Podoyo privacy policy

This page says what the Podoyo app stores, who processes it, and how you get it back or delete it.

Last updated October 16, 2026.

What Podoyo stores

Podoyo needs an account. It stores:

Account: your email address (or the address from Google or Apple sign-in), a password hash if you registered with a password, your first and last name if you entered them, your language, and your time zone.
The requests you make in the app, your in-app settings and preferences, and your schedules.
The programs generated for you from those requests: each program's title, date, length, list of parts, and the request you wrote, along with its script and audio. The script and the audio are deleted seven days after a program is made. The rest stays in your history until you delete your account.
Your playback position, so you can continue where you stopped.
A push token for your phone, so we can send notifications. It is removed when you sign out.
Your plan (free or Premium), a counter of the talk minutes your programs used this month, and the minute packs you bought. We never see your card details; the App Store or Google Play handles the payment.

Registration asks you to confirm that you are 18 or over. We store only the fact that you confirmed, and when.

Usage analytics: which screen opened, that a program was requested or played, that an ad was shown, along with your device type, app version, and language. These events carry your account ID but never your name, email, the sentences you write, or the names of your topics. Your microphone is used only while you dictate, and we do not keep the recording.

Ads, on the free tier only: the program list shows one ad card and, at times, a sponsored program marked as such. On iPhone, Apple's tracking permission is asked first; if you decline, ads still show but are not personalized. In the European Economic Area, the United Kingdom, and Switzerland, Google's consent form is shown and your choice is kept. Premium accounts see no ads.

Music

Music in the breaks is instrumental music we generate ourselves. It is served from our own servers, it is the default, and it needs no music account.

On iPhone you can choose Apple Music instead in Settings. It asks for your permission through Apple and plays from your own subscription; we never see your Apple Music library.

Who processes your data

We use third-party services to run the app and to generate the programs you ask for. Each one receives only what it needs for its step:

Microsoft Azure (United States) hosts the service, the database, and stored files.
Google (AI services that read your request, research your topics, write the program, speak English and German, and generate the break music; Firebase Cloud Messaging for notifications on Android).
Apple (push notifications on iPhone go directly to Apple). On both platforms, dictation uses your phone's own speech recognition, so the audio is handled by Apple or Google under their terms before we receive the text.
Fish Audio (the speech service that reads Turkish programs aloud). Speech services receive only the text of your program; your email address and account details are never sent to them.
Web search runs inside the Google AI call. If that call fails, we fall back to Tavily, which receives only the topic being researched.
PostHog (United States) stores the usage analytics described above.
Google AdMob serves the ads on the free tier and receives the advertising identifier if you allowed it. How Google uses that data is described at policies.google.com/technologies/partner-sites.
Apple App Store and Google Play process purchases; RevenueCat (United States) verifies them and tells our server what you bought.

We do not sell your data and do not share it with anyone else.

How long it is kept

The script and the audio of a generated program are deleted seven days after the program is made. The program itself stays in your history, with its title, date, length, list of parts, and the request you wrote, until you delete your account. A sentence you write is kept for 30 days, unless it is the one your account is set to now, a schedule still uses it, or a program is still being made from it. Becoming a program does not extend that: the program keeps its own copy of the request, and that copy stays with the program. A push token is dropped 90 days after we last saw the device. Usage analytics are kept for up to one year. Purchase records stay as long as the account does, plus what tax law requires. Your account and preferences stay until you delete the account.

If you create a share link for a program, that link lives 30 days from the day you create it, and the program and its audio are kept while the link works. Anyone with the link can listen, so the program's personal greeting is part of what you share. You can revoke a link.

When you delete your account, we keep one thing for up to two months: a one-way hash of your email address, together with the talk minutes used in the current month. A hash is a scrambled value that cannot be turned back into the address, so we cannot read your email address from it. We keep it only so that deleting an account and signing up again cannot be used to reset the free monthly allowance. Our legal basis is our legitimate interest in preventing fraud and abuse of that allowance, and we use it for nothing else.

Your data, your choice

From the app you can export everything Podoyo holds about you as a single file, and you can delete your account. Deletion removes the account, your requests, preferences, schedules, your program history and any audio still stored, playback positions, push tokens, minute counters, and purchase records. It cannot be undone. Apart from what tax law requires us to keep about a purchase, the only thing we keep is a one-way hash of your email address and this month's minute count, for up to two months, as described under "How long it is kept" above. Usage analytics are deleted from our analytics provider on request. If someone added one of your shared programs to their own library, their copy stays with them. If you live in the European Union or Turkey, the rights under the GDPR or KVKK to access, correct, delete, restrict, and port your data apply; write to us to exercise any of them.

Age

Podoyo is for people 18 and over. Registration asks you to confirm it and refuses accounts that do not.

Contact

Questions about this policy or your data: contact@gcdsoftware.com