Privacy Policy
Last updated: September 25, 2026
This Privacy Policy explains how redev.rx studio ("we", "our", or "us") collects, uses, and shares information when you use our apps, websites, and services, including MangaX, on iOS, Android, and the web. We are the data controller for this information under Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA").
Information We Collect
Depending on the app and the features you use, we collect:
- Account information: your email address, display name, and the identifier from Google or Apple if you sign in with them. Passwords are stored only in hashed form.
- Reading history (MangaX): the address, title, and cover image address of pages you scan in the in-app browser. It is synced to your account so you can continue on another device. You can delete any entry in the app.
- Text for translation (MangaX): the text recognised on a page you ask us to translate, its language pair, and any of your glossary terms that appear in it. The results are kept in a translation cache linked to your account, so you are not charged again for the same text.
- Purchases and balance: purchase and subscription status, product identifiers, token balance and usage, redeemed codes, and rewarded advertisement completions.
- Notification data: your device's push token, and which notifications you have read or dismissed.
- Device and diagnostic data: device model, operating system, language, app version, crash reports, and app attestation results.
- Technical data: IP address and request logs, used for security and to prevent abuse.
What Stays on Your Device
MangaX is designed so that the most personal parts of your reading never leave your device:
- Page images. Text is recognised on your device. We never upload the pages you read, only the recognised text you ask us to translate.
- Your offline library: saved and imported chapters, covers you choose, exported files, and your reading progress.
- Your glossary and settings: glossary terms are sent only as part of a translation request whose text contains them.
- On-device translation: if you use the on-device model, text is translated on your device and not sent to us.
- Your own AI provider keys: a key you add, such as for read-aloud voices, is stored on your device. Text you have read aloud is sent from your device directly to that provider under its own privacy policy, not through our servers.
How We Use Information
- Provide the service: sign-in, translation, history sync, notifications, and your balance
- Process, validate, and restore purchases, and apply redeem codes and rewards
- Keep the service secure, and prevent fraud, abuse, and automated misuse
- Diagnose crashes and improve reliability and performance
- Show advertisements, including rewarded advertisements you choose to watch
- Respond to support requests, and to copyright notices under our Terms of Service
- Comply with legal obligations
Legal Bases
Under the PDPA, we rely on:
- Contract: to provide the features you ask for, such as your account, translations, history sync, and purchases
- Legitimate interests: for security, abuse prevention, and crash diagnostics
- Consent: for notifications and for advertising tracking where your device asks for it. You can withdraw consent at any time in your device settings.
- Legal obligation: where the law requires us to keep or disclose information
Service Providers We Share With
We do not sell your personal information. We share it only with service providers that help us run our services, and only as much as they need:
AI translation providers (Google Gemini, DeepSeek, OpenAI, OpenRouter)
- Purpose: Translating the text recognised on pages you choose to translate
- Data: The recognised text, language pair, and glossary terms found in that text — never your name, email, or the page images
Firebase Cloud Messaging
- Purpose: Sending notifications, such as finished translations and announcements
- Data: Device push token, notification delivery data
Firebase Crashlytics
- Purpose: Crash reporting and diagnostics
- Data: Crash logs, device state, app version
Firebase App Check
- Purpose: Confirming requests come from a genuine copy of the app, to prevent abuse
- Data: Device attestation tokens from Apple App Attest or Google Play Integrity
Google AdMob
- Purpose: Showing rewarded and other advertisements
- Data: Advertising ID, IP address, device information
Sign in with Google / Apple
- Purpose: Signing in to your account
- Data: Account identifier, email address, and name if you allow it
Apple App Store / Google Play
- Purpose: Processing purchases and subscriptions
- Data: Purchase and subscription status, product identifiers
Cloudflare
- Purpose: Delivering our website and API securely
- Data: IP address, request metadata
Not every service is used in every app. We may also disclose information when the law requires it, or to protect our rights, our users, or the public.
International Transfers
Some of our service providers process data outside Thailand, including in the United States and, for translation by DeepSeek, in China. When we transfer personal data abroad, we do so as permitted by Section 28 and Section 29 of the PDPA, for example because the transfer is needed to provide the service you asked for, or under the provider's contractual safeguards. We keep what is transferred to a minimum: AI providers receive text to translate, not your identity.
Advertising & Tracking
- iOS: we ask your permission before using your advertising identifier for tracking. You can change this at any time in Settings > Privacy & Security > Tracking.
- Android: you can reset your advertising ID or opt out of personalised ads in your device's Google settings.
Data Retention & Security
- Account data is kept while your account exists.
- Reading history and the translation cache are kept until you delete them in the app or delete your account.
- Purchase records are kept as long as tax and accounting laws require.
- Security and request logs are kept for a limited period and then deleted.
When you delete your account, we delete or anonymise your personal data, except where we must keep it by law. We use encryption in transit, access controls, and other reasonable measures to protect your information. No system is completely secure, however.
Children's Privacy
Our services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
Your Rights
Under the PDPA and similar laws, you have the right to:
- be informed about how your personal data is used
- access your personal data and get a copy of it
- receive your data in a portable format, or have it sent to another controller
- have inaccurate data corrected
- have your data deleted or anonymised
- restrict or object to certain processing
- withdraw your consent at any time
- complain to the Personal Data Protection Committee (PDPC) of Thailand
Deleting your account: in MangaX, go to Settings > Account > Delete account. You can also email us from the address linked to your account. To use any other right, email [email protected]. We will respond within 30 days.
Changes to This Policy
We may update this Privacy Policy from time to time. We will change the date at the top of this page and, for significant changes, tell you in the app. Updates take effect when they are published.
Contact
Questions about your privacy or your data? Contact us: