Wendmatter is an independent software brand operated by Raşit Ekrem Ataklı, who is responsible for the personal data described on this page.

• An account is optional. Patina works fully without one, and your library then stays on your phone.
• Some features use the internet even without an account: looking up books and covers, opening a shared library link and sending a report.
• No ads, no analytics and no crash-reporting tools. We do not track how you use the app.
• We do not sell your data or share it for advertising or marketing.
• Others see your library only as far as your visibility settings and the share links you create allow.

Patina works fully without an account. Your library, notes, photos and settings are then stored only on your phone and are not synced to our servers.

A few actions still use the internet:

• Looking up a book or its cover: the ISBN or title you search goes to Google Books or Open Library (see below).
• Opening a shared library link: the link's code is sent to our server to load the shared library.
• Sending a report: the report and the content it is about are sent to our server. Reports can be sent without an account.
• Exporting or sharing a file: the file goes wherever you choose to send or save it.

Like any internet request, these reveal ordinary technical information, such as your IP address, to the service that receives them.

Email address

To create your account and sign you in. If you sign in with Google: the email address, name and profile photo Google provides.

Display name, username and bio

Optional. So friends can recognise and find you.

Profile photo

Optional. You choose who can see it.

Your library

Books, bookcases and shelves, notes, quotes, wishlist, reading records, lists and featured books.

Book covers

Photos you take and covers you save.

Friends

Friendships, friend requests and blocks.

Connected loans

Loans you offer to, or accept from, another Patina account. Loan records that are not connected to an account stay on your phone.

Share links and public lists

Library share links you create and lists you make public.

Reports

Reports you send about content or other users.

We process this data to sync your library between your devices and to provide the social features you choose to use. Syncing is not a backup file: the full backup file is one you create and keep yourself (see “Your rights and deletion”).

When a cover you photographed with the camera is saved, the photo's EXIF metadata is removed: device make and model, capture time and any location are not kept in the file. The file that goes to the cloud and to your friends does not carry this information.

Account data is stored with our hosting provider Supabase, on servers in London, United Kingdom (eu-west-2).

If you live in Turkey, this means your data is processed outside Turkey. We say this plainly so you can decide knowing where it is kept.

• Your visibility settings decide. You choose who can see your library as a whole and each bookcase and shelf. A new library is visible only to you (“Only me”). Bookcases and shelves you add are visible to friends by default, but nothing is shown to anyone while the library itself is set to “Only me”.
• Blocking: a person you block is removed from your friends and cannot see your library.
• Share links: if you create a library share link, anyone who has the link can see what your friends can see, until you cancel the link. Cancelling it ends access.
• Notes and quotes are never shared. Your private notes, the page you are on and your reading dates are not shown to friends or through share links; a book's reading status and your rating are.
• Public lists appear in the in-app list pool. For each list you choose whether it shows your name or is anonymous; for anonymous lists the server does not send your identity to viewers.
• Direct addresses: content you make public can be opened by signed-in users who have its direct address, even if you turn off being findable in search.
• Shared book catalogue: you can contribute a book's details (title, author, publisher, ISBN). The app does not show who contributed; the entry keeps an internal identifier of your account until you delete your account.

We do not share your data with anyone for advertising or marketing.

On your phone, data stays in the app's own private storage; other apps cannot reach it. We have turned off the operating system's automatic backup: your library, notes and photos are not copied to Google Drive or to a new phone on their own. To move them, use the app's own backup — you take the file and decide where to keep it.

Data travels between the app and our server over encrypted (HTTPS) connections.

Your notes and quotes are not end-to-end encrypted on the server: technically, someone with administrative access to the server could read them. We do not read them and do not use them for anything other than syncing. If you prefer that your notes never leave your phone, use Patina without an account — it works fully that way.

Google Books

When you look up a book. The request contains the ISBN or title you searched, not your account.

Open Library

For the same purpose, and to download cover images.

Google Sign-In

Only if you choose to sign in with Google.

Our server (Supabase)

Sign-in and syncing if you have an account; opening shared library links and sending reports, with or without an account.

These services receive ordinary technical information such as your IP address, and their own privacy policies apply. The app contains no ad network, analytics or crash-reporting tool.

• Your account data is kept until you delete it or delete your account.
• Your account and account-owned cloud data, except the retained records described below, are removed when account deletion completes successfully. If cloud file removal fails, account deletion does not complete; some files may already have been removed. Follow the error message, retry and wait for the completion result.
• Account deletion does not itself erase the hosting provider’s operational logs or backups. They are governed by separate provider controls and may contain information relating to deleted data. For questions about your data, write to privacy@wendmatter.com.
• Your username is not given to anyone else for 90 days after account deletion. This protects against reuse; it does not mean the quarantine record is physically deleted on day 90.
• Your contributions to the shared book catalogue remain, unlinked from you. A contribution is a book's bibliographic data; deleting it would break other users' libraries.
• When your account is deleted, we remove the account link, note text and submission action identifier from content reports you sent. The reason, time and structural details about the reported content may remain for moderation. These details are not considered completely anonymous. An active investigation may retain structural records, but it does not preserve the deleted account’s note text.
• Data on your phone stays there until you delete it or uninstall the app.

You can export your library, including photos, as a single backup file: open Menu → Data and backup → Backup and restore. The file contains the library on your device; you decide where to keep it. To delete your account, open Account from the menu and choose Delete my account. Your phone’s library remains; Patina continues to work without an account. Saved backups, images and copies of shared content received by others are not retracted by account deletion.

You can send requests under Turkey’s Personal Data Protection Law (Law No. 6698, KVKK) to privacy@wendmatter.com. For requests concerning your account, use its registered email address where possible. We may ask for information needed to verify your identity and the scope of your request. We will resolve your request as soon as possible and no later than 30 days after we receive it. We will carry out accepted requests; if a request is refused, we will explain why and notify you of the outcome in writing or electronically.

This deadline concerns the resolution of your data-subject request. It does not mean that every technical record or hosting-provider backup is necessarily erased within 30 days. These pages separately explain the scope of account deletion, retained records and provider controls.

The app is not directed at children, and we do not knowingly collect data from people under 13.

When this policy changes, we update this page and the date above.

For questions or requests about your personal data, write to privacy@wendmatter.com.