Legal
Privacy Notice
Last updated: 4 October 2026
This notice explains what personal data the Readvo website and web reader (“Readvo”) collect, why, who we share it with, and your rights. Readvo is provided by İntepe Yazılım ve Bilişim Ltd. Şti., a company registered in Turkey, which is responsible for your personal data (the “controller”). You can reach us at hello@readvo.app.
The Readvo app for iPhone and iPad has its own privacy policy, linked from the app.
What we collect and why
- Your account. Sign-in is provided by Firebase Authentication from Google. When you start listening, Readvo creates an anonymous account ID for your browser. If you sign in with Google or with an email and password, we receive your email address and whether it’s verified. We use your account to keep your free listening time and your subscription with you on every device.
- What you listen to. Text you paste and PDFs you upload are sent to our server. PDFs are read in memory to extract their text and aren’t stored. To turn text into speech, we send it to ElevenLabs, our voice provider. We keep the generated audio, so the same text can be replayed without generating it again. It’s filed under a fingerprint (a hash) of the text and voice, not under your name or account, and we don’t keep a separate copy of the text.
- On your device. Your browser keeps your current document, your reading position and your settings (voice and speed) in its local storage, so you can pick up where you left off, along with a random ID used for the usage statistics described below. Clearing your browser’s data for this site removes them.
- Usage. How many seconds of audio your account has used, which audio your account has already been counted for (by fingerprint), and when your account was created.
- How Readvo is used. To understand how people use Readvo and where they get stuck, we record a small set of actions: visiting a page and where you came from, uploading a PDF (its number of pages and length, never its name or content), starting to listen, seeing the upgrade screen, and the steps of signing in and subscribing. Our server passes each action to Amplitude, our analytics provider, with the random ID from your browser, your account ID once you’ve signed in (never your email address), your browser type and language, and your IP address, which Amplitude uses to work out your country and region. The text you listen to is never included.
- Security and abuse prevention. Your IP address, to limit how many free accounts and requests come from one network, and a Cloudflare Turnstile check, which looks at signals from your browser to tell people from bots. Our server logs record requests, including IP addresses, for security and troubleshooting, and are kept for a limited time.
- Payments. Paddle, our online reseller and the Merchant of Record for all our orders, processes your payment. Paddle collects your payment details, name, email address and billing address under its own privacy notice. We never see your card details. Paddle tells us your customer and subscription IDs, the status of your subscription and the email address you paid with, so we can switch on PRO and let you manage your subscription.
- Fonts. Our pages load the Sora font from Google Fonts, so Google receives your IP address when a page loads.
We don’t show ads or use advertising cookies, we don’t track you across other websites, and we don’t sell your personal data. Our usage statistics rely on the random ID in your browser’s storage, not on cookies. Signing in keeps you logged in using your browser’s storage; Paddle and Cloudflare may use cookies or similar technology that their payment and bot protection need.
Legal bases
Under the data protection laws that apply to Readvo, such as Turkey’s Law No. 6698 on the Protection of Personal Data (KVKK) and, for people in the EU, the GDPR, we use your data:
- to provide the service you ask for (performance of a contract): your account, reading aloud and your subscription;
- for our legitimate interests in keeping Readvo secure, preventing abuse and fraud, keeping it working, and understanding how it’s used so we can improve it;
- to meet legal obligations, for example keeping records of purchases.
Who we share data with
Only with the service providers that help us run Readvo, each for the purposes above:
- Google (Firebase Authentication and Google Fonts)
- ElevenLabs (generating speech)
- Cloudflare (bot check)
- Amplitude (usage statistics)
- Paddle (payments, as Merchant of Record)
- our hosting provider (where our server and its data are stored)
Some of these providers process data outside your country, including in the United States. Where the law requires it, these transfers are protected by safeguards such as standard contractual clauses. We may also disclose data when the law requires us to.
How long we keep it
- Account and subscription records: for as long as your account exists. We may delete anonymous accounts that haven’t been used for a long time.
- Generated audio: for as long as it’s useful for replays. It’s filed by fingerprint, not by account.
- Usage statistics: for as long as they’re useful for improving Readvo.
- Server logs: for a limited time.
- Payment and tax records: kept by Paddle for as long as the law requires.
Your rights
Depending on where you live, you can ask us for a copy of your data, or to correct it, delete it, restrict or object to how we use it, or receive it in a portable format. Email hello@readvo.app from the address on your account. You can also complain to a data protection authority, such as Turkey’s Personal Data Protection Authority (KVKK) or the authority where you live.
Children
Readvo isn’t meant for children under 16, and we don’t knowingly collect their data.
Changes to this notice
If we change this notice, we’ll post the new version on this page with a new date, and tell you about important changes.