Last updated: October 20, 2026
Tassel is a book club app for reading together with friends. We only process the data needed to make the app work; we show no ads, we do not sell your data, and we do not track you across other apps.
Data controller: [Company / person name]. Contact: destek@virgul.example.
Account: your email address, your name and, if you sign in with Google or Apple, the basic profile information those providers share with us. Your password is stored only in hashed form.
Club content: the clubs you join, your reading progress (page number, pages read per day), your discussion posts, your likes, your personal notes/quotes/questions, your meeting RSVPs, and your suggestions and votes in polls.
Join requests: when you ask to join an approval-only club with an invite code, your name and the time of your request are shown to that club's admins; once a decision is made, the request is kept together with its outcome.
Meeting content: shared notes you add to meetings, photos you upload, and the online meeting link and password added by an admin. Photos contain only the image you choose; the app does not otherwise access your photo library.
Book search: when you search for a book, the search term you type is sent to the service that provides book information (Open Library; Google Books if configured). No other personal data is sent.
Location: the app does not read your location. "Get directions" only passes the text of the meeting place to your maps app.
Club city and discovery: a club admin may optionally set the club's city and list the club in the public discovery directory. A listed club's name, description, logo, tags, city and member count are visible to all users of the app; the member list is not. Inappropriate clubs can be removed from discovery following user reports. Promotion is a paid service; payment is collected through the store (Google Play / App Store) and refunds are subject to the store's rules.
Profile photo: you may optionally upload your own photo or pick one of the built-in avatars. Your photo is scaled down to 512×512 px and shown only to users who share a club with you; the file address contains an unguessable identifier. You can remove it at any time; it is deleted when you delete your account.
Push notifications: if you turn notifications on, your device notification token (through Google Firebase Cloud Messaging / the Apple notification service) and your language are stored. A notification only says who did what in which club; comment or note text is never included. You can turn notifications off on the Account screen; your device token is deleted when you sign out.
To manage your account, to provide discussion, notes, meetings, photos and polls to the people in your club, to show your reading progress and library, and to prevent abuse (reports, blocking). Legal bases: performance of a contract and legitimate interests; your consent for processing that requires consent.
Your discussion posts and the notes you mark "Shared with club" are visible only to members of the same club; notes marked "Only me" and "Ask at the meeting" are visible only to you. Spoiler protection is enforced on the server: content for pages you have not read yet is not sent to your device.
Your reading progress is visible to club members (to compute the group average).
Meeting notes, photos and the online meeting link/password are visible only to members of that club and to no one outside it. The meeting password is not included in notification text and is shown only inside the app. You can report an inappropriate photo and block a user.
Data is stored and processed over encrypted connections on our infrastructure provider, Supabase. Information about the server region and any transfer of data abroad will be added here at launch: [server region].
We keep your data for as long as your account is open. You can permanently delete your account at any time from within the app (Account > Delete account); your personal data, posts, notes, uploaded photos and progress records are deleted. If you own a club that has other members, its management is handed over to an admin/member; if you are its only member, the club is deleted as well.
Under applicable data protection law (including KVKK for users in Türkiye, and GDPR for users in the EEA/UK), you may have the right to access, correct and delete your data, to object to its processing, and to data portability. You can send your requests to destek@virgul.example.
Tassel is not directed at children under 13. If we learn that a user is under 13, we will delete the account.
If we update this policy, we will publish the new version in the app and will notify you separately of material changes.