Karatu Privacy Policy

Last updated: May 2026

Summary

Karatu does not collect, store, or transmit any personal information about you. The app runs entirely on your device and only contacts servers you explicitly point it at.

What data Karatu touches

Everything below stays on your device. None of it is sent to the app developer or any third-party analytics service.

Data	Where it's stored	Why
Library entries (manga you've added)	App's Documents directory, JSON file	Track what you save
Reading history (chapters opened, last page)	App's Documents directory, JSON file	Resume where you left off
Bookmarks (page-specific saves)	App's Documents directory, JSON file	Jump back to a page
Downloaded chapters	App's Documents directory, image files	Offline reading
Reading time + per-day log	App's Documents directory, JSON file	Stats display
Reader settings (direction, etc.)	App's Documents directory, JSON file	Remember preferences
Selected source ID	UserDefaults	Remember the last source you browsed
Suwayomi server URL (if you set one)	UserDefaults	Connect to your self-hosted server
Welcome screen seen flag	UserDefaults	Don't show onboarding twice
Installed source plugins (.js files)	App's Documents directory	Run the source code
Subscribed repository manifests	App's Documents directory, JSON file	Install/update sources
Cover image cache	App's Caches directory	Speed up scrolling

Network

Karatu makes network requests in only these situations, and only to URLs you have configured:

To repositories you have subscribed to — to fetch their manifest and download source plugin scripts.
To servers and APIs that the source plugins themselves call. The plugin author chooses what URLs are reached. Karatu does not curate or restrict which sites a plugin can talk to.
To the Suwayomi server URL you have configured (if any) — for source plugins designed to wrap a self-hosted Suwayomi instance.

There are no analytics requests, no telemetry pings, no crash reporters. Karatu does not call any URL you have not explicitly added.

Tracking

Karatu does not track you across other apps or websites. There are no advertising identifiers, no SDKs, no third-party libraries that phone home. The privacy manifest bundled with the app declares this in the form Apple requires.

Data sharing

Karatu does not share any data with anyone. There is no account, no login, no cloud sync, no backup service. If you uninstall the app, every piece of data above is deleted from your device.

Source plugins

Karatu's plugin model lets you install JavaScript code written by third parties. Once installed, a plugin runs on your device and can make HTTP requests on your behalf. You are responsible for the plugins you install. Karatu does not verify, audit, or endorse any plugin or repository.