Privacy Policy

We are the data controller responsible for the personal data described in this policy. This page is a plain-English summary of how we handle your information and is intended to be read alongside our Terms of Service and Refund & Revisions Policy.

Our approach in one paragraph

WalkingReader is a small, hands-on service: you send us a book you already own, we make a free sample, and if you like it we produce the whole book as a listening-adapted English audiobook (MP3 files), narrated by an AI voice. Because of this, our data handling is deliberately minimal. We collect only what we need to talk to you and produce your order, we use it only for that purpose, and we never sell your data, never share it with unrelated third parties, and never use your book to train our own AI models.

1Personal data we collect

Information you give us when you request a sample or place an order:

• The book title — so we can identify and produce the book.
• Your contact details — typically your email address, so we can send you the sample and deliver the finished files.
• The source book file you upload (for example a PDF or EPUB) — so we can produce your audiobook.
• Optional preferences — for example how you would like to be addressed, your voice or narration preference, and any notes. These are optional.

Information collected automatically. When you visit the website or open a delivery link, our own lightweight, self-built tool records basic usage events (such as page views, the referring page, and — on a delivery page — whether the audio was played or a file downloaded), together with your browser's user-agent string. We use your IP address only momentarily, in memory, to rate-limit abusive traffic; we do not store it alongside these events. We use this only to understand how the site and deliveries are used. We do not use third-party advertising cookies or cross-site tracking, and we do not build advertising profiles about you.

We do not require you to create an account or register, we do not store your full payment-card details (see section 3), and we do not knowingly collect personal data from children.

2Why we use it and our legal basis

We use your personal data only for the following purposes:

• To communicate with you about your sample, your order, and any questions or revisions — this is necessary to take steps at your request and to perform our agreement with you (contractual necessity).
• To produce and deliver your audiobook from the file you provide — again, performance of our agreement with you.
• To process your payment through our payment provider — performance of our agreement with you.
• To understand basic website and delivery usage, and to keep the service secure — our legitimate interest in running, securing, and improving the service. We do not use this data to build advertising profiles or to identify individuals for marketing.

For visitors in the UK and EU, the relevant legal bases under the GDPR are, as indicated above, performance of a contract (or taking steps at your request before entering one) and our legitimate interests. We may also process limited data where we are required to do so to comply with a legal obligation (for example, keeping records for tax or accounting purposes). We do not use your information or the content of your book for advertising, profiling, or any automated decision-making that produces legal or similarly significant effects on you.

3Who we share your data with

To be transparent, the following service providers help us run the service. We share only what is necessary, and only for the purposes described here:

• AI narration providers. To produce your audiobook, the text of your book is sent to the third-party AI provider(s) we use, solely for the purpose of generating your audio files. This is governed by those providers' own data terms. To our knowledge, they do not use content submitted through their APIs to train their models; however, we do not control their systems, and you should also review their terms.
• Stripe (payment processing). Payments are collected and held by Stripe under Stripe's own privacy policy. Stripe handles your card details directly — we never see or store your full card information.
• Telegram (internal notifications). When a new inquiry comes in, we use Telegram to send a private notification to the founder so we can reply to you quickly. This is an internal alert (it includes details such as the book title and your contact) and is not shared with the public or used for any other purpose.

We use simple infrastructure (such as our server host) to operate the site. We may also disclose information if required to do so by law, or where necessary to establish, exercise, or defend our legal rights. Otherwise, we do not share your personal data with anyone else.

4What we will never do

• We do not sell your personal data, and we do not "share" it for cross-context behavioral advertising. (If you are a California resident, this means we do not sell or share your personal information as those terms are defined under the CCPA/CPRA.)
• We do not provide your information or files to any third party that is not involved in producing your order or operating the service.
• We do not use the content of your book to train any AI models of our own.

5How long we keep your data

• The source book file you upload is deleted after the revision window closes (7 days after delivery), once it is no longer needed to produce or revise your order.
• Inquiry and order records (such as the book title, your contact details, and your preferences) are kept only as long as needed to follow up, provide after-sale support, and meet our tax and accounting obligations, after which they are deleted or anonymized. Where the law sets a minimum retention period for financial records, we keep the relevant records for that period.
• Basic usage events (page views and similar) are retained only for as long as they are useful for understanding and securing the service.
• You can ask us to delete your data at any time — see "Your rights" below.

6International data transfers

Yusheng Studio is based in Singapore, and our data is stored on servers located in Singapore. The website is served over HTTPS. Some of our service providers (for example Stripe and the AI narration providers) may process data in other countries.

If you access the service from the UK, the EU, or elsewhere, your information will be transferred to and processed in Singapore and in these other locations, which may not have the same data-protection laws as your home country. Where required, we rely on appropriate safeguards (such as standard contractual clauses or the providers' own data-protection commitments) for these transfers. You can contact us at the address below for more information about these safeguards.

7Data security

We take reasonable measures to protect your information: data is stored on our servers in Singapore, the website is encrypted in transit using HTTPS, uploaded files are kept outside any public web directory, and access is restricted. No system can be guaranteed to be perfectly secure, but we work to keep your information safe and to limit what we collect in the first place.

8Your rights

You can ask us to access, correct, or delete the personal data we hold about you, and we will respond within a reasonable time. Depending on where you live, you may also have additional rights:

• UK / EU (GDPR): the rights to access, rectify, erase, restrict or object to processing, and data portability, the right to withdraw consent where we rely on it, and the right to lodge a complaint with your local data protection authority.
• California (CCPA/CPRA): the rights to know what personal information we collect and how we use it, to request deletion or correction, and to not be discriminated against for exercising these rights. As noted above, we do not sell or share your personal information.

Some rights are subject to legal limits — for example, we may need to keep certain records to meet a legal obligation. To exercise any of these rights, simply email us at yushengstudiosg@gmail.com. We may need to verify your identity before acting on a request.

9Cookies and analytics

We keep tracking to a minimum. We use a simple, self-built analytics tool to record basic usage events (such as page views, referrers, and delivery-page engagement) so we can see how the site and our deliveries are used. As described in section 1, these events include your browser's user-agent string but we do not store your IP address alongside them. We do not use third-party advertising cookies or cross-site tracking, and we do not build advertising profiles about you.

10Changes to this policy

We may update this policy from time to time. When we do, we will post the updated version on this page and revise the "last updated" date above. This policy is governed by the laws of Singapore.