Castos is developed and maintained by individual volunteers and not represented by any legal entity. The community doesn’t need your data, so the app and website are designed to be fully GDPR compliant. Read on to learn more.

What kind of data we store

The Castos app only stores data strictly necessary to for the app to function, as provided by you, the user. This includes for example the list of podcasts you follow, the app settings, and authentication data provided for specific podcasts or services (such as Gpodder). The app does not include any advertisement libraries or any 3rd party tracking (analytics) code, such as Google Analytics.

The Castos website, hosted via GitHub Pages, does not store any cookies on your machine, and no 3rd party tracking (analytics) or other services are used.

How Castos processes your data

All data provided using the Castos app is stored locally on your device. Castos does not upload your data anywhere, except where strictly necessary for the functioning of the app. The cases where specific bits of information are sent to 3rd parties include, but may not be limited to:

• certain podcast providers, when provided in the feed settings: authentication data

• synchronisation service (gpodder.net), when enabled in the app settings: login credentials and all your subscriptions and playback events requested by the service (see the gpodder.net Privacy Policy how gpodder.net handles your data)

• podcast discovery services (fyyd, iTunes, gpodder.net), when using the podcast search feature: search keywords, and in some cases the app name (“Castos”)

• The developers of Castos do not have access to any of your information, except when you actively share debugging information (either via email using the ‘Crash Report’ function, or via the Android crash reporting functionality of Google).

What data other parties might collect, store and process

• Google: If you have activated backup & reset in your phone settings (Settings → Backup & Reset → Back up my data), you should be aware that Android itself will periodically save a copy of your phone’s data in Google’s servers. This backup contains private information, including your WiFi passwords, messages and call history. It may also include data from Castos and from other apps you use. The developers of Castos do not have access to this data.

• Podcast hosters: The web servers that provide the podcast feeds might collect additional data, such as your IP address, access time and what is being accessed. This includes the episodes you are downloading or streaming. Please refer to their respective privacy policies for details. You can view the URL of a podcast by opening the podcast and pressing the info icon. AntennaPod does not allow remote servers to set cookies. The servers can detect the fact that you are using Castos and which version of Castos you are using (HTTP User-Agent). If multiple podcasts are hosted on the same server, the server can detect the list of podcasts that you subscribed to and that are hosted on that server. This might happen if publishers use feedburner, podtrac or similar services to distribute their feeds.

• Search services: When using the search feature of iTunes, fyyd or gpodder.net, those services can store your query. After subscribing, the feed is usually served from the creator’s server.

Permissions

The app requests the following privacy-relevant Android permissions:

• Read from/write to Storage (Photos/Media/Files) The storage permission is used to open files that are not downloaded directly from within the app. It can also be used to import app settings or OPML files. The permission is only requested if you perform an action that requires reading from storage.

Updates of this Privacy Policy

The developers may update this policy in the future. It is advisable to check the policy periodically for any changes. Changes to this Privacy Policy are effective when they are made on this document.