Privacy policy

Who is responsible

PodPoder is published by Andrés López Pascual, the controller for the little data this policy describes. Questions about it go to info@podpoder.com.

What stays on your device

The podcasts and stations you keep, your collections and songs, the episodes you have played, the position you stopped at in each one, and your settings are stored in a database on your device. There is no PodPoder server to send them to: the app has no backend and no account to attach them to.

Deleting the app deletes all of it.

What leaves your device when you use the app

These reach other people’s servers, and only while you use the feature that needs them:

• Podcast search. What you type in the search field, and the store country it searches in, is sent to Apple’s iTunes Search API, which sends the results back; so is a show’s ID when the app looks one up. Apple’s privacy policy governs what Apple does with it.
• Radio. What you type in Radio’s search is sent to radio-browser.info, a directory of stations kept by its community, and the stations you keep are refreshed from it. When you play a station, the app tells the directory: that is how its most-played order is counted.
• Feeds, artwork and logos. Opening a podcast fetches its RSS feed, chapters, transcripts and images from the servers its publisher chose; a station’s logo and song pictures come from the servers the directory or the station names. Those servers see your IP address, as they would with any podcast app or web browser.
• Audio. Playing an episode or a station streams it from its publisher’s server, which likewise sees your IP address and how much of the stream you asked for.
• Identifying a song, on iPhone, Mac and Android. When you ask, the app turns about twelve seconds of the station’s own stream — never the microphone — into a Shazam signature on your device, and sends that to Apple’s Shazam, which answers with the song; on Android the request also names your device’s region. Apple’s privacy policy governs Shazam.
• Checking the connection. To tell whether you are online, the app opens a page Apple and Google keep for that purpose (captive.apple.com, connectivitycheck.gstatic.com).

Opening a song in Spotify, Apple Music or YouTube hands its title and artist to that service, only when you tap it.

None of these requests carries an identifier of you, of your device or of your library. PodPoder adds nothing to them.

The beta

While PodPoder is in beta it is distributed through Apple’s TestFlight and Google Play’s closed testing. Apple passes on the email address you used to accept the TestFlight invitation, together with crash reports and the tester counts TestFlight collects. Google Play lets in only the Google accounts on its tester list, so joining on Android means sending us your name and the Google email on your phone, which we add to that list. They are used to run the beta and fix crashes, and for nothing else; Apple’s and Google’s own privacy policies govern TestFlight and Google Play themselves.

Leaving the beta in TestFlight or Google Play ends that. Write to us and your address is removed from the tester list.

This website

podpoder.com sets no cookies and loads no third-party script. Cloudflare, which hosts it, counts page views at its edge without writing anything to your device and without building a profile, and keeps short-lived server logs for security, as any host does. Your theme and language choices are kept in your browser’s local storage, on your machine, because you asked for them.

What PodPoder never does

• No account, no sign-up, no password.
• No advertising, and no ad or attribution SDK.
• No analytics inside the app.
• No selling, renting or sharing of data with anyone.
• No profile of what you listen to.

Your rights

Under the GDPR you may ask what data is held about you, ask for a copy, ask for it to be corrected or erased, and complain to your data protection authority. In practice the only things that can be held are a beta tester’s email address and, for Android, the name sent with it, so a request is usually answered by deleting them. Write to info@podpoder.com.

Children

PodPoder is not directed at children and asks for no personal information from anyone, of any age. Podcast feeds come from their publishers, and their content is theirs.

Changes to this policy

If this policy changes, the date at the top of the page changes with it. A change to what leaves your device is announced in the release notes of the version that makes it.