What Liiro keeps. What it leaves behind. And what it will never touch. A transparent legal accounting for the Liiro Android reader.
Zero
No AdMob, no brokers, no tracking pixels.
Zero
No GPS or coarse location permissions.
TLS 1.3
Hardware-backed Android KeyStore at rest.
1-Tap
Instant in-app purge or web request URL.
This Covenant governs the mobile application Liiro (Google Play identifier: com.aiopscamp.liiro), our synchronized backend microservices running at app.liiro.io, and our literary catalogue at liiro.io.
The service is authored and published by AiOpsCamp and developer Humayun Rashid("we", "us", or "Service Provider") as a dedicated literary reading and neural audio sanctuary.
Unlike ad-funded software that converts its readers into behavioral commodities, Liiro operates on a classic patron subscription model. We collect only what is mathematically required to synchronize your reading position between phone and audio stream, enforce streaming quotas, and protect your library.
Tap each lens to inspect the physical boundaries of data in Liiro:
These items remain strictly on your local phone hardware and are never transmitted to outside advertisers:
Google Play requires developers to complete an exact Data Safety disclosure questionnaire. Below is our official declaration ledger:
| Category | Specific Fields | Functional Rationale | Status | Third Parties |
|---|---|---|---|---|
| Personal Info | Name, Email, Google User ID, Avatar URL | User account profile, authentication, password recovery | MANDATORY | Auth subprocessor (Google / Firebase) |
| Financial Info | Subscription status, Google Play Order ID | In-app purchase validation via Google Play Billing & RevenueCat | OPTIONAL (PRO) | Google Play Billing / RevenueCat |
| App Activity | Reading timestamps, chapters completed, streak records | Whispersync text-to-audio sync, annual reading challenge pacing | FUNCTIONALITY | Never shared |
| Photos & Media | Exported quote card image saved to device storage | User-initiated saving of stylized quote cards to device gallery | OPTIONAL (ACTION) | Never (Local device only) |
| Device Identifiers | Device model, Android OS version, app build code | Audio decoder compatibility, crash prevention, bug diagnostics | AUTOMATIC | Crash diagnostics only |
In strict adherence to Google Play's Policy on device permissions, Liiro requests only the minimal system privileges necessary to maintain an uninterrupted reading and listening session:
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACKEXPLICITLY BLOCKED & EXCLUDEDZero Foreground Background Services: Liiro strictly blocks and removes Android 14+ foreground media playback services (FOREGROUND_SERVICE_MEDIA_PLAYBACK). Audio playback operates entirely within active app sessions and standard audio focus, eliminating persistent background processes and guaranteeing no unwarranted background device execution.
android.permission.POST_NOTIFICATIONSUSER OPT-INReading Streak & Chapter Alerts: Dispatches voluntary reminders for daily reading streaks, annual reading goals, and notifications when newly narrated chapters arrive. You may grant or revoke this permission at any time in Android System Settings.
android.permission.WAKE_LOCKAUDIO STABILITYAudio Stream Continuity: Prevents the mobile CPU from entering a deep sleep state while an audiobook is actively streaming via Bluetooth, car audio, or headphones.
android.permission.READ_MEDIA_VISUAL_USER_SELECTED / WRITE_EXTERNAL_STORAGEUSER-INITIATED SAVEQuote Card Export:Invoked strictly when you tap "Save to Photos" on an extracted literary quote. Liiro writes only that specific graphic file. We never inspect, scan, or index your personal photos.
NO GPS or Geolocation Tracking
Liiro does not declare ACCESS_FINE_LOCATION or ACCESS_COARSE_LOCATION. Your physical location is never tracked.
NO Microphone or Voice Recording
Liiro is strictly an audiobook player. Microphone permissions are disabled in the app build.
NO Third-Party Ad Networks
We do not integrate Google AdMob, Meta Audience Network, or cross-app ad tracking SDKs.
NO Contact or SMS Access
We never request permission to inspect your personal contacts, call history, or text messages.
NO Sale of Personal Data
We do not sell, rent, or trade your reading habits, streaks, or identity to data aggregators.
NO Keystroke Logging
We only record bookmarks, highlights, and bookshelves that you explicitly create inside your private library.
Google Play Services & Sign-In
Manages Google single sign-on authentication and Google Play Store in-app billing.
Google Privacy Terms →Firebase Authentication
Authenticates user credentials, token exchanges, password resets, and session security.
Firebase Privacy →RevenueCat
Validates Google Play Store receipts and manages Pro access entitlements across your devices.
RevenueCat Terms →Hetzner Cloud & Storage
Hosts our encrypted MongoDB database replica set and S3 CDN in Germany (GDPR compliant).
Hetzner Compliance →In strict compliance with Google Play's Account Deletion Policy, users have the unconditional right to request permanent deletion of their account and all associated data. We provide both an instant in-app workflow and a public web request URL:
If you have uninstalled the app or lost access to your device, contact our Data Protection Officer:
Subject: [Data Deletion Request] - Liiro Account
Data Permanently Purged Upon Erasure:
User profile record, email, and display name
Reading history and completed chapter records
Personal highlights, notes, and quote cards
Custom bookshelves and saved reading lists
Reading streak data and earned achievements
Authentication tokens and stored device records
Official Public Web Deletion Portal
Submit directly through our interactive form or copy the verification template.
Liiro uses Kokoro neural models and OpenAI Whisper timestamps to synchronize audio playback with the written page. We record only your active sentence index and audio timestamp so you can switch between reading and listening without losing your place.
Chapters downloaded for airplane mode are saved in sandboxed local storage (AsyncStorage). You can wipe all cached stories anytime inside app settings under "Downloads".
Liiro is not addressed to children under the age of 13. We do not knowingly solicit or collect personally identifiable data from children under 13 years of age.
If a parent or legal guardian discovers that a child under 13 has provided personal details without consent, please notify us immediately at [email protected]. We will promptly verify and permanently delete the corresponding account.
TLS 1.3 Transport
All network traffic between Android client and backend is encrypted via TLS 1.3 with strict HSTS.
Hardware KeyStore
Mobile authentication tokens are kept in hardware-backed storage via Expo SecureStore.
VPC Isolation
MongoDB databases are protected with role-based access in an isolated private cloud network.
Right to Access & Portability
You may request a copy of your personal library records, bookmarks, and reading challenge pacing data.
Right to Rectification
You can modify your display name, email, and reading preferences directly within the application.
Right to Erasure
You can permanently erase your entire library profile in-app or via our web deletion request URL.
CCPA "Do Not Sell" Pledge
We do not sell personal information for cross-context behavioral advertising.
Official Point of Contact
Have questions regarding our Google Play Data Safety declaration, or wish to exercise your rights? Contact our Data Protection Officer:
Publisher & Developer
AiOpsCamp / Humayun Rashid
Application: Liiro Ebook & Audio
Package: com.aiopscamp.liiro