Privacy Policy

What this policy covers

This policy describes how Codolo ("we", "us"), our mobile app and this website, handles personal data for people who use them.

Account data

If you create an account, we store the email address and authentication method you use to sign in (email and password, or Sign in with Apple / Google). We use this solely to identify your account and secure access to it.

Your imported content

Text you import, from a photo, a camera scan, a PDF, a file, or pasted content, is processed on your device to extract readable text and is stored in your device’s local library by default. Photos themselves never leave your device — only the recognized text is sent onward, and only for speech synthesis.

From app version 1.0.3 on iPhone, English voices are generated on your device: the text does not leave your phone for this. The voice model is downloaded once from our servers and then works offline.

For other languages, on Android, in earlier app versions, and as a fallback if on-device generation is not available, the relevant text is sent to Modal, our server-side speech synthesis provider, solely to generate the audio for that text. Modal does not retain the text after processing.

Codolo does not generate new written content from your text — it reads back exactly what you provided, the same way a screen reader or audiobook narrator would. The audio itself is produced using AI text-to-speech technology.

Data that stays on your device

Some information is only stored locally on your device and is never sent to us: your reading statistics (words read, reading time, streaks, milestones and which books you read), your answers to the questions when you first open the app, and your app settings such as language and voice. Deleting the app removes this data.

When you export a text (for example as a PDF) or share a progress card, the file is created on your device and only goes where you send it through your device’s share menu.

Text recognition for photos and scanned pages runs on your device. On iPhone it uses Apple’s built-in text recognition. On Android it uses Google ML Kit: your images and the recognized text stay on your device, but ML Kit sends anonymous technical diagnostics to Google (such as device model, operating system version, app version and performance data) so Google can maintain the feature. This data does not identify you.

Where your data is processed

Your account data is stored with Supabase in the EU (Frankfurt, Germany).

Downloads such as the on-device voice model and the optional background clips and images in the reader are served from Cloudflare. Like any web server, Cloudflare processes your IP address to deliver the files; we do not use these downloads to identify you.

Text sent for speech synthesis is processed by Modal, which may process it outside the EU/EEA (for example in the United States), depending on where GPU capacity is available at the time. Where that happens, we rely on Modal’s data processing agreement and standard contractual clauses as the transfer safeguard.

Subscriptions and payments

Subscription purchases are handled by the Apple App Store or Google Play, and processed through RevenueCat, our subscription management provider. We receive confirmation of your subscription status (active/inactive, plan type, trial, price and renewal date) but never see your payment details, which are handled entirely by Apple, Google, and RevenueCat.

If you start a free trial, we send you one reminder email about a day before it ends, with the date, the price and how to cancel. This email is part of your subscription, not marketing, and is sent through our email provider Resend. If you cancel before that, you won’t get it.

Advertising measurement (only with your consent)

We advertise Codolo on Meta (Facebook and Instagram). To learn which ads bring people to Codolo, newer versions of the app contain the Meta SDK. It stays switched off unless you agree: the app asks you once, and on iPhone Apple then asks for permission to track. If you say no to either, the SDK is never started and nothing is shared with Meta.

If you agree, the following is shared with Meta Platforms Ireland Ltd.: your device’s advertising identifier (on iPhone only if you allowed tracking), an anonymous Meta app ID, technical device data (such as device model, operating system, app version and IP address), and app events such as installing and opening the app. If you start a trial or a subscription, RevenueCat reports that event (with plan, price and currency) to Meta, linked to the same identifiers. Your reading content, imported texts and account email are never shared.

The legal basis is your consent (Art. 6(1)(a) GDPR, and § 25(1) TDDDG for reading the advertising identifier from your device). For collecting and sending this data to Meta, we and Meta Platforms Ireland Ltd. are joint controllers (Art. 26 GDPR) under Meta’s Controller Addendum; for everything Meta does with the data afterwards, Meta alone is responsible, see facebook.com/privacy/policy. Meta may process the data in the United States; Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework. We do not store this data ourselves.

You can withdraw your consent at any time in the app under Account → Ad measurement, and on iPhone also in Settings → Privacy & Security → Tracking. Withdrawing does not affect processing that already took place.

What we don’t do

Codolo does not use analytics tracking, and without your consent no advertising tracking. We do not sell personal data, and we never share the content you read.

Cookies

This website (codolo.app) does not use advertising or analytics cookies, and doesn’t track you across sites. It doesn’t set any cookies of its own.

If that ever changes, for example if we add analytics, this page and a cookie consent banner will be updated before that happens, not after.

Your rights

Under the GDPR, you have the right to access, correct, delete, or export your data, and to object to or restrict certain processing. You can delete your account and its data yourself at any time from inside the app, or request the same by contacting support (see the Support page).

You also have the right to lodge a complaint with your local data protection supervisory authority.

Contact

Questions about this policy can be sent to contact@codolo.app. For the legal entity responsible for data processing, see the Imprint page.