Privacy Policy
Effective Date: 6/25/2025
Last Updated: 4/27/2026
At World of Ideas, LLC, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share your information when you use the Podshot mobile application, website, and related services (the "Service").
By using Podshot, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Information We Collect
We collect the following categories of data:
1.1 Personal Information
Account info:
- Email address
- Password (stored in hashed form)
- Apple or Google sign-in identifiers (if you use social login)
Profile Info (optional)
- Username or display name
- Profile image
1.2 Usage & Activity Data
We collect information about how you interact with Podshot, including:
- App usage metrics such as screens viewed, buttons tapped, timestamps, and Podshot actions (collected via Vexo Analytics)
- Crash reports, performance metrics, and breadcrumbs (collected via Sentry). When the app crashes, Sentry may also capture a short replay of the screens leading up to the crash to help us reproduce the bug.
- AI interaction logs (e.g., when you request an AI summary), stored in a way we use for debugging and product improvement, not to personally profile you
Listening activity (when you listen inside Podshot):
- Podcasts and episodes you play
- Playback position, playback speed, and controls used (e.g., pause, skip, rewind)
- Search queries, subscriptions/follows, or favorites you set in Podshot
We use this data to provide core functionality (like resuming where you left off) and to understand feature usage.
1.3 Content You Generate
When you use Podshot, we process and store:
- Screenshots or timestamps you capture from your podcast player
- AI-generated summaries, transcript snippets, and your personal notes
- Highlights, bookmarks, or “captured moments” you create while listening inside Podshot
- Tags, folders, or other metadata you add to organize your content
This content is private to your account unless you choose to share it.
1.4 Device & Technical Information
We collect technical data such as:
- Device type, operating system version, app version, language preferences
- IP address and approximate location inferred from it (used only for security, diagnostics, and performance; we do not collect precise GPS location, and we do not request location permissions)
- Push notification token (if you enable notifications on your device)
- Unique device identifiers and a Podshot-assigned user ID, used to associate crash reports, analytics events, and subscription state with your account
Podshot does not collect the iOS Identifier for Advertisers (IDFA) or the Android Advertising ID, and does not request App Tracking Transparency permission.
2. How We Use Your Data
We use your data to:
- Provide, operate, and maintain the Service
- Generate and store personalized summaries, transcripts, and Podshots
- Let you listen to podcasts inside the app and resume playback where you left off
- Sync your content and settings across devices
- Process subscription purchases, renewals, and restorations through Apple App Store, Google Play, and our subscription provider RevenueCat
- Monitor performance, diagnose crashes, and improve features (via Sentry and Vexo Analytics)
- Send service updates, account-related notifications, and push notifications you opt into (via OneSignal)
- Detect, investigate, and prevent misuse, fraud, or security incidents
- Comply with legal obligations and enforce our terms
2.1 AI Processing & Third-Party AI Providers
Podshot uses Google Gemini (operated by Google LLC) to generate AI summaries, identify podcast episodes from screenshots, and look up episodes from shared links. When you trigger one of these features, the following data is sent to Google Gemini through our backend:
- Transcript snippet text or your notes (for AI summaries)
- Podcast screenshots you upload (for episode identification)
- Shared podcast URLs you send into the app (for episode lookup)
We do not send your email address, name, user ID, listening history, or other account data to Google Gemini.
- Google Gemini is engaged as a data processor under Google's data processing terms and is contractually required to use the data only to generate the requested output and not to use it to train its general-purpose models.
- We do not sell your personal data to Google and do not allow it to be used to build advertising or marketing profiles.
- AI-generated summaries, transcripts, and notes are stored in your Podshot account solely for your use.
Your consent and how to revoke it: the first time you use an AI feature, Podshot shows an in-app consent screen that names Google Gemini and lists the data types that will be sent. AI features are gated behind that consent. You can review or change your decision at any time at Profile → Settings → Manage AI permissions inside the app. If you decline or revoke consent, AI features stop calling Google Gemini; other features continue to work normally.
2.2 No Cross-App Tracking
Podshot does not track you across apps and websites owned by other companies, and does not share your data with data brokers, ad networks, or advertising measurement services. Our iOS privacy manifest declares NSPrivacyTracking: false, which means the app will not show an App Tracking Transparency prompt because none of our analytics or diagnostics data is used for cross-app tracking. Vexo and Sentry events are scoped to your activity inside Podshot only.
3. Sharing & Disclosure
We do not sell your data. We only share your data in the following scenarios:
| Purpose | Shared With | Data Categories |
|---|---|---|
| Backend, authentication, database, transactional email | Supabase, Inc. | Email, name, user ID, your podshot content, listening history |
| Subscription management | RevenueCat, Inc. | User ID, purchase history, subscription state, device metadata |
| Subscription payments | Apple (App Store), Google (Google Play) | Purchase identifiers and receipts (Apple and Google handle the payment instrument directly; we do not see your card) |
| AI processing (summaries, screenshot identification, link lookup) | Google LLC (Google Gemini) | Transcript snippet text, screenshots, or shared URLs you submit (no email, name, or user ID) |
| Crash reporting, performance monitoring, error session replay | Functional Software, Inc. (Sentry) | User ID, device ID, crash and performance data, on-error session replays, breadcrumbs |
| Product analytics | Vexo Analytics | User ID, device ID, screen views, in-app event data |
| Push notifications | OneSignal, Inc. | User ID, device push token, segmentation tags |
| Sign-in with Apple / Google | Apple Inc., Google LLC | OAuth ID tokens (used once to verify your identity; not retained beyond the sign-in) |
| Podcast metadata lookup (episode identification by URL or screenshot) | Podscan | The podcast URL or screenshot you submit, plus basic episode-lookup parameters (no email, name, or user ID) |
| Image delivery and website CDN | Cloudflare, Inc. | Public static assets, IP address (standard CDN routing and abuse prevention) |
| Application logging (mobile client and backend) | BetterStack | Diagnostic log lines from the mobile app and our backend, including your user ID, platform, OS version, device model, app version and build number, plus any context attached to the specific log event. We do not send your email address or other directly identifying personal data to BetterStack. |
| Legal compliance | Regulatory bodies if legally required | Whatever a valid legal request specifically compels |
We engage these providers as data processors under written agreements (or under each provider's standard data processing terms). They are required to process personal data only on our instructions, may not sell it, and may not use it for their own unrelated advertising. Apple, Google, and other independent controllers (such as the App Store or Google Play) process certain data under their own privacy policies, which we encourage you to review.
Several of these providers are based in the United States. When we transfer personal data of users in the EEA, the UK, or Switzerland to them, we rely on Standard Contractual Clauses or other lawful transfer mechanisms required by GDPR.
If our company is acquired, merges, or undergoes another corporate transaction, your data may be transferred as part of that transaction.
You'll be notified of any such change and your choices.
4. Third-Party Podcast Content
Podshot lets you access and listen to podcasts provided by third parties.
- We do not own or control the podcasts you access.
- Where possible, audio is streamed directly from podcast RSS feeds or podcast directory sources on your behalf.
- We may temporarily cache limited audio or metadata only as needed to provide smooth playback and related features.
AI summaries, transcripts, or notes generated from podcasts:
- Are for your personal, non-commercial use only.
- Are not monetized or resold as standalone content without creator consent.
- Are not shared publicly unless you explicitly choose to share them (for example, by exporting or copying a summary).
We comply with podcast directory terms of service and any applicable API limitations.
5. Children's Privacy
Podshot is rated 16+ on the Apple App Store and is not directed at children under 16. We do not knowingly collect personal data from children under 13 (the COPPA threshold in the United States) or from children under 16 in jurisdictions where 16 is the threshold for consent without parental authorization (such as parts of the EEA).
If you are a parent or guardian and believe a child has submitted personal data to us, please contact us at tech@podshot.ai and we will delete it promptly. If we learn that we have collected personal data from a child below the applicable age without appropriate consent, we will delete that information and may disable the associated account.
6. Security & Data Retention
- We use industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest where supported by our processors.
- We retain personal data only as long as your Podshot account is active or as needed to provide the Service.
Account Deletion
You can permanently delete your Podshot account at any time. Deletion happens in two stages:
- Immediately: Your personal information (email, name, avatar) is wiped, your account is closed, and you are signed out. You will not be able to log in again.
- Within 30 days: Your activity records (listening history, listening statistics, podshots, podcast subscriptions, request transcripts, and AI consent records) are permanently deleted from our primary database.
- Irreversible: Once you confirm deletion, the action cannot be undone. Support cannot restore deleted accounts. If you create a new account with the same email afterward, it will be a brand-new account - your prior history, podshots, and subscription state will not carry over.
Backups containing your data roll off on the standard backup retention cycle (typically 30 days). Server logs that may incidentally reference your data are retained for up to 30 days. We may retain a minimal record of the deletion request itself for legal and audit purposes.
Subscriptions Are Not Cancelled by Account Deletion
Deleting your Podshot account does not cancel any active App Store or Google Play subscription. Subscriptions are managed by Apple or Google, not by Podshot. To stop billing, you must also cancel the subscription in:
- iOS: Settings → [your name] → Subscriptions
- Android: Google Play Store → Profile → Payments & subscriptions → Subscriptions
We recommend cancelling your subscription before deleting your account, since logging back in to manage it after deletion is not possible.
Third-party Services
Podshot uses the following third-party services to operate the app. When you delete your account, your data is handled as follows:
- Supabase (authentication and database): your authentication record is removed immediately. Your personal information (email, name, avatar) is wiped immediately. Activity records (listening history, listening statistics, podshots, podcast subscriptions, request transcripts, and AI consent records) are permanently deleted within 30 days.
- RevenueCat (subscription management): we request deletion of your subscriber record. RevenueCat's own retention and deletion policies apply.
- OneSignal (push notifications): we request deletion of your push-notification record so that no further notifications are sent to your devices. OneSignal's own retention and deletion policies apply.
We do not control retention by Apple, Google, or the App Store / Play Store. Their data retention policies apply to the underlying purchase records, and you must cancel your subscription separately in their respective subscription settings (see above).
How to Delete Your Account
- In-app: Profile → Settings → Manage account → Delete account.
- From the web: https://podshot.ai/delete-account.
- By email to tech@podshot.ai.
7. Your Rights & Choices
Where required by law (for example, in the EEA or UK), we process your personal data on the following legal bases: (a) to perform our contract with you, such as providing and billing for the Service; (b) to pursue our legitimate interests, such as securing the Service, preventing fraud, monitoring performance, and understanding aggregated usage, provided those interests are not overridden by your rights; and (c) with your consent, for processing that requires it, such as sending podcast snippets, screenshots, or shared links to Google Gemini for AI processing.
Depending on your jurisdiction (for example, California or the EU/EEA), you may have the following rights:
- Access - Request a copy of the data we hold about you.
- Correction - Ask us to correct inaccurate or incomplete information.
- Deletion - Request that we delete your personal data (subject to legal obligations).
- Portability - Request a copy of your data in a portable format.
- Restriction / Objection - In some cases, object to or restrict certain processing activities.
- Withdraw consent - Where we rely on your consent (such as AI processing through Google Gemini), you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. The in-app path is Profile → Settings → Manage AI permissions.
- Lodge a complaint - If you are in the EEA, UK, or another jurisdiction with a supervisory authority, you have the right to lodge a complaint with that authority (for example, your national data protection authority). We'd ask you to contact us first so we can try to resolve the issue.
For California residents: Podshot does not sell or "share" personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. You have the right to know, correct, delete, and limit the use of sensitive personal information; we do not collect or process information that meets the CCPA's definition of sensitive personal information.
To exercise any of these rights, email tech@podshot.ai. We may ask you to verify your identity before fulfilling your request, and we will respond within the timeframe required by applicable law (typically 30 days under GDPR; 45 days under CCPA, with a possible 45-day extension).
If we transfer your personal data outside your home country, we will use appropriate safeguards, such as Standard Contractual Clauses or equivalent mechanisms, where required by law.
8. App Permissions & Preferences
Some features require access to certain device permissions:
| Feature | Data Access Required | How You Control It |
|---|---|---|
| Screenshot upload | Access to your photo library or camera | Device permission settings |
| In-app listening | Network access to stream podcast audio | Device/network settings |
| Push notifications | Device notification token | Device notification settings |
| AI summaries, screenshot identification, link lookup | Snippet text, podcast screenshots, or shared URLs sent to Google Gemini | In-app consent screen the first time, then Profile → Settings → Manage AI permissions to revoke or re-grant |
| Email updates | Your email address | In-app notification and email preferences, the unsubscribe link in each email, or by contacting us |
You can use Podshot without granting optional permissions, but some features may not work or may be limited.
9. Changes to This Policy
We may update this Policy to reflect changes in functionality, law, or business needs. If we make material changes, we will notify you in-app or via email where appropriate.
Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
10. Contact Us
If you have questions, feedback, or requests related to your privacy, please contact us:
World of Ideas, LLC
📧 tech@podshot.ai
Your Thoughts. Your Podcasts. Your Podshots.
Download Podshot free on iOS and Android .... because nobody speaks more authentically than you.