Yonto
English

Privacy policy

Last updated

The short version

  • The Yonto apps have no account, no ads, no analytics and no crash reporting. Your sources, history and settings stay on your device.
  • If you never buy Pro, we hold nothing about you.
  • If you buy Pro, we keep your email address, your licence and the devices you use it on, so the licence works and you can manage it. Paddle takes the payment; we never see your card.
  • You can ask us for a copy of your data, or to delete it, at support@yonto.app.

Who we are

Yonto is made by Jasper Kang, a sole trader in New Zealand, who is responsible for your data under this policy. Contact: support@yonto.app.

The apps

What stays on your device. Your sources and their sign-ins, plugins, watch history, playback positions, the PIN lock and your settings are stored only on your device. They are not backed up to us, and we can’t see them.

What the apps send, and to whom.

  • To the sources you add. Yonto talks to the media servers, plugins and repos you add, to browse and play from them. What they receive and keep is up to them and their own privacy policies.
  • To check for updates. Yonto asks GitHub which version is newest. The request carries nothing about you beyond what any web request does, such as your IP address.
  • To the licence service, only if you use Pro. Turning Pro on sends your licence key (or a code shown on your TV), a device identifier, the kind of device (Android TV, Android or iPhone) and its name (its maker and model). The device identifier is a one-way hash, made for this use only, of an identifier for your device: on Android its system identifier, on iPhone one Yonto creates and keeps on it. It keeps the licence tied to that device. About once a month the app sends its licence back to be renewed, which is how a refund or a removed device takes effect. A free app sends nothing to the licence service.

yonto.app

The website is a static site. It sets no cookies and runs no analytics. If you pick a theme, your browser remembers it on your device. Amazon Web Services hosts the site and, like any host, sees the requests it serves, including your IP address. Downloads and the feedback buttons go to GitHub, where an issue you file is public.

The account site and the licence service

When you buy Pro, sign in at account.yonto.app, or turn Pro on in the app, we keep:

  • Your email address, and the language you use the site in.
  • Your licence: its status and what it includes. We store only a hash of your key, never the key itself, which is why a lost key is reissued rather than resent.
  • Your devices: the hashed identifier, the kind of device and its name, and when it was first and last seen. Each also has a random secret behind the unlock code that gets you past a forgotten Master PIN; the device keeps a copy to check the code, and drops it when the device is removed or the licence revoked.
  • Your orders: Paddle’s transaction id, the plan, the amount and currency, any discount code, and whether it was refunded. We also keep the order messages Paddle sends us, which Paddle generates from your purchase.
  • A security log of what happened to your account and licence (for example, a device added, a sign-in, or a licence revoked and the reason we gave), with the IP address it was done from.
  • Your session: while you use the account site, the IP address and browser you use it from.
  • Notes our support writes when helping you.

Cookies. The account site uses only the cookies it needs to work: a session cookie while you’re signed in, one that remembers your language when you choose one or follow a link from this site, one that links a checkout to your browser for two hours, and one that protects forms. The checkout is Paddle’s: the page loads it from Paddle, and it sets its own cookies under Paddle’s privacy policy.

Emails. We email you your licence key, sign-in links you ask for, a notice when a new device is added to your licence, a notice when your email address is changed, and, if we revoke your licence, a notice saying why, unless the law stops us. We send no marketing.

Why we use it

  • To provide what you bought: issuing, activating and renewing your licence, and letting you manage it.
  • To keep it safe: stopping fraud and abuse, such as a key shared widely, and investigating problems.
  • To meet our legal obligations, such as keeping records for tax.

In the terms of the EU and UK GDPR, the bases are the contract with you, our legitimate interest in security, and legal obligation.

Who else handles it

  • Paddle, the merchant of record, which sells Pro to you and handles payment and tax. For the payment, Paddle is responsible for your data under its own privacy policy.
  • Amazon Web Services, which hosts our server and the website and delivers our emails, and processes data only on our instructions.
  • GitHub, for downloads and feedback, as above.

We don’t sell your data or share it with anyone else, unless the law requires it. These companies may process data outside your country, including in the United States and the European Union.

How long we keep it

  • Your email address, licence and devices: for as long as your licence exists, until you ask us to delete them.
  • Orders, and the order messages from Paddle: for 7 years after the end of the New Zealand tax year you bought in (it ends on 31 March), as New Zealand tax law requires.
  • The security log: its entries are kept, and their IP addresses are erased after 12 months.
  • Support notes: for as long as your account exists; they are deleted with it.
  • Sign-in links and TV codes: they expire within minutes, and are deleted a day later.

Your rights

You can ask us to:

  • tell you what we hold about you and give you a copy,
  • correct it,
  • delete it, which deletes your account, licence and devices and turns Pro off.

Deleting doesn’t remove everything. Your orders stay as long as tax law requires, and so do Paddle’s order messages about them. The security log keeps its entries: they no longer point to your account, but they keep their IP addresses until those are erased at 12 months, and they keep anything written in them, such as the reason a licence was revoked.

Write to support@yonto.app from the address on your licence. We answer within 20 working days.

If you’re unhappy with how we handled your data, you can complain to the Office of the Privacy Commissioner in New Zealand, or to the data protection authority where you live.

Security

We store licence keys and sign-in links only as hashes, and restrict our admin tools to our own network with two-factor sign-in. No system is perfectly secure, and if a breach puts you at risk we will tell you.

Children

Yonto is not directed at children, and we don’t knowingly hold data about anyone under 16.

Changes

If we change this policy, the date at the top changes. If the change is significant, we will email the people it affects.