Privacy Policy

Recito ("we," "us," or "our") is an AI-powered text-to-speech application operated by SonetCraft. This Privacy Policy explains what data we collect, how we use it, and the controls you have over it. By using Recito you agree to this policy.

We process your documents using third-party AI services to provide narration. Your documents are your property — we only process them to deliver the service you requested.

Account information

When you create an account we collect your email address and, optionally, your display name. This is used to authenticate you and sync your library across your devices.

Documents and content

Files you import (PDFs, EPUBs, DOCX, etc.) are uploaded to our secure cloud storage to enable cross-device sync and AI narration. The text is extracted and sent to our AI providers to generate audio. We do not use your documents to train AI models, and we do not share them with other users.

Usage data

We collect information about how you use the app — reading progress, playback speed, voice preferences — to sync your experience across devices and improve the product.

Device information

We collect your device type, OS version, and IP address for security and fraud prevention. We do not collect advertising identifiers.

• To provide, operate, and improve the Recito service
• To sync your library, progress, and preferences across your devices
• To generate AI narration of your documents using third-party providers
• To process payments through Apple's App Store and RevenueCat
• To enforce our Terms of Service and prevent fraud
• To send transactional emails (e.g., account security, billing receipts) — no marketing without consent

Recito uses the following third-party services to operate. Each has their own privacy policy:

We do not sell your data to third parties. We share data with the above providers only as necessary to deliver the service.

We retain your account data and documents for as long as your account is active. When you delete your account, all your data — documents, audio cache, cover art, preferences, and account records — are permanently deleted from our servers within 30 days. Backups may persist for up to 90 days before being overwritten.

You can delete your account at any time from Profile → Delete account in the app.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and all associated data
• Export your data in a portable format
• Restrict certain processing of your data
• Object to processing based on legitimate interests

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

All data is transmitted over HTTPS. Stored files are encrypted at rest using AES-256. We use Row Level Security (RLS) in our database to ensure each user can only access their own data. Authentication tokens are short-lived and rotated regularly.

Despite our best efforts, no system is perfectly secure. If you discover a security vulnerability, please contact us at [email protected] before disclosing it publicly.

Recito is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy occasionally. When we do, we will update the "Last updated" date above and, for material changes, notify you by email or in-app notification. Continued use of Recito after changes constitutes acceptance of the updated policy.

If you have questions about this policy or how we handle your data: