Privacy Policy
dnf · Last updated 22 August 2026
dnf is a reading log. You record what you are reading, what you finished, what you put down and why, and — if you choose to — you say so in public. This policy explains exactly what that means for your data.
dnf contains no analytics, no advertising, and no third-party tracking of any kind. There is no SDK in the app that reports your behaviour to anyone.
What we hold
| Data | Why |
|---|---|
| Email address | To create your account and let you sign back in. |
| Profile — display name, handle, bio, photo, banner, website and social handles | These are your public page. Everything here is visible to anyone using the app. |
| Reading — books on your shelves, their status, ratings, reviews, the reason you put a book down, pages read, reading sessions and goals | The purpose of the app. Your shelves and reviews are public; your session timings are used to produce your own statistics. |
| Posts — takes, replies, likes and lists | Public, by definition. |
| Follows and blocks | To build your feed and to keep blocked readers out of it. A block is never disclosed to the person blocked. |
| Reports you file | To review content and act on it. |
| Push token | An anonymous device address, so a like, a reply or a new follower can reach you. It identifies a device, not a person, and it is deleted when you sign out. |
We do not collect your location, your contacts, your photo library beyond the single picture you choose, your advertising identifier, or any usage or diagnostic telemetry.
Who else sees it
Three services, and no others:
- Supabase hosts the database and handles sign-in. Your data is stored there on our behalf.
- Expo delivers push notifications. It receives the notification's text and the device address, nothing else.
- Open Library supplies book information and cover images. Your device requests covers directly, so Open Library sees your IP address in the ordinary way any website does. It is not told who you are.
We do not sell your data, and we do not share it for advertising. Ever.
What is public
Your profile, your shelves, your ratings, your reviews, your lists and your posts are visible to anyone using dnf. Your email address, your push token and the accounts you have blocked are never shown to anyone.
Deleting your account
Settings → Account → Delete account. Your profile, shelves, reviews, posts, follows and devices are erased immediately and permanently. There is no waiting period and nothing to email us about.
Backups are retained by our hosting provider for a short period for disaster recovery and are overwritten in the ordinary course.
Your rights
If you are in the UK, EU or EEA, you have the right to access, correct, export or erase your personal data, and to object to processing. Most of these you can exercise yourself inside the app; for anything else, write to us and we will answer within 30 days.
Our legal basis for processing is the performance of our contract with you (running the service you signed up for) and, for keeping the service safe, our legitimate interests.
Children
dnf is not directed at children under 13, and we do not knowingly hold data about them. If you believe a child has created an account, write to us and it will be removed.
Changes
If this policy changes in a way that matters, we will say so in the app before it takes effect.
Contact
Write to hello@getdnf.com.