Privacy Policy

Information we handle

When you create an account, we store your email address, profile name and account status. Sign-in codes and session tokens are stored as hashes on our servers. Your device stores its session token in secure storage. We use request IP addresses and timestamps to protect sign-in and limit abuse. Hosting services may also retain request and error logs needed to operate and secure the service.

Your account may include saved podcasts, playlists, listening progress, likes, highlights, notes and review drafts. Comments, submitted reviews, reports and personal blocks are stored on our servers. Published comments and approved reviews can be visible to other listeners. Reports are available to authorized moderation staff, not the reported user.

If you allow notifications, we store the push token and an installation identifier so we can deliver updates. You can change notification permissions in your device settings. Optional profile photos, downloaded audio, generated Reels and detailed listening summaries are stored on your device in the current app.

When you contact Support, we receive your reply email and the message you choose to send. Do not include passwords or sign-in codes in support requests.

How we use information

We use this information to sign you in, sync your Library, provide audio and account access, deliver requested notifications, respond to support requests, and moderate abuse. We retain limited operational and moderation logs to understand actions and protect the service.

The current app does not include third-party advertising or advertising-tracking SDKs. We do not sell your personal information.

Services involved in delivery

Our hosting services process information needed to operate Podcorn. Resend delivers sign-in and support emails when configured as our email provider. Expo processes push notifications when enabled. Cloudflare Email Routing forwards messages sent to [email protected] to our team inbox, currently hosted by Google Gmail. Information may be processed in countries other than the country where you live.

When you play or download audio and artwork, podcast publishers, their hosting providers and Radio streaming services receive the network requests needed to deliver that media. These requests may include your IP address. External services have their own privacy policies.

The current beta does not take payments through Apple or Google. Free beta access is recorded as account access, not a purchase. We will update these disclosures when paid billing is introduced.

Your choices

You can browse public podcasts and Radio as a guest. An account is needed for account-specific saving and community participation. You can manage blocked users, notifications and local caches from the app and device settings.

Deactivate Account signs you out on every device and preserves your data. Signing in again with your email reactivates the account. Delete Account permanently erases your profile information, saved account data and authored content. If you sign in with the same email after deletion, you create a new account.

Deletion leaves a de-identified account reference and redacted structural records needed to preserve moderation history and relationships between records. These records no longer contain your account email, profile name or authored content. Deletion does not remove other listeners' content, copies already exported to your Photos library, or content others independently saved. Earlier copies may remain in restricted backups until those backups are replaced or removed. Support correspondence may be retained to handle the request or a necessary security obligation.

Email [email protected] to request access to, correction of or deletion of personal information, or to ask about retained records. Depending on the law that applies to you, you may also have rights to receive a copy of your data, object to or restrict processing, or complain to your local data-protection authority. We may need to verify that a request comes from the account holder before acting on it.

Security and retention

We use protected account sessions, access checks and account-specific storage to restrict access to private data. No system can guarantee absolute security. Account data is retained while your account remains in use or deactivated; you can request permanent deletion in the app.

We retain account data while your account exists, including while it is deactivated. After deletion, remaining records and backups are limited to service integrity, necessary security or moderation purposes and applicable legal obligations. Retention depends on the purpose of the record; contact Support for details about a particular record. If the way we collect or use data changes materially, we will update this policy and the app disclosures.