Privacy

Sayfa is a reading log. It knows what you tell it about your reading, and it keeps that to itself.

Last updated: 21 September 2026 · Türkçe

The short version

• Without an account, everything you log stays on your iPhone. We never see it.
• With an account, your books and log entries are stored on our servers so they can be backed up and synced. Nothing else is.
• No ads, no analytics, no tracking, no selling or sharing of data. There are no third-party SDKs in the app that collect anything.
• You can export your log as a CSV and delete your account, both from inside the app, at any time.

Who is responsible

Sayfa is published by Aykut Bal, Ankara, Türkiye, who is the data controller for the purposes of the GDPR and Türkiye’s KVKK. Contact: hello@getsayfa.com.

What stays on your phone

• Your books, log entries, daily goal, reminder time and streaks, unless you create an account.
• Reminders are local notifications scheduled by your phone. We do not send push notifications and have no way to.
• The camera is used only to read a barcode, on the device. No photo or video is stored or sent anywhere.

What leaves your phone

• Looking up a book. When you scan a barcode, the ISBN is sent to Open Library (Internet Archive) and, if needed, Google Books, to fetch the title, author and page count. They receive the ISBN and, as with any web request, your IP address. They are not told who you are and nothing else about your reading is sent. Entering a book by hand sends nothing.
• An account, if you create one. Your email address; your name if you give one or if Apple shares it; a password, which is stored only as a salted hash we cannot read; and your books and log entries. With Sign in with Apple you can hide your email address, in which case we only see Apple’s relay address.
• Emails you ask for. The six-digit sign-up code and password-reset links are sent to your address through our email provider.

Where account data is kept

Account data is hosted by Supabase, in a data centre in the European Union (Frankfurt, Germany). Emails are delivered by our transactional email provider. Both act as processors on our instructions and may not use your data for anything else. Data in transit is encrypted with TLS; data at rest is encrypted by the host. Every row in the database is protected so that only the signed-in owner can read or change it.

Why we process it, and for how long

To provide the backup and sync you asked for (performance of a contract) and nothing else. We keep account data until you delete your account. Deletion removes your account and all synced data from the live database immediately; residual copies in backups are overwritten within thirty days. If you used Sign in with Apple, deleting your account also revokes Sayfa’s access with Apple. The copy on your phone is yours and stays until you delete the app.

Your rights

You can see and correct your data in the app, export it (Settings → Account → Export my data), and delete it (Settings → Account → Delete account). Under the GDPR and KVKK you also have the right to ask what we hold, to object, and to complain to your data protection authority (in Türkiye, the KVKK Kurumu). Write to hello@getsayfa.com and a person will answer.

Children

Sayfa has nothing unsuitable for children and works fully without an account. Accounts are intended for people aged 13 and over.

Changes

If this policy changes in a way that matters, the app will say so before the change takes effect. The date at the top always shows the latest revision.