Privacy Policy

Last updated: 21 October 2026

Readerhood is an app where creators run book clubs and readers join them. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and your rights.

Who we are

Readerhood is operated by Emmanouil Bampiolakis, a sole trader registered in Greece (tax number 147110430), Griva Digeni 2, 173 42 Athina, Greece ("Readerhood", "we"). We are the controller of your personal data. Contact: hello@readerhood.app.

What we collect

We also process technical data needed to run and secure the service: your IP address, device type, operating system and app version, and server logs of requests (for example sign-ins). Our hosting provider keeps these logs for up to 7 days.

Signing in with Google: we receive your name, email address and profile photo from Google. You can remove Readerhood's access in your Google account settings; you'll then need another way to sign in.

Surveys and interviews: if you choose to take part in a survey or a conversation about Readerhood, we use your answers to improve it.

We don't use advertising or cross-app tracking. To understand how Readerhood is used, we count things in our own database (for example how often a club's link is opened, without recording who opened it, how many people join, how many members start and finish the book, and readers' countries and languages) and look at them as totals per club or overall. We also note a few named actions you take in the app (for example sharing your reading, using search, or opening a notification we sent you) to see which features and notifications help; we never record the screens you visit, and we keep these notes for 12 months. The app uses no analytics or tracking tool; to fix problems, it sends crash reports that contain no personal data. Our website uses Cloudflare Web Analytics, which sets no cookies and doesn't follow you across sites.

Why we use it, and on what legal basis

• To provide Readerhood (your account, clubs, content, memberships, notifications about your clubs): performance of our contract with you.
• To keep Readerhood safe (moderation, reports, blocking, the banned-words filter, preventing abuse, security): our legitimate interests, and our duties under the EU Digital Services Act.
• To understand and improve Readerhood (totals per club and overall: link opens, joins, memberships, reading; readers' countries and languages; creators' platform and audience size): our legitimate interests in running and growing the service. We look at these as totals and never use them for advertising.
• To check new sign-ups: we refuse email addresses from temporary-email services, and the app may suggest a fix when an email provider looks mistyped: our legitimate interests in keeping accounts real and reachable.
• To send offers from your clubs, only if you turned this on in Settings: your consent, which you can withdraw anytime.
• Push notifications: only if you allow them on your phone; you can turn them off in your phone's settings.
• To keep records the law requires (for example payments, tax, and reporting creators' income under EU DAC7): legal obligation.
• No advertising profiles: we don't use your data for advertising or to build marketing profiles. Trending clubs are ranked by their number of followers, not by your activity.

Who can see what

• Your username and photo appear next to what you post, comment or write in chat, to people in that club.
• Your profile (reading now, Reading list, Read list, clubs in common) is visible only to people who share a club with you.
• A club's creator sees its members' usernames, status (subscriber or member) and dates. Creators don't see your email address.
• Members-only content is visible only to the club's paying members and its creator.
• People in a club also see your reactions and likes, your Reading or Finished badge for the club's current book, and that you're part of the club (the club's photo row shows a few members' photos, never their names).
• People who join a club later can read its earlier comments and chat history, as long as they last.
• The creator also sees who liked their posts, and how many members are reading or have finished the current book.
• When you report something, the person you reported isn't told who reported them.
• A creator's platform, profile link and follower count are seen only by that creator and Readerhood, never by members or visitors.
• Chat messages aren't end-to-end encrypted. They're encrypted in transit and stored securely, and they can be read by the club's creator (to moderate) and by Readerhood when something is reported or when needed for safety, security or the law.

Who we share it with

We use these providers to run Readerhood. They process data on our behalf, under data processing agreements:

• Book searches are sent to our server and to Hardcover, a book database, without your name or account.
• Videos in posts are played from YouTube or Vimeo; when you play one, they receive data under their own privacy policies.
• Creators' payout details: VAT numbers are checked with the European Commission's VIES service. Names and bank accounts go to our bank for the transfers, and payout records to our accountant and the Greek tax authority (AADE) for invoices, myDATA and DAC7, as the law requires.
• Our website is hosted and measured by Cloudflare (United States), without cookies.
• App ratings: after you finish a book, your phone may show Apple's or Google's own "Rate this app" prompt; your rating goes to them, and we don't learn who rated.
• Transfers outside the EU are protected by the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
• We don't sell your personal data. We share it with authorities only when the law requires.

If Readerhood is merged with or sold to another company, personal data may be transferred to it, under this policy; we'll tell you beforehand. When the law requires us to hand over data to an authority, we tell you first where the law allows.

How long we keep it

• Your account and content: until you delete your account.
• Deleting your account: it's deactivated at once. After a 14-day grace period, in which you can log back in to restore it, your account, profile, content, photos and reading data are permanently deleted. If you run a club, your club and its content are deleted with it, and its members are told in advance. See Delete your account.
• Notifications sent to you: 35 days.
• Notes from Readerhood about reports: 90 days after you've read them.
• Decided reports: 12 months.
• Payment and tax records: 10 years, as Greek and EU law require for financial records.
• Creators' payout details: while you're a creator; the records of payouts, statements and invoices are kept with the payment records.
• Crash reports: 30 days.
• Phone settings (region, language, time zone): until you delete your account.
• Notes of actions in the app (such as sharing or searching) and whether you opened our notifications: 12 months, or until you delete your account.
• Creators' platform, profile link and follower count: until the club is deleted.
• Our measurement totals: kept while Readerhood runs. When a club is deleted, its totals stay but lose its name, handle and its creator's profile link.
• Backups are kept for up to 7 days and then overwritten.

We may keep specific data longer when needed for an open complaint, a legal claim, or a request from an authority, and only for that purpose.

Your rights

You can ask us to access, correct, delete, restrict or export your personal data, and you can object to processing based on our legitimate interests. You can withdraw consent at any time. You can change your username and photo, and delete your account, in Settings; for anything else, write to hello@readerhood.app. We reply within one month, or tell you within that month if a complex request needs up to two more months. To protect your account, we may ask you to confirm it's you, for example by writing from your account's email address. If you turn off offers from your clubs, you'll still receive messages about your account and the service.

You can also complain to the Hellenic Data Protection Authority (www.dpa.gr) or the authority in your EU country.

Children

Readerhood is for people aged 16 and over. If we learn that someone under 16 has an account, we delete it.

Security

Data is encrypted in transit, stored in the EU, and protected by access rules so each person sees only what they're allowed to. Creators' tax IDs and bank accounts are also stored encrypted: the app only ever shows their last four characters, and only our payout process can read them in full. If a breach puts your data at risk, we'll tell you and the authorities as the law requires.

Changes

If we change this policy in an important way, we'll tell you in the app at least 30 days before the change applies. For people who sign up after a change, the new version applies at once.