Effective Date: December 18, 2025
Contact: Privacy questions or data requests — anwarnasir0970@gmail.com
What: CodeCast is a podcast app for streaming, downloading, sharing, and managing podcast content.
Why: This policy explains what data the app collects, how it’s used, where it’s stored, who we share it with, user choices, and security practices.
Email address, display name, and profile photo when you sign in with Google (via Firebase Authentication).
Anonymous identifiers for guest sessions.
Files you upload (images, audio) and related metadata (titles, descriptions) when creating or managing episodes, guests, or organizers.
Stored in Firebase Storage and/or Supabase Storage.
Listening history and playback progress.
Likes, playlists, app settings (theme, language, playback speed), and download status.
Stored locally on your device using Hive and may be synced to Firebase Firestore.
Network connectivity status.
App version and operating system/platform identifiers.
Crash and diagnostic information from device or platform libraries, when enabled.
Camera: Taking photos for profiles, guests, or episode images.
Microphone: Only when you record or upload audio (requested explicitly).
Storage / Media: Selecting audio or image files and storing offline downloads.
Internet: Streaming and downloading content.
Permissions are requested at runtime and only when required for a feature.
Directly from you (sign-in, uploads, preferences).
Automatically from your device (usage and diagnostic data).
Third-party services, including:
Google (Google Sign-In)
Firebase (Authentication, Firestore, Storage)
Supabase (Storage)
YouTube metadata fetching via youtube_explode_dart (when used)
We use collected data to:
Provide core features (streaming, downloads, playback resume, playlists, uploads, and account-based content management).
Improve the app, debug issues, and respond to support requests.
Enforce content management (including admin features) and protect against abuse.
Preferences, listening history, likes, and playlists stored using Hive.
User accounts and app content (episodes, guests, organizers) stored in Firebase (Authentication, Firestore, Storage).
Media uploads may be stored in Supabase Storage (public or project-configured buckets).
Third-party providers (Firebase, Supabase, Google) may process data according to their own privacy policies.
We do not sell personal data.
We share data only with service providers necessary to operate the app:
Firebase (Auth, Firestore, Storage)
Supabase (Storage)
Google (Google Sign-In)
Platform-dependent libraries (image/file pickers, webview providers)
If you choose to use in-app web tipping, the webview may load third-party payment pages, which have their own privacy practices.
Uploaded media may be stored using public URLs (Firebase or Supabase), depending on bucket configuration.
Do not upload content you do not want to be public unless the app explicitly documents private storage.
For removal requests, contact anwarnasir0970@gmail.com with the file URL or relevant details.
Local data: Remains on your device until you clear it or uninstall the app.
Server-side data: Retained in Firebase and Supabase until you or an admin deletes it.
To request deletion of your account or uploaded content, email anwarnasir0970@gmail.com with your email address, user ID (if available), or file URLs. Complete removal from third-party backups may take additional time according to provider policies.
Data in transit is protected using HTTPS.
Cloud data is protected using Firebase and Supabase security controls and access rules.
You are responsible for safeguarding your account credentials.
Report suspected security issues or breaches immediately via the contact email.
Internet: Stream and download podcast content.
Storage / Media: Select audio and images; store offline downloads.
Camera: Capture photos for profiles, guests, or episodes.
Foreground Service / Wake Lock: Enable background audio playback.
Media Permissions (Android 13+): Access selected media items.
Permissions are requested only when the related feature is used.
CodeCast is not intended for children under 13. If you believe data from a child under 13 has been collected, contact us to request deletion.
You may request to:
Access a copy of your personal data.
Correct inaccurate information.
Delete your account and associated data.
You can also sign out, revoke Google Sign-In access, or clear app data to limit local data collection. Some identifiers required for core functionality may persist until deletion is requested.
The app may include links or embedded third-party content (such as tipping webviews). We are not responsible for the privacy practices or content of third-party services.
We may update this Privacy Policy from time to time. Changes take effect when posted in the app or on our website, with the updated effective date noted above.
For questions, data requests, or to exercise your rights:
📧 anwarnasir0970@gmail.com