Your bookmarks, ratings, and listening statistics stay on your device; on iPhone and iPad, a backup also goes to your own iCloud Drive. The app talks directly to Spotify, never to a server of ours. No account with us, no advertising, no tracking.

The app requires no account with us, and we do not run any servers for it. We do not collect, store, or process any personal data. The app contains no advertising, no tracking, and no analytics.

Everything the app records is stored on your device: bookmarks and listening progress including earlier positions, ratings, favorites, your markers ("listen later", "not for me", episodes marked as heard by hand), your own lists, notes, listening statistics (such as time, weekday, and duration of your listening sessions), your settings, and the Spotify Client ID you enter. On iPhone and iPad, there are two exceptions: a backup of this app data in your iCloud Drive and a copy of the Client ID in your iCloud Keychain (see below). You can reset the listening statistics in the app. Uninstalling the app deletes its database and settings; the iCloud Drive backup and entries in the device keychain, such as the Spotify access token and the iCloud copy of the Client ID, outlast uninstalling (see below).

The app connects directly from your device to Spotify; no data passes through us. You sign in via Spotify's official login page in the system browser; the app never sees your Spotify password. The access token issued by Spotify is stored encrypted in your device's keychain (iOS Keychain, Android Keystore) and removed when you sign out. It is not synced to your other devices; you sign in on each device separately.

The app retrieves from Spotify: your profile name and subscription type (to check for Premium), the current playback state, and the list of your Spotify devices, as well as album and track lists for the catalog. It sends control commands such as play, pause, and seek. Cover images are loaded from Spotify's servers when displayed. In doing so, Spotify receives your IP address and the usual technical connection data. Spotify's privacy policy applies to its processing: https://www.spotify.com/legal/privacy-policy/

To identify your device in the Spotify device list, the app compares the device name locally; it is not transmitted to us.

For the connection, you create your own app in the Spotify Developer Dashboard and enter its Client ID. The dashboard is operated by Spotify; you accept Spotify's Developer Terms there yourself. The Client ID is not secret. It is stored on your device and, on iPhone and iPad, in your iCloud Keychain (see below).

So that your other Apple devices can skip the setup, the app stores the Client ID of your Spotify developer app in your iCloud Keychain. This is turned on by default and can be turned off at any time in the app under Die Zentrale > Spotify; turning it off removes the copy from your iCloud Keychain, while the copy on each device remains. Apple syncs the iCloud Keychain end-to-end encrypted between the devices signed in with your Apple Account on which iCloud Keychain is turned on; neither Apple nor we can read its contents, and we do not receive this data. If iCloud Keychain is turned off in your system settings, the entry stays on the device. Only the Client ID goes into the keychain; your Spotify sign-in is not synced at all. The backup of your app data is separate (see below). Keychain entries are not removed when you uninstall the app: to delete the copy, turn off the sync or remove the Client ID in the setup beforehand. Apple's privacy policy applies to the processing by Apple: https://www.apple.com/legal/privacy/

So that you can restore your data on a new device or after reinstalling, the app saves a backup of it as a file in your iCloud Drive: bookmarks including earlier positions, ratings, favorites, markers, your own lists, notes, characters you added, and listening statistics. Your settings, your Spotify sign-in, and the Client ID are not part of it. Each device writes its own file into the app's area of your iCloud Drive, which does not appear in the Files app. The app saves when you leave it, at most once an hour. This is turned on by default and can be turned off at any time in the app under Die Zentrale > Daten; turning it off removes this device's backup from iCloud, while the data on the device and the backups of your other devices remain. You can delete those under Die Zentrale > Wiederherstellen. A backup is only restored when you ask for it.

The file is stored by Apple in your iCloud account; we do not receive it and have no access to it. iCloud Drive encrypts data in transit and on Apple's servers, but end-to-end only if you have turned on Advanced Data Protection for iCloud. If you are not signed in to iCloud or iCloud Drive is turned off for the app, no backup is made. The backup is not removed when you uninstall the app: to delete it, turn off the backup in the app beforehand or delete it under Die Zentrale > Wiederherstellen. On Android, the app makes no backup. Apple's privacy policy applies to the processing by Apple: https://www.apple.com/legal/privacy/

The sleep timer alarm and its notification, as well as the reminder on the release day of a new episode, are scheduled locally on your device; no server is involved. The release dates come with the app.

The app may occasionally ask for a rating using the system dialog of the App Store or Google Play. The dialog is displayed by Apple or Google; we receive no data from it.

You get the app through the Apple App Store. Apple is responsible for download, payment, and updates; we have no access to that data. Apple's privacy policy applies: https://www.apple.com/legal/privacy/

If you have turned on "Share with App Developers" in the iOS settings, Apple provides us with anonymous crash reports and usage statistics. They do not identify you.

The app is also available on Google Play. Google is responsible for download, payment, and updates there; we have no access to that data. Google's privacy policy applies: https://policies.google.com/privacy

Whatever happens only on your device or in your private iCloud does not reach us; we do not process that data.

If you e-mail us, we process your address and message to answer you (Art. 6(1)(b) GDPR for questions about a purchase, otherwise Art. 6(1)(f) GDPR).

What the app stores on your device stays there until you delete it in the app or remove the app. Data in your iCloud can be deleted in your device's iCloud settings.

We delete e-mails to us once your request has been resolved, unless statutory retention obligations apply.

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)).

Since we do not keep accounts and the app does not identify you, we often cannot attribute data to a person (Art. 11 GDPR). Write to us anyway; we are happy to help.

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for us: the data protection authority of Lower Saxony (LfD Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany, https://www.lfd.niedersachsen.de

Nikita Aurelian Schulz (PODSchu). The full address is in the legal notice (Impressum) on this page.

For questions about data protection: contact.schulzpod@gmail.com