Effective date: August 1, 2026
Last updated: August 3, 2026
Vanto is a personal media management and playback tool provided by independent developer Mac Zhou. This policy explains how Vanto handles data on iPhone, iPad, Apple TV, and Mac.
Vanto does not provide media content or operate a cloud media server that receives your media files. The contents of your media files, full file paths, and media-source passwords are not sent to the Vanto developer.
1. Data on your device
To provide media browsing, playback, downloads, and preferences, Vanto stores the following on your device:
- Local media indexes, metadata, artwork caches, and playback settings;
- Media sources and connection configuration you add;
- Offline downloads, external subtitles, and app-managed imported files;
- Playback progress, favorites, watched status, and recently watched records;
- Access Lock settings and other app preferences.
Passwords, tokens, and other sensitive credentials for media servers and remote file sources are stored in the system Keychain and used only to connect to services you configure. Vanto does not create a separate Vanto user account.
2. Firebase analytics and crash diagnostics
Vanto enables Google Firebase Analytics and Firebase Crashlytics by default to understand whether core features work, discover crashes, and improve reliability. The current version does not provide separate in-app collection switches and does not request AppTrackingTransparency permission. Vanto contains no advertising and does not use Firebase data for advertising, cross-app tracking, or user profiling.
2.1 Usage analytics
Vanto actively reports only type-allowlisted and bucketed product events, such as:
- App version, device platform, and operating system version;
- Categorized results and duration buckets for pages, source types, and features;
- Aggregated buckets for playback, buffering, seeking, and downloads;
- Non-payment states in the Vanto Pro purchase flow.
Vanto’s custom events do not contain media titles, person names, full file paths, server addresses, URLs, accounts, credentials, or raw error contents. To provide its service, the Firebase SDK may still process network transport information, app-instance or installation identifiers, device information, and system information required for normal operation.
2.2 Crash diagnostics
Crashlytics reports may contain crash stacks, thread state, app and system versions, device type, and restricted runtime context. Vanto does not actively attach media titles, paths, server addresses, accounts, or credentials.
Vanto disables Firebase automatic screen reporting, ad-personalization signals, and IDFV collection. Stopping use or uninstalling Vanto stops future collection generated by the app. Data already sent cannot be withdrawn from the device; retention and deletion are governed by Vanto’s Firebase configuration and Google’s applicable terms.
3. Apple services and cross-device sync
Vanto uses Apple StoreKit to verify and restore Vanto Pro purchases and Family Sharing entitlements. Apple processes payment accounts, card information, and billing details. The Vanto developer does not receive those payment details.
With an eligible Vanto Pro entitlement, supported settings may sync between devices signed into the same Apple Account through Apple iCloud key-value storage. You may also choose to enable remote-file user-state sync for SMB, WebDAV, and SFTP sources; this feature uses your private CloudKit database to sync playback progress, watched status, and favorites.
Remote-file user state uses a digest derived from stable source facts, object revision, and content length, plus necessary numeric state. It does not upload media titles, full paths, server addresses, usernames, passwords, tokens, or media files. Family Sharing shares only the StoreKit entitlement and never merges media or user data.
4. Services you configure
Vanto can connect directly from your device to:
- Emby, Jellyfin, and Plex;
- SMB, WebDAV, and SFTP;
- Metadata or subtitle services such as TMDB, TVDB, and OpenSubtitles;
- Apple CloudKit, StoreKit, Firebase, and system media services.
Requests to these services may contain credentials, media identifiers, search terms, network addresses, or device network information required for the selected service to work. Except for Firebase diagnostics and analytics, these requests travel directly from your device to the relevant service and do not pass through a Vanto-operated server. Each third party handles data under its own privacy policy and its relationship with you.
5. Purposes and sharing
Vanto handles data only to:
- Connect to, browse, and play media sources you choose;
- Save preferences, playback state, favorites, and offline content;
- Provide cross-device sync you enable or are entitled to use;
- Verify and restore Vanto Pro entitlements;
- Analyze core-feature reliability and diagnose crashes;
- Meet legal obligations and protect the app and its users.
Vanto does not sell or rent data and does not provide data to advertisers. Data is handled by Apple, Google Firebase, or services you configure only when necessary for the purposes above, or disclosed when legally required by a competent authority.
6. Retention and deletion
- Local settings, indexes, and caches remain until you delete them in the app, disconnect the source, clear applicable data, or uninstall Vanto;
- Keychain credentials remain until you remove the source or Vanto clears credentials that are no longer associated with a source;
- Offline files, external subtitles, and imported copies remain until you delete them;
- iCloud and CloudKit data remains until you disable the relevant feature and remove its data, delete the relevant source state, or manage it through your Apple Account;
- Firebase data is retained under Vanto’s Firebase project configuration and Google’s applicable terms for the time needed to provide analytics and diagnostics.
To ask about or request deletion of data controlled by the Vanto developer, contact the address at the end of this policy. Data controlled by Apple, Google, or a third-party service you configure must be managed through that service’s available controls.
7. Your rights
Depending on applicable law, you may have the right to learn about, access, correct, or delete data concerning you; restrict or object to certain processing; request a portable copy of applicable data; or complain to your local data-protection authority. Reasonable verification may be required to avoid disclosing data to the wrong person.
8. Children’s privacy
Vanto is intended for general users who manage personal media sources and is not directed specifically to children. Vanto does not knowingly ask children to provide personal information to the developer. A parent or guardian who believes a child provided personal information may contact us to request appropriate action.
9. Security and international processing
Vanto uses the system Keychain, source-identity isolation, and encrypted connections when supported by the selected service. No network transmission or electronic storage method is completely secure. You remain responsible for protecting your media servers, network, Apple Account, and third-party service credentials.
Apple, Google Firebase, or services you choose may process data outside your country or region. Vanto limits this processing through data minimization and applicable service terms and uses appropriate safeguards where required by law.
10. Changes to this policy
If data categories, purposes, or third-party services change materially, Vanto will update this page and the last-updated date and provide additional notice or choice where required by applicable law.
11. Contact
Data controller: Mac Zhou (independent developer)
Email: death7074@gmail.com