Privacy policy

Who we are

vovoscan is published by YIELD SARL, Vakpossito, Rue Agoe-Nyive, Lomé, Togo (yieldgrowth.org), which is responsible for the data described here.

What we keep

Only what the service needs to work, tied to your account:

• Account: email address, display name, password (stored as an Argon2id hash, never in clear), UI language, region, time zone, when your email was confirmed, and how the account was created.
• Sessions: one record per signed-in device (a hash of its token, its browser or app name, the time and the network part of its address), so you can see and sign out your devices.
• Reading: your library, favourites, ratings, reading places, book highlights and notes, reader settings, the sources and plugins you added, and your downloads list. These follow you between the web and your phones.
• Search: searches after which you opened a title, to suggest titles. You can turn this off or clear it in Settings › Preferences; it is removed after 180 days anyway.
• What you post: notes and theories in the margin of a chapter, group messages, game moves, reading circles (circles and their content are erased 36 hours after they open).
• Your own AI provider keys, if you add any: sealed with AES-256-GCM and only ever used for your own requests. We show back their last four characters only.
• Credits and costs: your balance, what each translation or episode cost, and the provider used.
• Security: sign-in attempts and security events (time, outcome, address, browser), to stop password guessing and abuse.
• Notifications: if you allow push notifications, a token for your device and its public key. Each push is end-to-end encrypted for your device: the delivery service sees no content.

What we do not keep

Sources read on your device: when you add a third-party source, your phone or browser contacts that site directly. Its pages never go through our servers, and we only learn the reference of a title you follow or read, so your library and history work everywhere.

No contacts, photos, location, microphone or camera access. A group picture you choose is re-encoded and its metadata removed before upload.

Who processes data for us

Only to run the features you ask for:

• Hosting: our own servers and storage (Amazon Web Services, European Union region).
• Translation, reading and voices: when you ask to translate a chapter, prepare an episode or explain a passage, its page images or text go to the AI provider that runs it (Anthropic, Google, Moonshot, OpenAI or ElevenLabs), with your own key or the platform’s. They receive the content, never your email or name.
• Email: Resend sends sign-in, verification and account emails.
• Push notifications: Firebase Cloud Messaging (Google) carries encrypted pushes it cannot read.

What others see

Your display name appears next to what you post in groups, margins and circles, to the people who can see them. Translations and episodes are shared with every reader of that chapter, without your name. Counts made from many readers (ratings, favourites, popular searches) are shown only once at least three accounts are counted.

How long

As long as your account exists. Deleting it (see below) erases it after 30 days. Encrypted database backups are rotated out within 12 months; they are only used to recover the service.

Your rights

You can see and change your data in the app, download your reading list, sign out other devices, and delete your account at any time. You may also ask us for a copy, a correction or an erasure, or object to a use, using the contact below. If you are in the European Union you may complain to your data protection authority.

Age

vovoscan is not for children under the minimum age of their country (13 to 16 in the EU). Adult titles stay hidden until an adult turns them on in Settings.

Security

Traffic is encrypted (HTTPS). Passwords are hashed with Argon2id, provider keys are sealed with AES-256-GCM, sessions can be revoked, sign-ins and costly actions are rate limited, and backups are encrypted.

Changes

We will update this page, and its date, before any change to what we collect.

Contact

[email protected]