If you enter one, it is shown on your reader card, in the invite link preview and in notification emails.
• Your gender and who you’re looking for (optional) — used as a matching preference, only with your explicit consent. Because this can count as special-category data about sexual life, it is handled with care: never shown to other users, used only to filter the pool. You can leave it blank (“Everyone”) and use the app normally.
• Email address and account — an account is required to see your card; sign-in goes through our sign-in provider Clerk (Google or an email code). Your email address is used to sync your account and send notification emails. We never see your password; notifications can be switched off in the “Me” tab.
• Sign-in trace — when you sign in we keep your account id and how far you got in the app (books, questions, card) for up to 1 year, so that we can send at most one reminder if you never made a card (legitimate interest, art. 5/2-f).
• Answers to your invite — when someone answers your invite, the name they give and their match score are stored on your card’s record for up to 180 days; the person who answered can ask for removal by email.
• Mail log — the subject, masked recipient address and delivery status of each notification are kept for 30 days to debug delivery problems.
• Your messages — delivered only to the person you mutually matched with (performance of the contract). Not shown to anyone else; reviewed by our team only when there is a report or a reasonable suspicion of abuse, to keep the service safe (legitimate interest, art. 5/2-f).
• Two of us and The table answers — the name you give and the options you pick when you set or join a room are used only to draw that room’s map. Once stored, room answers are visible to anyone who has the room link; links are unguessable, and room records are deleted automatically 30 days after the last person joins.
• Weekly Footnote poll — added to anonymous totals only; your answer is never shown to others linked to you.
• Readers waiting list — your email, held for that single purpose. Removed on request.
• IP address — used in short-lived rate-limit counters to stop spam, harassment and fake votes (legitimate interest, art. 5/2-f). Not stored against your profile.
• Reports — when you report a profile, your IP address is stored with its last octet removed (masked) for 90 days. A profile reported by three different people is hidden from Open shelves.
• Usage statistics — daily totals (visits, cards, matches). Not linked to you; no cookies.

Open shelves

If you choose to be visible in Open shelves, other readers see your name, age, city, your books and your reader card. On the questions you share, your answers are shown together with the match percentage only to the other reader — on invite results and on Open shelves cards alike; they are shown to no one else. You can switch visibility off at any time.

International transfers

Our servers and service providers are outside Türkiye; your data is stored on their systems (based on your explicit consent, KVKK art. 9): Vercel (hosting), Upstash (database), Clerk (sign-in — only if you create an account), Resend (email — only when a notification is needed), Anthropic (question and archetype generation — receives only book titles, the four axis scores derived from your answers and the base archetype name; never your name, age, city, photo or email), Open Library (book covers — loaded directly by your browser). You can withdraw consent at any time by deleting your data.

Retention

• Profile and answers: deleted automatically 180 days after your card was created or last edited.
• “Delete my data” removes your profile, answers, photo, Open shelves visibility, matches, nods, notes and messages — on both sides — immediately. Your sign-in account itself stays with the sign-in provider until you ask us to remove it by email. One exception: limited records that are the subject of a report may be kept for up to 90 days to handle legal claims and protect other users (legitimate interest).
• Messages: the last 200 lines per pair are kept; report logs and statistics counters are deleted within 90 days, the mail log within 30 days.
• Two of us and The table rooms: deleted 30 days after the last person joins.
• Waiting list: kept until you ask to be removed or until we close the list.

What we don’t collect

No location, no contacts, no photo library, no cookie-based ad tracking. Adding books from a photo of your shelf never sends the photo off your device — the reading happens in your browser. We use no advertising or tracking cookies; your browser’s local storage is used only to remember your own card on your own device. Our sign-in provider Clerk sets strictly necessary session cookies to keep you signed in — these are not for advertising or tracking.

Third-party resources loaded by your browser

When a page opens, your browser connects directly to: Google Fonts (typefaces), jsDelivr / cdnjs (the Clerk sign-in script and tesseract.js for on-device book recognition), Open Library (book covers). Clerk and Google One Tap load on first visit; a Clerk client cookie and a Google frame may be set before you sign in. These providers see your browser’s IP address.

Your rights (KVKK art. 11)

You can access your data, correct it, delete it, object to its processing, and ask which third parties it has been transferred to. Delete it yourself with “Delete my data” in the app, or write to hello@aynisayfa.app. We answer within 15 days.

If you are in the EU/UK or California

The same rights — access, correction, deletion, objection, and data portability where it applies — are honored under the GDPR, the UK GDPR and the CCPA. Send requests to the same address: hello@aynisayfa.app. We do not sell your personal data.

Changes

This notice may be updated; material changes are announced in the app. See also the Terms of use.

← back to Readers