Privacy Policy

01 About this policy

This policy covers CoCo Reading’s document reading, library management, annotations, reading statistics, account services, and the optional features available in your version of the app. Feature availability varies by platform, region, account, and version. Describing an optional feature does not mean that every user uses it or provides the corresponding information.

Third-party websites, cloud drives, sign-in providers, and app stores also process information under their own policies when you use their services. The sections below explain the information involved in our integrations.

02 Information we process

Account and profile: When you register, sign in, or edit your profile, we process the phone number or email address you provide, your account identifier, authentication information, nickname, and profile picture. If you choose a third-party sign-in method, we receive the provider’s account identifier, authentication result, and profile information you authorize, such as your name, email address, or avatar.
Documents and reading activity: The app processes files you select or import, file names and metadata, covers, library organization, reading progress, bookmarks, highlights, annotations, notes, reading time, and learning statistics to provide reading features. Local reading processes document content on your device. Account-based records and enabled synchronization features may send reading records, document metadata, annotations, or selected files to our services or your chosen cloud provider.
Cloud and connected storage: When you connect a cloud drive, WebDAV, or another storage service, the app processes the connection address, authorization credentials or tokens, file listings, and the files you choose to access. iCloud synchronization uses your Apple account’s iCloud storage. Data sent to a storage provider is also subject to that provider’s policy.
Purchases and subscriptions: We process product identifiers, order and transaction identifiers, purchase or subscription status, and transaction verification information to provide paid features, restore purchases, and resolve payment issues. Payment details are handled by the payment provider; CoCo Reading does not receive your full payment card number from App Store purchases.
Device, service, and diagnostic information: Service requests can include your IP address, device or installation identifier, device model, operating system, app version, language, time zone, request times, and error information. Crash reports and logs can include the circumstances of an error and related activity. Feedback you submit may include your message, contact details, screenshots, and selected log files.
Optional features: Cloud AI features process the questions and document content needed for the requested task. Location features process location information and visibility preferences. Speech practice may process microphone audio and recognition results. Notifications use a device push token or push registration identifier. Details and controls are described below.

03 How we use information

We use information to provide and maintain the features you use: account authentication, reading and library organization, synchronization, annotations, reading statistics, requested AI or speech results, purchases, notifications, and support. We also use relevant service and diagnostic information to find errors, improve reliability, protect accounts, prevent abuse, and meet applicable obligations.

If you choose to share a reading card, profile, activity, or other content, the information you share becomes available to the audience or service you select. Review the content and visibility setting before sharing.

04 Device permissions and your choices

You can grant or withdraw supported device permissions in your operating system’s settings. Denying a permission can prevent the related feature from working. Withdrawing permission stops future access through that permission; it does not automatically erase information already stored or sent.

Files, photos, and camera: Used to import documents, choose or take a profile picture, attach feedback images, and save reading cards or other exports. Select only the files or images you want to provide.
Microphone and speech recognition: Used for speech practice or pronunciation assessment when those features are available and you use them. Text-to-speech playback does not itself require you to record your voice.
Location: Used for location-based features such as nearby readers and the reading map. Your device’s permission setting determines whether location is available; in-app visibility settings control how your presence is shown to other users. Turn off the feature or revoke location permission to stop future location access.
Notifications: Used to deliver reminders and service notifications. You can turn notifications off in system settings and adjust available reminder options in the app.
Face ID or other device authentication: Used to unlock protected app content. Authentication is performed by the operating system, which returns the result; CoCo Reading does not receive your face or fingerprint template.
Local network and iCloud: Wi-Fi transfer lets devices on the local network exchange selected files. Stop the transfer service when you finish. iCloud features use the storage and permissions associated with your Apple account; manage them through the app’s synchronization options and Apple’s iCloud settings.

05 AI, text recognition, and speech features

When you request a cloud AI feature, the relevant question, selected text, document excerpts or document content, and conversation context may be sent through our services to Alibaba Cloud’s DashScope / Model Studio services to produce the requested result. Depending on the task, processing may involve a complete uploaded document rather than only the text visible on screen. Results and conversation history may be retained to provide the feature.

Offline speech synthesis processes text using a model on your device. If you select a cloud speech service, the text required for speech generation is transmitted to that service. Recognition or pronunciation features may process images or audio, depending on the feature you use.

Avoid submitting information you do not want processed by the selected service. You can choose not to use cloud AI or cloud speech features and can request deletion of associated information through the contact method below. A provider’s own retention or model-training terms depend on the service and configuration; this policy does not promise that every third-party service has zero retention.

The services below process information for their corresponding functions. Which services apply depends on your platform, region, and the features you use. Providers may receive data directly through their SDKs or through our servers. We require service providers acting on our behalf to protect personal information at a level consistent with this policy and applicable requirements, and to process it for the services they provide.

Apple: Sign in with Apple processes authentication and authorized account information; the App Store processes purchases and subscription transactions; iCloud processes files and synchronization data; Apple Push Notification service delivers notifications using device tokens.
Alibaba Cloud: Provides server hosting, object storage (OSS), diagnostic infrastructure, phone-number authentication where available, and DashScope / Model Studio AI services. Relevant information may include uploaded files, service logs, authentication information, and AI inputs and outputs.
Jiguang / JPush: Provides push notification delivery. Its SDK and services may process device and network information, a push registration identifier, account association information, and notification delivery events.
Amap: Provides maps and location-related functions. Its SDK may process device and network information and location information when the corresponding feature and permissions are used.
Google, Facebook, and WeChat: Provide optional third-party sign-in or sharing where available. They process authentication requests, authorized account/profile information, device and network information relevant to their SDKs, and content you choose to share.
Cloud drives and payment providers you select: Connected storage providers process authorization information and selected files. Payment channels offered in supported versions, such as Alipay or WeChat Pay, process payment orders and payment results under their own policies.
Other necessary disclosures: We may disclose relevant information when required by applicable law, to address fraud or security incidents, to protect lawful rights, or as part of a business transfer subject to appropriate privacy protections. Information you deliberately make public or share is available to the selected recipients.

07 Storage, retention, and security

Information may be stored on your device, on our service infrastructure, or with the cloud provider used for a feature. Our infrastructure includes Alibaba Cloud services in mainland China. Apple and other providers may process data in the regions where they operate. Using an online or connected service may therefore involve processing outside your country or region.

We retain account and service information for as long as needed to provide the relevant service and handle legitimate operational, security, dispute, and legal requirements. Local files remain until removed from the app or device. Cloud files and synchronized records remain subject to their storage service’s controls. Purchase records and security logs may need to be retained after a deletion request when required for those purposes.

When information is no longer needed, we delete it or make it no longer identifiable, subject to applicable retention requirements and backup cycles. Deleting a local copy or uninstalling the app does not necessarily delete synchronized data, third-party cloud copies, or your account. Backups may remain until they are replaced in the normal backup cycle.

We use access controls and other reasonable technical and organizational measures to protect information. No storage or transmission method can guarantee absolute security. Keep your devices, account credentials, and connected storage credentials secure.

08 Access, correction, and deletion

Manage your information: Use the app’s available profile, library, annotation, and synchronization controls to view, update, export, or remove information. Cloud storage content may also need to be managed directly with the provider.
Request account or data deletion: Use the contact method at the end of this policy to request deletion of your account or specific personal information. Identify the relevant account and the data you want deleted. We may verify account ownership and explain any information that must be retained and the reason. We handle requests in accordance with applicable requirements.
Withdraw permissions or stop optional processing: Revoke device permissions, disconnect a connected service, adjust synchronization or visibility settings, or stop using an optional feature. You may also contact us about withdrawing consent or exercising access, correction, deletion, restriction, objection, or portability rights available under applicable law.
Manage subscriptions separately: Account deletion or uninstalling the app does not by itself cancel an App Store subscription. Manage or cancel it in your Apple account’s subscription settings. Other payment channels have their own cancellation procedures.

09 Children’s privacy

CoCo Reading is a general-purpose reading tool. Children should use it with appropriate parent or guardian involvement and in accordance with applicable age and consent requirements. If you believe a child has provided personal information without the required authorization, contact us so that we can review the situation and address the information appropriately.

10 Website and local storage

Our website’s hosting infrastructure processes ordinary request information, such as IP addresses, requested URLs, and browser information, to deliver pages and maintain security. Some other website pages load Google Fonts and Alibaba Cloud’s browser monitoring service, which can receive network, performance, error, and interaction information.

This privacy policy page displays its text without requiring an account, cookies, or client-side JavaScript, and does not load those external font or browser monitoring services. The app uses local storage and secure device storage for settings, reading data, and authentication information required for its features.

11 Changes to this policy

We may update this policy when our features, data practices, or applicable requirements change. The effective and last-updated date appears at the top. For material changes, we will provide an appropriate notice and obtain further consent where required. The English and Simplified Chinese pages describe the same policy.