Privacy Policy

1. Who we are

Narravo ("Narravo", "we", "us", or "our") is an AI voice reader and text-to-speech application. It reads written content aloud with AI voices — text you type or paste, PDF and Word documents you import, pages and images you scan, web articles you link to, and classic books from our library — so you can listen instead of reading on a screen.

Narravo is operated by tuPandas (Bağlarbaşı Mah. Sakarya Sk. No: 31/1, Daire: 2, Maltepe, İstanbul, Türkiye), the data controller for the personal data described in this policy. This Privacy Policy explains what data we collect when you use the Narravo mobile app for iOS and Android and related services (together, the "Service"); how we use, share, protect, and retain it; and the choices you have. It is written to comply with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), the EU/UK General Data Protection Regulation ("GDPR") where applicable, and the Google API Services User Data Policy. It does not cover third-party services that you use alongside Narravo, which have their own privacy policies.

2. Summary

3. Information we collect

3.1 Information you provide

• Account information. When you first open Narravo, we create an anonymous account identified by a random user ID, so the app works without registration. If you create an account or sign in — with Google, with Apple, or with an email address and password — we also collect your email address, your name, and your profile picture (from Google, from Apple if you choose to share it, or a photo you upload from your camera or photo library). Passwords are handled by our authentication provider and are never visible to us. With Sign in with Apple you can share a private relay email address instead of your real one.
• Your first name, if you enter it during onboarding, so the app can greet you in the tutorial.
• Content you add ("Input Content"). Text you type or paste; files you import (PDF and Word/DOCX documents) together with their name, size, and type; photos and images you scan or choose; web links you add and the content of those pages; and document titles and folder names.
• Library & listening data. Your documents and folders, books you open or add to your wishlist, your reading position, the voices you choose or mark as favourites, playback speed, app language, your daily listening goal and reminder schedule, and listening statistics (such as characters read, time listened, and the voice, language, and document type used).
• Generated audio. The speech audio produced for your content, which is stored on your device so you can replay it and listen offline.
• Communications. When you contact support, we collect your messages, attachments, and contact details. Emails sent from the app's contact form include your user ID and your name or email address so we can find your account.

3.2 Information collected automatically

• Device & app data. Device model and manufacturer, operating system and version, app version, language, time zone, country, screen size, install source, and device or app identifiers (such as the iOS identifier for vendors, IDFV). This information is sent with requests to our servers.
• Usage data. Events such as screens viewed, sign-ins and sign-ups, documents and folders created (the type and language of a document, not its content), books added to your wishlist (title and author), voices selected, subscription screens viewed, and subscriptions started. This data is linked to your user ID and, if you have signed in, your email address.
• Session recordings. Microsoft Clarity records how you use the app — taps, swipes, scrolls, and screen changes — including what is displayed on the screen, which can include parts of your documents. Recordings are linked to your user ID, email address, first name, and subscription status. We use them only to find and fix usability problems.
• Diagnostics. Crash reports, stack traces, the app log messages that led up to an error, and performance measurements, linked to your user ID and email address.
• Security checks. Attestations from Apple (App Attest / DeviceCheck) or Google Play Integrity that confirm requests come from a genuine copy of the app.
• Subscription & purchase data. Subscription status, plan, transaction identifiers, store country, and renewal, cancellation, and refund events received from the App Store, Google Play, or our subscription provider. We do not receive your payment card details.
• Advertising & attribution data. The advertising identifier (IDFA on iOS — only if you allow tracking; the advertising ID on Android), app events such as installs, app opens, and purchases, and the ad campaign that led to your install. See Section 10.
• Push token. A device token for push notifications (Firebase Cloud Messaging / Apple Push Notification service), which we store with our subscription provider.
• IP address. Our servers and providers process your IP address to deliver and secure the Service — including when the app checks whether you are online — and may use it to infer your country or region. We do not collect precise (GPS) location.

3.3 Device permissions

Narravo asks for device permissions only when you use a feature that needs them:

Every permission is optional and can be changed at any time in your device settings; if you decline one, only the related feature is affected. Narravo does not use your location, microphone, or contacts. The app reads your clipboard only when you tap Paste to add a link.

3.4 Information from others

• Sign-in providers. Google (see Section 4) and Apple (the name and email address you choose to share).
• App stores and our subscription provider. Confirmation of purchases, renewals, cancellations, and refunds.
• Marketing measurement partners. Information about the ad campaign that led to your install (for example from Meta or Apple Search Ads).

4. Google user data

This section explains how Narravo accesses, uses, stores, shares, and deletes the data we receive from Google when you choose Sign in with Google ("Google user data"). Signing in with Google is optional — you can also use Narravo with an anonymous account, or sign in with Apple or with an email address.

4.1 What we access

When you sign in with Google (or connect Google to your existing Narravo account), Google shows you a consent screen and, if you agree, shares only your basic profile information with us — the standard openid, email, and profile sign-in scopes:

• your name;
• your email address and whether it is verified;
• your profile picture, if you have one; and
• your Google account ID (a unique identifier Google assigns to your account).

Narravo does not request any other Google permissions. It cannot access your Gmail, Google Drive, Google Docs, Contacts, Calendar, Photos, YouTube, or any other data in your Google Account, and we never see your Google password.

Narravo shares its sign-in system with our tuSpeech app — both are operated by tuPandas — so Google's sign-in screen may show the tuSpeech name. The data is collected by tuPandas and used only as described in this policy.

4.2 How we use it

• to create your Narravo account — or connect Google to the anonymous account you already have — and to sign you in securely;
• to recognise you when you sign in on another device, so your library, reading progress, and subscription can be restored and synced;
• to show your name and profile picture in your Narravo profile;
• to identify your account in our subscription, analytics, and crash-reporting tools, so we can manage your subscription, answer your support requests, and fix problems you run into; and
• to send you messages about your account, such as replies to support requests and important service or security notices.

We use Google user data only to provide and improve these user-facing features. We do not use it for advertising (including personalised, retargeted, or interest-based advertising), we do not sell it, and we do not use it to determine credit-worthiness or for lending purposes.

4.3 How we share it

Google user data is shared only with the service providers that run these features for us, only for the purposes above, and under agreements that do not allow them to use it for anything else:

• Firebase (Google LLC) — Firebase Authentication stores your sign-in account; Firebase Analytics and Crashlytics receive your user ID and email address with usage data and crash reports;
• RevenueCat, Inc. — your name and email address are stored with your subscription record;
• Microsoft Clarity (Microsoft Corporation) — your email address and first name are attached to session recordings; and
• our backend infrastructure (Supabase, Modal, and Cloudflare) — receives your sign-in token, which contains your user ID, email address, name, and picture, to confirm that requests come from you.

We do not share Google user data with advertising or marketing-measurement partners (such as Meta), data brokers, or other information resellers, and we never sell it. We may disclose it only if required by law, to protect the security of the Service and its users, or as part of a merger, acquisition, or sale of assets — in which case we will notify you and ask for your consent where required.

4.4 How we store and protect it

• Google user data is stored in Firebase Authentication (Google Cloud) and in the systems of the providers listed above. It is encrypted in transit (HTTPS/TLS) and encrypted at rest by our providers.
• Access is limited to authorised personnel who need it to operate the Service, and is protected by access controls and strong authentication.
• The sign-in credential that Google issues is used once to verify your identity and create your Narravo session. We do not store Google access tokens and do not call any other Google API on your behalf.

4.5 How long we keep it and how to delete it

• We keep Google user data only for as long as your Narravo account exists.
• When you delete your account (see Section 12), your sign-in record — including your Google name, email address, and picture — is deleted from Firebase Authentication immediately. Copies held in our other systems and by our service providers are deleted or anonymised within 90 days, and copies in analytics and crash reports expire under those tools' retention periods (at most 14 months).
• You can remove Narravo's access to your Google Account at any time at myaccount.google.com/connections. This stops future sign-ins with Google; to delete the data we already hold, delete your account.

4.6 Human access

People at tuPandas do not read your Google user data unless you ask us to (for example, in a support request), it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable law, or the data has been aggregated and anonymised for internal operations.

4.7 Limited Use and AI

We do not use Google user data to develop, improve, or train generalised or non-personalised artificial intelligence or machine-learning models, and we do not send it to AI or speech providers.

5. How we use information

We do not sell your personal information, we do not show ads in the app, and we do not use the content of your documents to target advertising or to train AI models.

6. How reading & voices work

• Importing files. PDF and Word documents you import are uploaded over an encrypted connection to our conversion service, which extracts their text and images and returns them to your device.
• Web links. Your device downloads the page at the link you enter and sends it to our conversion service, which extracts the readable text.
• Scans and photos. Text recognition runs on your device (Google ML Kit on-device text recognition); your images are not uploaded for this. The scanned pages are saved as a document in your library.
• Listening. When you play a document, the text of the passage being read is sent over an encrypted connection to our speech service, which uses Microsoft Azure AI Speech to generate the audio with the voice you chose. The audio is returned to your device and stored there for replay and offline listening.
• Sync. If you have a Premium subscription, your documents (including the original files and scanned images), folders, listening statistics, book wishlist, and favourite voices are also stored in our cloud database and file storage, so you can use them on your other devices. Without Premium, your library is stored only on your device.

Our conversion and speech services use your content only to return the result to you. Microsoft processes the text only to generate audio for us and, under its data-processing terms, does not use it to train its models. We do not use your content to train AI models. Speech output and text recognition are automatic and may contain mistakes.

7. Legal bases for processing (KVKK / GDPR)

We process your personal data on the following legal bases under the KVKK and, where applicable, the EU/UK GDPR:

• Performance of a contract — to provide the Service you requested, including your account, reading aloud, sync, and subscription features (Article 5(2)(c) KVKK; Article 6(1)(b) GDPR).
• Legitimate interests — to keep the Service secure, prevent abuse, fix errors, analyse usage, and improve the Service in a way that is balanced against your rights (Article 5(2)(f) KVKK; Article 6(1)(f) GDPR).
• Consent — for tracking and advertising identifiers, notifications, and marketing messages, where required by law (Article 5(1) KVKK; Article 6(1)(a) GDPR). You can withdraw consent at any time.
• Legal obligation — to comply with applicable laws, such as tax and accounting rules (Article 5(2)(ç) KVKK; Article 6(1)(c) GDPR).

8. How we share information

We share personal information only in these limited circumstances:

• Service providers (processors) that host our infrastructure, provide authentication and storage, convert documents, generate speech, run analytics, session recording, and crash reporting, process subscriptions, and help us provide support — all under agreements that limit how they can use your data. The current providers are listed in Section 9.
• Marketing measurement partners (Meta and Apple Search Ads), which receive device identifiers and app events such as installs, app opens, and purchases so we can measure our advertising. They do not receive your documents or your Google user data.
• App stores (Apple App Store and Google Play), which complete your purchase and manage your subscription.
• Legal and safety — when we believe in good faith that disclosure is necessary to comply with the law, respond to valid legal process, protect our rights or property, or protect the safety of users or the public.
• Business transfers — if we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
• At your direction — for example, when you email our support team from the app.

Google user data is shared only as described in Section 4.3.

9. Third-party services we use

The table below lists the third-party services we currently rely on and what we use them for. We may change providers as the Service evolves; when we do, we will update this section.

10. Analytics & advertising identifiers

We do not show ads in Narravo. We use marketing measurement tools only to learn which of our own advertising campaigns lead to installs and purchases.

• iOS. We ask for your permission through Apple's App Tracking Transparency framework before accessing the IDFA. If you decline, we do not access it. You can change your choice at any time in Settings → Privacy & Security → Tracking.
• Android. Meta and RevenueCat can read your device's advertising ID. You can delete or reset it at any time in your device settings (Settings → Privacy → Ads or Settings → Google → Ads, depending on your device).

11. Data retention

• Content on your device — documents, downloaded audio, and settings stored on your device stay there until you delete them or uninstall the app.
• Account & synced content — kept while your account exists. When you delete a document, we remove it from your library and from our servers within 90 days.
• Content sent for processing — files, web pages, and text sent to our conversion and speech services are used only to produce the result and are not kept by those services afterwards.
• Account deletion — see Section 12.
• Analytics, session recordings & diagnostics — kept for up to 14 months.
• Subscription records — kept for the period required by Turkish tax and consumer-protection law (generally up to 10 years for financial records under the Turkish Tax Procedure Law).
• Support records — kept for up to 5 years for quality assurance and legal compliance.

12. Deleting your account & data

You can delete your Narravo account and the data associated with it at any time:

1. In the app: open the Profile tab, go to your account, and tap Delete Account under Security.
2. By email: write to [email protected] from the email address linked to your account, with the subject "Delete my Narravo account". You do not need to reinstall the app. We may ask you to confirm the request to protect your account.

What we delete: your sign-in account and profile (including Google or Apple sign-in data) immediately; and your synced documents, files, library and listening data, and the personal data held by our service providers within 90 days of your request. Analytics and crash data expire under those tools' retention periods (at most 14 months).

What we keep: purchase and transaction records that we must keep under tax and accounting law (generally up to 10 years), and data that has been aggregated or anonymised so that it no longer identifies you. Data stored on your device is removed when you uninstall the app.

Deleting your account does not cancel an active subscription. Cancel it in your App Store or Google Play account settings to stop future charges.

13. Security

We use industry-standard safeguards to protect your data, including encryption in transit (HTTPS/TLS), encryption at rest provided by our hosting providers, app-integrity checks, access controls, and least-privilege access. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. If we become aware of a security incident affecting your data, we will notify you and the relevant authorities (including the Turkish Personal Data Protection Authority where applicable) as required by law.

14. International transfers

Narravo is offered globally, and our service providers operate servers in several countries. Your information may therefore be processed outside your country, including in the United States, the European Union, and Türkiye. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. Where we transfer personal data out of Türkiye, we rely on the safeguards permitted under Article 9 of the KVKK.

15. Your rights

Depending on where you live, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Deletion — ask us to delete your account and associated data.
• Portability — receive your data in a structured, commonly used format.
• Restriction or objection — limit or object to certain processing.
• Withdraw consent — where processing is based on consent.
• Lodge a complaint — with your local data-protection authority (in Türkiye, the Kişisel Verileri Koruma Kurumu).

You can exercise many of these rights inside the app (for example, by editing your profile, deleting documents, or deleting your account) or by emailing [email protected]. We will respond within the time required by applicable law (30 days under the KVKK).

16. Children's privacy

Narravo is not intended for users under 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected information from a user under 18, we will delete it. If you are under 18, please do not use the Service.

17. California & US state rights

If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you the right to know what personal information we collect, to delete it, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information. Giving device identifiers and app events to our marketing measurement partners (Section 8) may count as "sharing" under California law; you can opt out by declining tracking on iOS, deleting your advertising ID on Android, or contacting us. Residents of other US states with comparable laws (such as Virginia, Colorado, Connecticut, Utah, and Texas) have similar rights, which you can exercise by contacting us.

18. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you in the app, by email, or by updating the "Last updated" date at the top of this page. If we change how we use Google user data, we will notify you and ask for your consent before using it in the new way.

19. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, or you want to exercise your rights, please contact us:

• Operator (data controller): tuPandas
• Address: Bağlarbaşı Mah. Sakarya Sk. No: 31/1, Daire: 2, Maltepe, İstanbul, Türkiye
• Email: [email protected]