Privacy

Last updated 15 October 2026

Ninma is a small service for running book clubs with friends. This page says what we keep about you, why, who else handles it, and how to get it changed or deleted. We keep as little as the clubs need, we don't sell anything, and there are no ads, trackers or analytics.

Who runs Ninma

Ninma is run by Karrar Zayiadi, who is responsible for your data. Write to [email protected] about anything on this page.

What we keep, and why

Your account: your email address and the name and handle you choose. If you sign in with Google or Discord, we also keep which account there is yours (an ID number) and the link to your profile picture there. We need these to sign you in. Your name, handle, picture and the books on your shelf that you haven't marked private are shown on your public profile page, which anyone with the link can see.

Your books: your shelf, how far you are in each book, and which books you marked private. Private books are hidden from your public profile; your clubs still see your progress on the book they read together.

Your clubs: the clubs you're in, your role, your suggestions and votes, and the chat messages you write.

Sign-in links: when you ask for an email link we keep a scrambled copy of it, with your email address. It works for 15 minutes; used and expired ones are cleared out, at the latest the next time anyone asks for a link.

Server logs: our server records requests, including your IP address, to keep the service running and safe. Logs are kept for a short time by our hosting provider.

The legal ground is our agreement with you to provide the service (GDPR Article 6(1)(b)), and for logs our legitimate interest in keeping it secure (Article 6(1)(f)).

Cookies

One cookie keeps you signed in. While you sign in with Google or Discord, two more short-lived cookies carry the sign-in between us and them. All of them are needed for the service to work, so we don't ask for consent. There are no other cookies: nothing for ads, tracking or analytics.

Who else handles your data

Railway hosts the app and the database in the EU (Amsterdam). Resend sends sign-in emails, so it sees your email address. Google and Discord sign you in if you choose them. Profile pictures of members who signed in with Google or Discord load from those companies' servers, so when a page shows one, your browser contacts them and they see your IP address. Book details and covers come from Open Library. Covers normally reach you through our server; if Open Library is slow to answer us, your browser may fetch a cover from Open Library (and the Internet Archive, where they're stored) directly. Railway, Resend, Google and Discord are US companies; where data leaves the EU it is covered by the EU's standard contractual clauses or the EU–US Data Privacy Framework.

How long we keep it

As long as you have an account. When you delete your account in Settings, we delete your account, shelf, votes and suggestions at once. Your chat messages stay in your clubs' history as written by "Deleted user", so conversations still make sense.

Your rights

You can ask to see the data we have about you, get a copy, have it corrected or deleted, or object to how we use it. Most of it you can change yourself in Settings; for anything else, email us and we'll answer within a month. You can also complain to your country's data protection authority.

Changes

If we change this page in a way that matters, we'll say so in the app before it takes effect.