Privacy Policy reworked #139
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
| @@ -1,57 +1,105 @@ | ||||||
| AntennaPod is developed and maintained by individual volunteers and not represented by any legal entity. | ||||||
| The community has no interest in your data, and the app and website are fully EU-GDPR compliant for everyone. | ||||||
|
|
||||||
| ## App permissions | ||||||
| The app requests the following privacy-relevant Android permissions: | ||||||
|
|
||||||
| - Read from/write to Storage (Photos/Media/Files) | ||||||
| The storage permission is used and only requested when opening files not downloaded directly from within the app. | ||||||
| It can also be used to import app settings or OPML files. | ||||||
|
|
||||||
| - Full network access, to download or stream content, or interface with services. | ||||||
| - Prevent the device from suspending | ||||||
| - View network connections. | ||||||
| - View Wi-Fi connections. | ||||||
| - Ryn at startyp | ||||||
| - Connect to Bluetooth devices. | ||||||
| - Control vibration. | ||||||
|
|
||||||
|
|
||||||
| ## Data the AntennaPod app itself (not third-party services) collects, stores and processes locally | ||||||
| Other than third-parties, only data strictly necessary for the app to function is recorded, and only on the device. | ||||||
| This includes podcasts you follow, the app settings, and login data provided for specific podcasts or services (such as syncing services). | ||||||
| The app itself (not third-party services) does not insert advertisement libraries, or third-party tracking (analytics). | ||||||
|
|
||||||
| **Except for third-party services, all data provided and created when using the AntennaPod app is stored locally on your device. | ||||||
| This means your data is not sent or uploaded anywhere, except when the you search, or turn on third-party services in the app.** | ||||||
| When interfacing with third-party services, the app itself receives subscriptions and playback events provided by the respective services. | ||||||
|
|
||||||
| ## App data third-parties collect, store and process | ||||||
|
|
||||||
| - Discovery and search services: When opening the Discover screen in the app, it sends a call to Apple to collect podcast suggestions. | ||||||
| They may store the query, including country (which by default is the device's country). | ||||||
| These suggestions can be disabled by choosing "Off" in the region selector. | ||||||
|
There was a problem hiding this comment. I can't find this in 2.4.2 from F-Droid, and I would advice making it a default "Off".
|
||||||
| When using the search feature in AntennaPod, the services PodcastIndex.org, iTunes, fyyd, gpodder.net, mzstatic.com, and podnews.net, and omnycontent.com | ||||||
|
There was a problem hiding this comment.
Suggested change
Don't really know what the ones I added do, but they do (try to) connect when searching. I didn't try it on a clean install, so it might be from podcasts I added. |
||||||
| may store your query, including the search terms. | ||||||
| Discovery and search queries also include the IP address, time, and the app name "AntennaPod". | ||||||
| After subscribing, the feed is served from the podcast hoster, meaning the discovery/search service is no longer involved. | ||||||
| - Syncing services: When turned on via the settings, AntennaPod syncs your data. | ||||||
| This data may include login credentials, subscribed podcasts, listened episodes, play, paused and favorite actions with date- and timestamps and your IP address. | ||||||
| Consult your provider's privacy policy (e.g. [gpodder.net's privacy policy](https://gpodder.net/privacy), or the one of your Nextcloud host). | ||||||
| - Podcast hosters: When provided in the podcast settings, a host receives the authentication data you provided. | ||||||
| Servers providing the podcast feeds might collect data in so doing, like your IP address, access time and content you download or stream. | ||||||
| Please refer to their respective privacy policies for details. | ||||||
| You can view the URL of a podcast by opening the podcast and pressing the 'Info' icon. | ||||||
| AntennaPod does not allow any remote servers to set cookies. | ||||||
| The servers can detect the fact that you are using AntennaPod and which version of AntennaPod you are using (HTTP user-agent). | ||||||
| If multiple podcasts are hosted on the same server, the server can detect the list of podcasts hosted on that server you are subscribed to. | ||||||
| This might happen if publishers use FeedBurner, Podtrac or similar services to distribute their feeds. | ||||||
|
There was a problem hiding this comment.
Suggested change
? |
||||||
| - Backups: (If turned on in "Settings → System → Advanced" in the device settings) Android saves copies of device data on the server of your chosen provider. | ||||||
| This will contain private info, including your Wi-Fi passwords, messages and call history. | ||||||
| It also includes data from AntennaPod and from other apps you use. | ||||||
|
There was a problem hiding this comment. Could make a summary of what this includes for AntennaPod. |
||||||
| AntennaPod developers do not have access to this data. | ||||||
|
|
||||||
| ## Data collected, stored and processed by third-party services linked to in AntennaPod | ||||||
| - The donation system: AntennaPod uses Open Collective, offered by Open Collective Inc (USA) and Open Collective Europe ASBL (Belgium). | ||||||
| When you make a donation, these entities get access to certain data. There is more info in [Open Collective's privacy policy](https://opencollective.com/privacypolicy). | ||||||
| - The website: Since the AntennaPod website is hosted via GitHub Pages it is subject to [GitHub's privacy policy](https://docs.github.com/en/github/site-policy/github-privacy-statement#github-pages). "GitHub may collect User Personal Information from visitors to your GitHub Pages website, including logs of visitor IP addresses, to comply with legal obligations, and to maintain the security and integrity of the Website and the Service." | ||||||
| No cookies are stored on your machine, and no third-party tracking (analytics) or other services are used. | ||||||
| - The forum: AntennaPod's forum uses the Discourse software, hosted by the core team. | ||||||
| The [forum's privacy policy](https://forum.antennapod.org/privacy) details how data is treated there. | ||||||
|
|
||||||
| ## Data the AntennaPod core team has access to | ||||||
| The developers of AntennaPod do **not** have access to any of your info, except when you | ||||||
|
|
||||||
| - Actively share debugging info (either via e-mail using the 'Crash Report' function, or via the Android crash reporting functionality of Google): | ||||||
| - Device type | ||||||
| - Android version | ||||||
| - AntennaPod version | ||||||
| - Actively share a review in the Google Play store: | ||||||
| - Public profile info | ||||||
| - AntennaPod version | ||||||
| - Device type | ||||||
| - Device language | ||||||
| - Android version | ||||||
| - Visit or participate on our forum: as described in the [forum's privacy policy](https://forum.antennapod.org/privacy) | ||||||
| - Actively make a financial contribution via Open Collective (unless you make it [incognito](https://docs.opencollective.com/help/financial-contributors/payments#profile)): | ||||||
| - Public profile info (name, company, description, image, microblog, VCS profile link, website) | ||||||
| - E-mail address | ||||||
| - Actively interface with the GitHub version-control system (where the source code is stored): | ||||||
| - Star any of the the repositories | ||||||
| - Fork any of the repositories | ||||||
| - Open an issue | ||||||
| - Submit a PR | ||||||
| - Leave comments | ||||||
| - Participate in discussions | ||||||
| - Contribute to [the translation on Hosted Weblate](https://hosted.weblate.org/projects/antennapod/), subject to https://hosted.weblate.org/legal/ | ||||||
| - (No more than what is publicly accessible on the platform, except in a pre-formatted list) | ||||||
|
|
||||||
| ## Updates of this Privacy Policy | ||||||
| The developers may update this policy in the future. | ||||||
| It is advisable to check the policy periodically for any changes. | ||||||
| Changes to this Privacy Policy are effective when they are made on this document. | ||||||
|
|
||||||
| This Privacy Policy was last updated on 2022-02-18. | ||||||
| * Reworked and clarified all sections, added more info. | ||||||
| If you have questions, open an issue on GitHub or our forum. | ||||||
|
|
||||||
| <!-- mdpo-disable-next-line --> | ||||||
| {% if site.lang != 'en' %} | ||||||
|
|
||||||
| This privacy policy is translated from English to help you understand how AntennaPod deals with the topic. | ||||||
| The English version is authorative, meaning translated versions are only provided as a convenience. | ||||||
|
|
||||||
| <!-- mdpo-disable-next-line --> | ||||||
| {% endif %} | ||||||
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could link to the relevant code here.