Privacy Policy
Car Cards (package me.vanmechelen.yotocar) is an independent Android
Automotive OS app that lets you play your own Yoto library in a compatible
car. This policy explains how the app handles your data.
Short version
The app collects no personal data for the developer. There are no analytics, no advertising, and no tracking, and nothing is ever sent to the developer or to any third party other than Yoto, whose service the app connects to on your behalf.
Signing in with Yoto
To show and play your content, the app needs you to sign in with your existing Yoto account:
- You enter your Yoto email and password on the sign-in screen.
- Those credentials are sent directly to Yoto’s official API solely to obtain access tokens. Your password is not stored by the app and is not sent to the developer.
- The resulting access and refresh tokens are stored encrypted on your device (Android EncryptedSharedPreferences) so you don’t have to sign in every time. They stay on your device.
What the app accesses from Yoto
Once signed in, the app communicates directly with Yoto’s API to:
- load your card library, playlists, groups, and artwork, and
- stream the audio for the content you select.
This information is exchanged between your device and Yoto and is governed by Yoto’s own privacy policy. The developer neither receives nor stores it.
Data stored on your device
- Encrypted Yoto access/refresh tokens.
- A temporary in-memory cache of your library and artwork for the current session.
All of this is removed when you sign out, clear the app’s data, or uninstall the app.
What the app does not do
- No developer accounts, servers, or backends are involved.
- No analytics, crash-reporting, or advertising SDKs are included.
- No location, contacts, or unrelated device data is accessed.
- No data is sold or shared with anyone other than Yoto (which you are signing in to).
Deleting your data
Signing out or uninstalling the app removes all locally stored tokens and cached data from your device. To manage or delete the data held in your Yoto account itself, use Yoto’s own apps and services.
Children’s privacy
The app is a media player for content in your own Yoto account and is intended for the account holder. It collects no personal information for the developer.
Affiliation
This is an independent, personal hobby project. It is not affiliated with, endorsed by, or associated with Yoto. “Yoto” and related marks belong to their respective owners. The app is an original, clean-room client that uses Yoto’s API to access your own content.
Changes to this policy
If the app’s behavior changes, this page will be updated and the “last updated” date above will change.
Contact
Questions about this policy? Email apps@vanmechelen.me.