Privacy Policy
Voice Reader · Last updated 11 October 2026
Voice Reader turns written material — PDFs, photographs of pages, web links and pasted text —
into speech you can listen to. This policy explains exactly what leaves your device when it does,
and what does not. It is written to be checked against the app's behaviour, not to be taken on
trust.
The short version
- There are no accounts. We never ask for your name, email or phone number.
- We do not track you or show ads, and there is no advertising SDK in the app.
- We use Google's Firebase to see how the app is used and to receive crash
reports. That data is tied to a random identifier for your installation, never to you.
- Your library, your imported text and the generated audio stay on your device.
- Text you ask to be read aloud is sent to our server and on to Google's speech service for
as long as the request takes, and is not stored by us afterwards.
What leaves your device, and why
| What | Where it goes | Why |
|---|
| The text you want read aloud |
Our synthesis server, and from there to Google Cloud Text-to-Speech |
To produce the audio. We do not store the text after the request is served; the finished
audio is returned to your device and kept there. |
| A random identifier for your installation |
Our synthesis server |
To count characters against the weekly allowance and to attach your subscription to a
limited number of devices. It is generated on your device, is not your Apple ID, not an
advertising identifier, and is not linked to any account — because there are none. |
| A cryptographic attestation from Apple's App Attest |
Our synthesis server |
To confirm the request comes from a genuine, unmodified copy of the app rather than from a
script pointed at our server. It identifies the app, not you. |
| The App Store transaction for an active subscription, signed by Apple |
Our synthesis server |
To lift the free limit and to enforce the limit on how many devices one subscription may
unlock. We keep the subscription's transaction identifier and the installation identifiers
attached to it, and nothing else about the purchase. |
| A web address you paste to be read |
Jina Reader (r.jina.ai), operated by Jina AI |
To fetch the page and return it as readable text. The address you paste is disclosed to
that service. If you would rather it were not, copy the text and paste it instead of the
link. |
| Usage events: which screens you open and what you do in the app |
Google Firebase Analytics |
To understand which features are used and where the app gets in the way, so we can improve
it. Details in Analytics and crash reports below. |
| Crash reports |
Google Firebase Crashlytics |
To find and fix the cause when the app crashes. |
What never leaves your device
- Photographs and scans. When you photograph a page or pick an image, the
text is recognised on the device itself, by iOS. The image is never uploaded. Only the
recognised text is then sent for synthesis, exactly like text you typed.
- Your library — titles, folders, listening progress and the generated audio
files.
- Your settings, including the chosen voice and playback speed.
- What you share into the app from Safari, Mail or anywhere else. The share
sheet hands the link or the selected text to the app through a private container on your own
device; nothing about it is sent anywhere at that moment. From then on it is treated exactly
like text you pasted yourself — that is, it goes out for synthesis only when you ask for
audio, and a shared web address is fetched as described above.
Permissions the app asks for
- Camera — only to photograph a page you want read. Used at the moment you
choose it, never in the background.
- Notifications — optional, and only to tell you that audio you asked for has
finished generating.
- Photos — the app uses the system picker, so it receives only the images you
select and has no access to the rest of your library.
Analytics and crash reports
The app uses two Google services, Firebase Analytics and Firebase Crashlytics. Google processes
this data on our behalf under the
Firebase data processing terms;
see also Privacy and Security in Firebase.
- Usage events. When you open a screen or take an action — import a document,
generate or play audio, open the subscription screen, start a purchase — the app records an
event with a few details about it, such as the kind of source (PDF, link, photo) or the reason
a step failed. Events never contain the text you import, the titles in your library, web
addresses you paste, or the audio.
- Purchases. When you start, cancel or complete a subscription purchase, the
event includes the product, its price and currency. Payment itself is handled entirely by
Apple; the app never sees your card or Apple ID details.
- Identifier. Firebase assigns a random identifier to your installation to
count users and group events. It is not your Apple ID, not linked to a name, email or account,
and resets if you delete and reinstall the app. The app does not read the advertising
identifier (IDFA).
- General location. Firebase derives an approximate location — country,
region, city — from a masked version of your IP address. The app does not use Location
Services.
- Crash reports. If the app crashes, Crashlytics sends the technical state of
the app at that moment, together with the device model and iOS version.
We use this data only to understand and improve the app. We do not use it for advertising, we
do not combine it with data from other companies, and we do not sell it. The app does not currently
offer a setting to turn analytics off; deleting the app stops all collection.
Tracking
Voice Reader does not track you in the sense Apple uses the word: nothing the app collects is
linked with other companies' data for advertising, or shared with data brokers. It contains no
advertising or attribution SDK and never reads the advertising identifier, so it never shows the
"Allow app to track" prompt. The app's Privacy Manifest, which Apple publishes alongside the app,
states the same thing in machine-readable form.
How long anything is kept
- On your device: until you delete the listen, or delete the app. Deleting the
app removes the library, the audio and the settings with it.
- On our server: a character counter per installation identifier, which resets
at the start of each week (Monday, UTC), and — if you subscribe — the transaction identifier
with the installations attached to it, for as long as the subscription is used.
- At Google: the text is processed to produce audio and is handled under
Google Cloud's terms; Google states that Cloud Text-to-Speech content is not used to train
its models.
- At Google Firebase: usage events are kept for up to 14 months, crash reports
for 90 days, and are then deleted.
Where data is processed
Our synthesis server runs on Cloudflare's network. Google Cloud and Firebase may process data in
any country where Google maintains facilities, including the United States. Where data leaves your
country, it is protected by the providers' standard contractual safeguards.
Children
Voice Reader is not directed to children. Note that a web link you paste can lead to any page on
the open internet, and the app will read what it finds there.
Your choices
- Delete any listen from the library at any time; its audio file goes with it.
- Delete the app to remove everything held on the device.
- Ask us to delete the server-side counter and subscription record for your installation by
writing to the address below. Because there are no accounts, please write from a device you
still have the app on, and we will tell you what identifier to send.
- Analytics and crash data are not linked to you, so we cannot find yours from an email
address. Deleting the app ends collection, and a reinstall starts with a new identifier.
Changes
If this policy changes, the date at the top changes with it. Material changes will be described
in the app's release notes rather than made quietly.
Contact
Maksim Sakovich — msakovich2000@gmail.com