Privacy Policy

Effective date: 29.08.2026
Data controller: Code2B
Contact: inside the app, Profil → Geri bildirim (Profile → Feedback)

1. In short

Story Circle is an app in which books are written together. When you open an account, when you write and when you read, we store some data. We do not use it for advertising, we do not sell it, and we do not give it to third parties for marketing purposes.

You can permanently delete your account from inside the app at any time (Profile → Settings → Delete account). We explain exactly what deletion removes and what it leaves in section 5 — because in a jointly written work this is not an ordinary “delete everything”.

2. The data we collect

Account information

Email address, username, display name, profile bio if you have one, and avatar image. If you sign in with a password, we do not store the password itself but an irreversible hash of it. If you sign in with Google or Apple, we store the identifier that provider gives us — we never see your password.

What you write and share

Chapters, comments, book chat messages, your unpublished drafts, the notes and quotes you take, and the imprint details of the books you create.

Usage data

Which chapters you have read and where you left off, your reading lists, the books you follow, the comments you liked, the users you have blocked.

In-app economy

Your coin transactions and the badges you earn.

Technical data

Session and refresh tokens (so that you can stay signed in), and your device’s notification registration so that notifications can be sent.

Website measurement

On storycircle.com.tr we record which pages are viewed, how long a page is read, which buttons are clicked, which language the site is read in, whether the visit is from a phone or a desktop, and — if there is one — the host name only of the referring site (for example “google.com”). This measurement is stored on our own server; we do not use Google Analytics or any other third-party analytics service.

This measurement uses no cookies. The session identifier lives in the browser’s sessionStorage and is deleted when you close the tab. Your IP address is not stored: to be able to count unique visitors, your IP and browser details are mixed with a secret value that changes every day and turned into a key that cannot be reversed — once the day changes, even the same visitor cannot be matched back. Only the host name of the referrer is kept, never the full address, because a full address can carry a search query.

Raw measurement records are kept for at most 90 days and then deleted. If your browser sends the “Global Privacy Control” signal, no measurement takes place at all.

Moderation records

The content you report, reports made about you, and moderation decisions.

3. Why we use this data

• To run your account: sign-in, session continuity, password reset.
• For the app to work: publishing what you write, letting you continue reading where you left off, lists, follows, notifications.
• For the integrity of the shared work: keeping a permanent record of who wrote a chapter, keeping the book tree consistent.
• For safety and rule enforcement: content review, reporting and blocking flows, prevention of abuse.

We do not show advertising with this data, and we do not build profiles from it to sell to third parties.

4. Third parties the data is shared with

Automatic content review — Anthropic

When a chapter is submitted, it passes through automatic content review before it is published. For this review, the chapter’s title and text are sent to Anthropic’s API service and assessed for whether they contain content that breaks the rules. The text that is sent is part of the work you wrote; your account’s identity information is not sent with that request.

Google / Apple

Only if you use the “Continue with Google” or “Continue with Apple” option, the relevant provider is contacted so that your identity can be verified.

Notification infrastructure

When push notifications are turned on, the title and body of the notification are delivered through Google’s notification infrastructure (Firebase Cloud Messaging) so that it can reach your device.

Hosting

Your data is stored on the app’s own server.

Apart from these, we do not share your data with anyone. If a legal obligation arises (such as a court order), it is shared only to the extent that is compulsory.

5. What happens when you delete your account

Account deletion is permanent and there is no recovery window. Because Story Circle is a platform for jointly written works, deletion works in two different ways.

Your personal data that is permanently deleted

Your sessions and all your tokens, your notifications, your reading lists, your notes and quotes, your reading history, your block list, the books you follow, your comment likes, your unpublished drafts, your device notification registration. Your email address and your Google/Apple identifier, if any, are cleared completely — you can open a new and entirely unrelated account with the same email address.

Content that becomes anonymous but is not deleted

Your published chapters, comments and chat messages are not deleted; the author name is anonymised to “Deleted user”. The reason is this: a chapter is a node of a shared work. If it were deleted, the continuation chapters beneath it would be left without a parent, the chapters that come after it would stop making sense, and in branching books the sub-paths would break. The same reasoning applies to comments — the reply to a deleted comment would be left hanging.

Books you own

They are not deleted; they are transferred to the platform’s system books and continue to be managed by moderators. The work of the other authors who contributed to the book is preserved.

Records left untouched because they carry no identity

Coin transaction records, badges that have been earned, content review records and moderation/audit records. These contain no personal information that can be linked to you.

6. Retention period

We keep your data for as long as your account remains open. When you delete your account, the items under the heading “permanently deleted” in section 5 are deleted at the moment of the operation. Anonymised content remains indefinitely for the integrity of the work, and can no longer be linked to you.

7. Security

All traffic between the app and the server is encrypted with HTTPS. Passwords are stored as irreversible hashes; your plain-text password is not held anywhere. Session tokens are rotated on every refresh.

No system is absolutely secure; to protect your account we recommend choosing a strong password that you do not use anywhere else.

8. Children’s privacy

Story Circle is not directed at children under the age of 13, and we do not knowingly collect data from that age group. If we notice that a user under 13 has left data, we delete the account and its data.

9. Your rights

Under Law No. 6698 on the Protection of Personal Data (KVKK), you have the right to learn whether your personal data is being processed, to access it, to request the correction of inaccurate data, to request its deletion and to object to its processing.

You can exercise most of these rights directly from inside the app:

• Access and correction: Profile → Edit profile
• Deletion: Profile → Settings → Delete account
• Export: you can export the books you have written from inside the app

For other requests you can use the Profil → Geri bildirim section inside the app.

10. Changes to this policy

If we update the policy we will change the effective date and announce important changes inside the app. Continuing to use the app after a change means that you accept the updated policy.

11. Contact

For any question about privacy you can write to us from inside the app, in the Profil → Geri bildirim section.

See also: Terms of Use · Support