Privacy Policy
Yomu is published by Mobile Alchemy Ltd ("we", "us"). This policy explains what the Yomu app for iPhone, iPad and Mac sends off your device, who receives it, and how to turn each part off.
In short
- No account. Yomu doesn't ask for your name, email address or phone number. Your library, reading history, bookmarks and downloads stay on your device, and in your own iCloud if you turn on sync. The exceptions are what the features below send when you use them.
- Ads in the free version on iPhone and iPad. Ads come from AppLovin, Google AdMob and Liftoff. They can use your advertising identifier only if you allow tracking. Yomu Premium removes ads, and the Mac version has none.
- A random install ID. Yomu creates one on your device. It goes with our own analytics and crash reports, with problem reports you send, and with coin purchases, and it is your customer ID at Adapty, which handles subscriptions.
- Analytics and crash reports. Yomu sends usage events and crash reports to our own servers to see how it is used and to fix crashes. From version 4.0 you can turn either off in Yomu's Settings → Privacy, and in the EU, the EEA and the UK Yomu asks you first.
- A few features use outside services. AniList suggestions send AniList the titles of series you open from online sources; you can turn this off. AI translation, which you have to choose, uploads the pages you translate.
- What you read stays yours. We never sell it, and we never give it to ad networks.
The install ID
The first time Yomu runs, it creates a random ID for that installation. It isn't made from your device's identifiers, and it doesn't say who you are. It is kept on the device and deleted with the app, though restoring a backup of your device brings it back. Yomu uses it to keep your coin balance, to group analytics and crash reports from the same installation, to find a problem report you send, and as your customer ID at Adapty.
Ads (free version on iPhone and iPad)
The free version shows ads: a banner while you read, a full-screen ad when you open or return to Yomu, sometimes one between chapters, and ads you choose to watch for temporary Premium access or extra downloads. Ads are served through AppLovin MAX, which also requests ads from Google AdMob and Liftoff (Vungle). Yomu Premium removes ads, and Yomu doesn't start the advertising SDKs for subscribers. The Mac version doesn't include them at all.
To choose, show and measure ads, and to prevent ad fraud, the ad networks receive from your device:
- Device and app information, such as model, operating system, language, screen and app version, and your IP address, from which they estimate your approximate location.
- Ad activity: which ads were shown, tapped or watched to the end.
- Identifiers: the identifier Apple gives each developer's apps on your device (the identifier for vendor) and, only if you allow tracking, your device's advertising identifier.
Yomu doesn't give the ad networks your library, your reading history or anything about what you read.
Tracking permission. Before the first ad, Yomu shows a screen explaining what the ads are for, then Apple's tracking prompt. If you allow tracking, the ad networks may use your advertising identifier to personalize ads and to measure them across other companies' apps and websites. If you ask Yomu not to track, the identifier stays hidden and the ads are less personalized, but they still appear. You can change your answer at any time in iOS Settings → Privacy & Security → Tracking.
Consent where the law requires it. In places such as the EEA and the UK, Google's consent form (a certified consent management platform) asks for your choices before any ad is requested. A Privacy Options button in Yomu's Settings lets you change them later.
Each network's own policy says what it does with this data: AppLovin, Google, Liftoff.
Subscriptions, coins and purchases
Payments go through Apple, and we never see your card or payment details.
- Yomu Premium is managed with Adapty, which checks your purchases with Apple and tells Yomu whether Premium is active. Adapty receives your purchase and subscription history, which subscription offers you were shown, the Yomu install ID, its own ID for your installation, your device model and screen size, operating system version, language, region and time zone, the app version, your IP address (Adapty's SDK looks it up with the ipify.org service), the identifier for vendor and, only if you allow tracking, the advertising identifier. Adapty also receives Apple's Search Ads attribution token (see below). See Adapty's privacy policy.
- Coins pay for AI translation. When you buy coins, the App Store's signed record of the purchase is sent to our server with your install ID. We check that it is genuine and keep a record, under your install ID, of the coins you buy and spend. Coin purchases are also reported to Adapty for sales statistics.
Yomu's analytics and crash reports
To see how Yomu is used and to fix crashes, Yomu sends usage events and crash reports to our own servers at yomureader.app, which run on Cloudflare. No third-party analytics SDK is involved, and none of it goes to advertisers.
From version 4.0, on iPhone, iPad and Mac: if your App Store country or your device's region is in the EU, the EEA or the UK, Yomu asks before sending any, and nothing is recorded until you allow it. Elsewhere both are on by default. Either way you can turn each one off, or back on, at any time in Yomu's Settings → Privacy (Share Analytics, Share Crash Reports). While one is off nothing of it is recorded or sent, and whatever was still waiting on your device to be sent is deleted. We can also switch collection off from our side.
Before version 4.0, collection on iPhone and iPad was switched on or off from our side only, and the Mac app never sent analytics or crash reports.
- Usage events: when a session starts and how long Yomu is in use, the screens you view, and events such as adding a series to your library, adding or installing a source, opening a chapter, seeing a subscription offer or buying one, answering the rating prompt, and, from version 4.1, whether you were offered, and whether you watched, an ad for a free Premium window and how you answered the age questions described below. An event names the source for extension sources (its name and ID), and only the kind of source for your own files and servers. Also sent: timings (such as how long the reading engine took to start), error messages, and daily performance figures from Apple's MetricKit (launch time, memory use, and how often the system closed the app).
- Crash reports: crash, hang, heavy disk-write and CPU reports from Apple's MetricKit, and the details of unhandled errors: the call stack, the error, and when it happened.
- Sent with each batch: the install ID, a random session ID, the app version and build, the device type and model, the OS version, your region and language settings, and your time zone. From your IP address, Cloudflare adds your country, region and city. We don't store the IP address itself.
From version 4.1: Yomu Originals asks whether you are 18 or older the first time you open the store. Your answer (yes or no) is sent with analytics, and added to the Yomu Originals events that follow, so we can see which series adults and younger readers read. Yomu may also show a one-time, optional card on Home, after you finish your first chapter, asking your age group (under 18, 18-24, 25-34, 35-44, 45 and over, or prefer not to say). Your answer is sent with analytics and is never tied to your name, since Yomu has no account. Closing the card or choosing prefer not to say sends nothing about your age, and the card does not come back. Both answers are off when Share Analytics is off in Settings → Privacy. Yomu has no under-13 choice and does not knowingly collect data from children under 13.
These events don't include the titles you read or your searches. From version 4.0, the events for adding a series to your library, using a source, and finishing or downloading a chapter also say what kind of series it is: its format (such as manga, webtoon or comic), its genres and themes from a fixed list, whether it is for adults, and its language. That is never its title, its tags as written or anything you searched for. In Incognito mode they aren't sent.
Apple Search Ads. Apple's AdServices framework gives each installation a token that tells whether an Apple Search Ads ad led to the install. While analytics is on, Yomu sends this token once to our server. The server asks Apple whether one of our campaigns led to the install, and stores Apple's answer with your install ID (such as the campaign, ad group, keyword and country). Adapty does the same for its sales statistics. Apple doesn't require tracking permission for this.
Apple's crash reports. If you share analytics with app developers (iOS Settings → Privacy & Security → Analytics & Improvements), Apple also sends us crash logs and diagnostics that don't identify you.
Yomu Originals
Yomu Originals are comics and novels made by the Yomu team, which Yomu downloads from yomureader.app. Free chapters download without any identifier.
- Unlocked chapters. To open a chapter you unlocked with Yomu Premium or a Series Pass, Yomu sends our server the App Store's signed record of the purchase and, where the device supports it, an App Attest check that the request comes from a genuine copy of Yomu. The server keeps a one-way hash of the purchase's ID with a one-way hash of the device's App Attest key (or of your network, when App Attest isn't available) and when they were last used, so that one purchase can't be shared across many devices; these are deleted after 30 days without use. When you use Yomu Premium's free Series Pass for the month, the series you chose is recorded against a one-way hash of the subscription. If you buy Lifetime after subscribing, Yomu sends both purchase records once, and the server keeps their two hashes linked, so that the series you opened with your subscription stay open. The server also counts these requests by series, chapter, language and country, with no identifier, to see what is read.
- Rankings. A vote on a series is stored with your country and a one-way hash of your device's App Attest key or install ID, never the key or the ID itself, so that you can change your vote and each device votes once.
- Top Readers. Top Readers is a ranking of readers by Yomu Originals chapters finished. It is optional and off until you tap Join, and it needs Share Analytics to be on in Settings → Privacy. It is for readers who are 18 or older; in version 4.2 the app also lets a reader who is 13 or older join. If you join, Yomu sends our server a made-up name (two numbers that your app turns into words, never text you typed), your App Store country, the Originals chapters you finish, and a one-way hash of your device's App Attest key or install ID, never the key or the ID itself. The ranking shows other readers only the made-up name, your number of chapters and your rank, and the My Market view uses the country to show readers of the same App Store country. This is used to run the ranking, not for advertising or tracking, and none of it goes to advertisers. You can leave at any time on the same screen: your name and every chapter credit are then deleted from our server. We keep them only while you are on the ranking.
- Reading. While analytics is on, Yomu's analytics record how long Yomu Originals chapters are read and how far readers get, to decide what to make next.
- Content Limits. Your content filter and passcode choices stay on your device. Whether you answered that you are 18 or older is sent with analytics, as described under "From version 4.1" above, together with the install ID and never your name.
Report a Problem
From the reader you can report a chapter that doesn't load or looks wrong. A report is sent only when you tap Send, even while analytics is off. It contains:
- what's wrong (the reason you pick) and your note, if you write one (up to 300 characters);
- the series title, the chapter number, the page you were on, how many pages loaded, and any error shown;
- the reading mode, and whether translation was on and which kind;
- for extension sources, the source's name and ID and the chapter's ID and web address. For your own files and servers, only the kind of source is included;
- the same app and device details, install ID and approximate location as analytics events.
Reports are stored on our servers and used only to find and fix what broke.
AniList suggestions
The Search tab can show lists from AniList (trending, popular, top rated and more), and a series page can show More Like This. Yomu reads these from AniList's public service without signing in. To find recommendations for a series, Yomu sends AniList the title of the series you open. This only happens for series from online sources: titles from your own files and servers, and series you have locked, are never sent. Like any website, AniList also sees your IP address. The answers are cached on your device. To turn this off, go to Settings → Privacy → Suggestions from AniList in Yomu. See AniList's terms and privacy policy.
Translation
- On-device translation is the default. It finds and translates the text with Apple's Vision and Translation frameworks on your device, and the page never leaves it. Apple may download language files the first time you use a language.
- AI translation is used only if you choose it as the translation engine, and it costs coins. For each page you translate, Yomu uploads the page image, the source and target languages and your install ID (for your coin balance) to our server. The server passes the image and languages, without your install ID, to MangaTranslate, the translation service we use. Yomu then downloads the translated page from MangaTranslate. Our server doesn't keep the images: it records only that a page was translated and a coin was spent. MangaTranslate handles the images under its own privacy policy. Translated pages are cached on your device.
Upscaling, colorizing and "The Story So Far" recaps also run entirely on your device.
Security checks and background requests
- App Attest. On iPhone and iPad, the first time you use AI translation or buy coins, Yomu uses Apple's App Attest service to prove to our server that requests come from the genuine app. This creates a key on your device. Our server keeps the key's ID and public key with your install ID, and deletes them after 400 days without use.
- Background requests. Yomu downloads its signed settings file and reading-engine updates from our servers. It also checks the App Store for a newer version of Yomu (sending your region), downloads the source lists from the repositories you add, and loads source icons from Google's favicon service, which receives the source's web address. These requests carry no ID from Yomu. As with any website, the servers see your IP address.
Services you connect
Yomu connects to services you opt into, directly from your device:
- Trackers (AniList, MyAnimeList, Kitsu, MangaUpdates): when you sign in, Yomu reads your list and sends your reading progress and status for the series you link. Each service's own privacy policy applies. Your sign-in is stored on your device.
- Self-hosted servers and network shares (Komga, Kavita, Jellyfin, OPDS, and SMB, NFS or WebDAV shares): your credentials and requests go straight to the address you enter. Yomu never routes this through our servers.
- Source extensions: Yomu fetches catalogs, search results and chapters directly from each source you enable, as a web browser would. It may open a source's page in a built-in browser to pass the site's security check. These services see your IP address and what you ask them for, under their own privacy policies.
iCloud sync
iCloud Sync is off until you turn it on in Settings → Backup & Sync. When it's on, your library, read chapters, updates, history and bookmarks are kept as files in Yomu's folder in your iCloud Drive, and a few settings (such as reading direction and theme) are kept in iCloud's key-value storage. This data stays in your Apple account, and we can't access it. Apple encrypts it in transit and on its servers, and encrypts it end to end if you have turned on Advanced Data Protection.
App Lock
App Lock uses Face ID, Touch ID or your device passcode through Apple's system prompt. Yomu learns only whether you unlocked, and never receives biometric data. If you unlock with a PIN instead, Yomu keeps only a salted hash of it in the keychain on your device. The PIN is never stored in iCloud Keychain and never sent anywhere.
Camera, photos and local network
- Camera: when you choose, Yomu uses the camera to scan sharing codes (QR codes for sources or a library), and the TrueDepth camera for Eye Blink Navigation (see below). Camera images are processed on your device, and are never stored or sent.
- Photos: Yomu asks for add-only access when you save a page to Photos, so it can't see your photo library. When you pick a custom cover, Apple's photo picker gives Yomu only the image you choose.
- Local network: used for Wi-Fi Transfer (sending files to Yomu from a browser on the same network), for sharing your library with a nearby device, for finding SMB drives, and for reaching the servers and shares you add. These connections stay on your network and don't go through our servers.
TrueDepth camera & face data
Yomu offers an optional "Eye Blink Navigation" feature that uses the device's TrueDepth camera and Apple's ARKit face-tracking technology to detect eye blinks for hands-free page turning while reading.
- What data is collected — the TrueDepth camera captures facial geometry data (ARKit blend shape coefficients such as
eyeBlinkLeftandeyeBlinkRight) in real time to detect blink gestures. - How the data is used — face data is used solely to detect eye blinks and translate them into page-turn commands within the reader. It is not used for any other purpose.
- On-device processing only — all face data is processed entirely on your device in real time. No face data, facial geometry, or biometric information is ever sent to our servers or any remote server, stored on disk, written to a database, or transmitted over the network.
- No sharing with third parties — face data collected through the TrueDepth camera is never shared with, disclosed to, or made available to any third party, including analytics providers, advertising networks, or data brokers.
- Not used for marketing, advertising, or data mining — in compliance with Apple's App Store Guidelines, face data gathered from ARKit and the TrueDepth camera is never used for marketing, advertising, use-based data mining, or any purpose other than the hands-free page-turning feature described above.
- No sale of face data — we do not sell, license, or monetize face data in any form.
- Data retention — face data exists only in volatile memory during an active reading session while Eye Blink Navigation is enabled. The data is immediately and permanently discarded when the feature is turned off, the reader is closed, or the app is terminated. No face data is ever persisted to storage.
- User control & consent — Eye Blink Navigation is disabled by default and must be explicitly enabled by the user in the reader settings. The app requests camera permission through iOS's standard permission prompt before accessing the TrueDepth camera. You can revoke camera access at any time in iOS Settings → Yomu → Camera, or simply disable the Eye Blink Navigation toggle in the reader settings. Because no face data is ever stored, there is no data to delete — disabling the feature immediately stops all collection.
- Device requirement — this feature requires an iPhone or iPad equipped with a TrueDepth front-facing camera (Face ID devices). It is not available on devices without TrueDepth hardware.
What stays on your device
Your library, reading history and progress, bookmarks, downloads and settings are stored on your device, and so are your tracker and server sign-ins. A backup file you make contains all of this, sign-ins included, so keep it private. Deleting Yomu deletes this data from the device.
Who receives data
Yomu sends data to these companies, as described above:
- Apple, for purchases, App Attest, Search Ads attribution and iCloud;
- Cloudflare, which hosts our servers and this website;
- Adapty, for subscriptions;
- AppLovin, Google and Liftoff, and the advertisers who buy ads through them, for ads in the free version on iPhone and iPad;
- MangaTranslate, only when you use AI translation;
- AniList, for suggestions, unless you turn them off;
- the trackers, servers and sources you connect yourself.
Some of them process data in the United States and other countries. We may also disclose data when the law requires it. Some US state laws treat letting ad networks use device data for personalized ads as a "sale" or "sharing" of personal information. To opt out, ask Yomu not to track (iOS Settings → Privacy & Security → Tracking), or subscribe to Premium, which removes ads.
Legal bases (EEA and UK)
We process data to provide the features you use, such as subscriptions, coins, translation and problem reports. We rely on our legitimate interests to keep Yomu working, secure and free of fraud. From version 4.0, analytics and crash reports in the EEA and the UK rely on your consent, which Yomu asks for and which you can withdraw at any time in Settings → Privacy; earlier versions relied on our legitimate interest in understanding how Yomu is used. Ads are personalized only with your consent, which you can withdraw at any time as described above.
Data retention & deletion
- On your device and in your iCloud: kept until you delete it. Deleting the app removes local data. To delete iCloud data, go to iOS Settings → [your name] → iCloud → Manage Storage → Yomu and delete its data.
- Analytics events, crash reports and problem reports: Cloudflare's analytics store keeps events for three months. Our database keeps copies of events, crash reports, problem reports and Search Ads attribution for as long as they help us run and improve Yomu.
- Coin records: kept as long as we need them for your balance, our accounts and fraud prevention.
- App Attest keys: deleted after 400 days without use.
- Yomu Originals: hashed purchase and device records are deleted after 30 days without use; monthly Series Pass choices and Rankings votes are kept while Yomu Originals runs.
- Top Readers: kept while you are on the ranking; leaving deletes your name and chapter credits.
- Adapty, the ad networks, MangaTranslate and AniList: they keep data under their own policies.
- Trackers and servers: to disconnect, remove your sign-in in Yomu's settings. Nothing about them stays with us, because we never had it.
Your choices and rights
- Stop ad tracking in iOS Settings → Privacy & Security → Tracking. Where shown, change ad consent with Privacy Options in Yomu's Settings. Remove ads with Yomu Premium.
- Turn off AniList suggestions in Settings → Privacy.
- Keep every page on your device by using on-device translation.
- Problem reports are only sent when you choose to send one.
Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict its use, and to receive a copy of it. To make a request, email [email protected]. We don't know who you are, so data we hold can only be found by its install ID. We will tell you how to send us yours. You can also complain to your data protection authority.
Children
Yomu is a general-audience app and isn't directed at children. We don't knowingly collect personal information from children under 13 (or the minimum age where you live). Some sources may surface mature content. Adult sources stay hidden until you turn on Show NSFW Content in Settings → Privacy.
This website
yomureader.app is hosted by Cloudflare, which processes your IP address to deliver pages and protect the site. The site sets one cookie, yomu_lang_choice, which remembers your language for a year. It has no analytics, advertising or tracking cookies.
Changes
When what Yomu collects changes, we update this page and the date at the top.
Contact
Questions about this policy: [email protected].