Privacy

Privacy notice

Effective October 23, 2026 · Applies to chapterr.io and app.chapterr.io

Chapterr is a place for book clubs. It works because members trust it with what they read and what they say to each other. This notice explains, in plain English, what we store, what we never do with it, who helps us run the service, and how to take your data with you or remove it. Chapterr is in beta, so some details will change; when they do, we’ll update the date above and tell you in the app.

What we store

Your account

Your username, display name, email address and a securely hashed password. Optionally a profile photo and a short bio. We keep a record of the devices you’re signed in on so you can sign them out, and standard security logs (such as sign-in attempts and the IP address they came from) for a short time to protect your account.

Your clubs

The clubs you create or join, your role in each, the club’s name and description, its reading list, meetings, assignments, activities, genres, recommendations and invite links. Club data is visible to members of that club and to nobody else.

Your reading

The books on your shelves, their status (to be read, reading, finished, did not finish), dates and progress, your reviews, quotations, annual goals and private notes. Each item has a visibility you control: private (only you) or club (members of clubs you share). Books themselves are matched against public catalogues such as Open Library; we store the edition details we display.

Your messages

Club chat and direct messages are stored so that members can read them later. They are visible only to participants in that conversation. Messages are never public, cannot be turned into a share link, and are not used for anything other than showing them to the people in the conversation.

Imports

If you import a Goodreads export, we keep the uploaded file only as long as the import takes, and the import record for 30 days so you can review what came across. After that the file and record are deleted.

Share links. You can create a link to a single review, quotation or club reading list. Anyone with the link can see that item, and only that item, until you revoke the link or it expires. We never create share links on your behalf.

What we never do

  • We do not sell, rent or trade your data to anyone.
  • We do not show ads, and we do not let advertisers or data brokers see what you read.
  • We do not create public profiles. Your name and your reading are visible only to members of clubs you belong to, and only to the extent you choose.
  • We do not list clubs anywhere. People join only with an invite link or code from a club admin.
  • We do not read your messages, and we do not use them, or anything else you write, to train models.
  • We do not use third-party analytics or tracking cookies on the app. The only cookies are the ones that keep you signed in.

How we use your data

Only to run Chapterr: to sign you in, show your clubs and your shelf, deliver messages to the people they’re for, send you the emails you’ve asked for (verification, password resets and, if you opt in, club updates), and keep the service secure. We look at aggregate numbers, such as how many clubs exist, to run the service; we don’t study individual reading habits.

Who helps us run the service

Chapterr runs on a small number of providers, each of which processes data on our instructions:

  • Cloudflare hosts the app, stores the database and delivers realtime chat. Data is stored in Cloudflare’s infrastructure and protected in transit and at rest.
  • Resend sends our email (verification, password reset and optional club updates). Resend sees your email address and the contents of those emails.
  • Cloudflare Turnstile protects sign-up and sign-in from bots. It does not track you across sites.
  • Open Library, and optionally Google Books, provide book details and covers when you search. Your search terms are sent to them; your account is not.

We don’t share your data with anyone else, unless the law requires it.

How long we keep it

For as long as you have an account. Security logs and rate-limit records are kept for days, not months. Notifications are removed after 90 days. Expired share links, import files and deleted clubs are purged after 30 days.

Your choices

  • See and download your data. In Settings, you can download everything we hold about you at any time.
  • Delete your account. Also in Settings. This removes your account, your library, your reviews, quotations and notes, and your participation in clubs. Messages you sent in club chat remain visible to the club, attributed to a removed member, so conversations stay coherent; ask us if you’d like those removed too.
  • Delete a club. A club’s owner can delete it from the club’s settings. It disappears for everyone immediately and is purged after 30 days.
  • Ask us. If you’d rather we handle a deletion, or you have any question about your data, email support@chapterr.io and we’ll do it.

Children

Chapterr is not directed at children under 13, and we don’t knowingly keep accounts for them. If you believe a child has created an account, email us and we’ll remove it.

Changes

If we change this notice in a way that matters, we’ll tell you in the app and by email before the change takes effect. The current version always lives at chapterr.io/privacy.

Contact

Chapterr is operated from Texas, USA. For anything about privacy, write to support@chapterr.io.