Privacy Policy
Effective August 21, 2026 · Last updated August 21, 2026
oto turns text into speech and keeps the audio in your library. This policy explains what data that involves, who touches it, and what control you have. The short version: we store what the product needs to work, we send your text to a speech provider to make the audio, and we don't run analytics, ads, or trackers.
What we collect
- Account — your email address (sign-in and account identity), a username if you claim one, and an avatar photo if you upload one.
- Content — the text you convert to speech, the generated audio files, and the titles, summaries, emoji, tags, language, and mood labels attached to each audio. Those labels are supplied by the AI assistant you use oto through (for example Claude) when it calls oto; we store them with the audio.
- Usage — playback positions (so you can resume), when an audio was last played, and a running count of how much audio you've generated (your quota).
- Social — who you follow, which audios you've saved, and the collections you create.
- Billing — if you subscribe, your Stripe customer id and subscription status. Your card details go directly to Stripe and never touch oto's servers.
- Device — nothing. No analytics, no advertising identifiers, no tracking, no fingerprinting.
How we use it, and on what basis
We use this data to provide the service you asked for: generating audio, storing your library, syncing playback across devices, running the social features you opt into, and billing the paid plan. For users in the EU/EEA and UK, the lawful basis for all of that is performance of a contract (these are the features you signed up for). Keeping quota counters, preventing abuse, and securing the service rest on our legitimate interest in running oto safely. We don't use your data for anything else — no profiling, no selling, no sharing for advertising. We have never sold or shared personal information as those terms are defined in the California Consumer Privacy Act.
Who processes it
oto uses a small set of processors, each receiving only what its job needs:
| Processor | What it receives | Why |
|---|---|---|
| OpenAI | The text you convert (and optional delivery instructions) | Speech synthesis for the built-in voices |
| Fish Audio | The text you convert | Speech synthesis when you pick a Fish voice |
| Stripe | Your email and payment details (entered on Stripe's pages) | Subscription billing |
| Resend | Your email address | Delivering sign-in codes and links |
| Railway | Everything above at rest | Hosts oto's servers, database, and audio storage |
Your text is sent to exactly one speech provider per generation — the one behind the voice you chose. There are no other third parties.
What's public
If you claim a username, your profile page shows your username, your avatar, and the audios you have set to public (their titles, covers, and playback). Audios set to followers, friends, or private don't appear there. Separately, every audio has a share link: anyone who has the link can listen, whatever the visibility setting — visibility controls where an audio is listed, not whether a link you handed out works. Share pages are public web pages and may be cached by browsers and intermediaries.
Retention and deletion
Your audio, its source text, and its metadata are kept until you delete that audio or delete your account. Deleting an audio removes it everywhere — from your library, from share links, and from other users' saves and collections, which reference your original. Deleting your account (built into the app, no email required) removes your account data and your stored audio files.
The iOS app can keep downloaded copies of audios and resume positions on your device. Those copies live on your device under your control; deleting the app or the download removes them.
Your rights
You can see everything you've generated in your library, fix your username and avatar in the app, delete individual audios, and delete your entire account — all in-app, no request needed. If you want a copy of your data in a portable format, or anything the app doesn't cover (access, rectification, erasure, restriction, objection, portability), email ijonathanvs@gmail.com and we'll handle it. EU/EEA and UK users can also complain to their local data protection authority; California residents have equivalent rights under the CCPA/CPRA and we honor them without discrimination.
International transfer
oto runs on infrastructure in the United States. If you use oto from outside the US (including the EU/EEA and UK), your data is transferred to and stored in the US. We rely on our processors' safeguards (such as standard contractual clauses and Data Privacy Framework participation, where applicable) for those transfers.
Children
oto is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has an account, contact us and we'll delete it.
Cookies
oto sets a single strictly-necessary session cookie to keep you signed in on the web. That's it — no analytics cookies, no ad cookies, no third-party trackers, which is why there's no cookie banner.
Changes
If this policy changes, we'll update the date above; for material changes we'll notify you in the app or by email before they take effect.