Privacy Policy

1. Who we are

Radio Dad is an independent iOS application, published by Tanzi Labs LLC ("Tanzi Labs", "we", "us"), that lets you discover and listen to live radio stations from around the world. This policy explains what data the app handles and why. It applies to the Radio Dad app and the website at radiodad.app.

Tanzi Labs LLC, a limited liability company formed in the State of Wyoming, USA, is the data controller for the limited personal data described here. You can reach us anytime at [email protected] (see section 15). We have not appointed a Data Protection Officer, because the scale and nature of our processing do not require one under Article 37 GDPR. If you are in the EEA or the UK and cannot resolve something with us by email, section 10 tells you how to complain to your regulator.

2. What we collect

We designed Radio Dad to need as little personal data as possible. Apart from episode alerts, which store only a push token and the shows you chose to follow (see section 5), we do not run servers that store data about you.

• No account is required. You can use Radio Dad without signing up. We don't ask for your name, email, or phone number, and there is no login.
• Content you create (your favorite stations, recently played history, and the songs you've heard) is stored on your device. If you're signed in to iCloud, it also syncs privately across your own Apple devices through your iCloud account. That sync is between you and Apple; it never passes through us, and we can't see it.
• No ads, no tracking. The app contains no advertising or crash-reporting SDKs. We don't build usage profiles, we don't assign you a tracking identifier, and nothing follows you into other apps or websites. Two third-party processors are used, each for one narrow job. RevenueCat manages subscription status on our behalf: it receives which plan you bought and whether it is active, tied to an anonymous identifier it generates, and never your name, email, location, or anything you listen to. PostHog receives anonymous usage statistics so we can see which features are used: events like "a station was played", tied to a random identifier the app makes up that is linked to nothing about you. Search text and station names are never sent. These statistics are processed and stored in the EU (Frankfurt) and kept for one year; PostHog's servers see your IP address only in the moment an event arrives and do not store it. We do not link either identifier to any account, because there is no account.
• No location, at all. Radio Dad never asks for location permission and has no location code in it. When the app shows stations "close to home", it is reading the country already set in your iOS region settings, plus any countries you picked yourself during setup. Neither is a position, neither leaves your device, and there is no location switch for Radio Dad in iOS Settings because the app never requests one.
• Purchase status: whether you have an active subscription is handled through Apple's App Store. We never see your card details; Apple processes all payments.

Everyone we share anything with is held to this policy. Each third party named here and in section 5 processes data only on our written instructions, under a data processing agreement, and is contractually required to provide the same or equal protection of your data as this policy describes. None of them may use it for their own purposes, sell it, or pass it on. That applies to the SDKs inside the app, to any service we reach through our own edge, and to any company related to us that could ever have access. There are no advertising networks in that list, because there is no advertising in Radio Dad.

3. What stays on your device

Some of Radio Dad's most powerful features run entirely on your device. The audio never leaves it. Two of them do send a small amount of text once you turn them on, and each is named below:

• Live Captions & translation. Transcription and translation happen on your device: the audio never leaves it, and neither do the captions made from it. Once you turn on lyrics or captions, the song's title and artist are sent as text to look the lyrics up, and they keep being sent for the songs that follow until you close the app. See section 5.
• Song recognition. A song is identified from a private audio fingerprint computed on your device and matched against Apple's music catalog. A recording of your listening is never made or uploaded. When a song is identified, its artist name is sent to look up the artist card.
• Ask Dad. Ask Dad is a chat that answers using Apple's on-device foundation model. Your messages are processed on your device and are sent to no one, including us. Nothing you type is stored after you close the conversation, and it is never used to train any model. What Dad finds for you comes from the same station and podcast catalog the rest of the app searches, over the connections named in section 5, and those searches carry no part of your message beyond the place, genre or subject being looked up. Replies are generated by software: they can be wrong, and they are labelled as such in the app.
• Diagnostics. If the app crashes, iOS creates a standard crash report. Radio Dad keeps the most recent ones on your device (Settings → About → Diagnostics); they are sent nowhere unless you choose to share one with us.

4. Radio streams

When you press play, your device connects directly to the radio station's own server. Audio does not pass through Radio Dad's infrastructure. As a result:

• We do not record, re-stream, transcode, or insert advertising into any station's audio.
• The broadcaster's own server may receive your device's IP address and standard connection information, as it would with any audio player. This is between you and that broadcaster, governed by their policies.

5. Network connections the app makes

Radio Dad has no accounts and no user profiles; its only analytics are the anonymous usage statistics described in section 2, never tied to you. It does have a small first-party edge on radiodad.app, run by us on Cloudflare, which caches and proxies a few lookups so the app talks to one place instead of many. We do not write, store or analyse any record of what a device asked for. That edge is how the app reaches most of the services below, so those services never see your device or its address:

• radio-browser.info: the open, community station directory (names, logos, genres, stream URLs, and coordinates), released under CC0. The app fetches the directory and, like the wider radio-browser community, may send an anonymous "tuned in" signal so popular stations rank higher. No account or personal identifier is attached.
• Broadcasters & their hosts: station streams and logos load directly from the broadcasters' own servers, which see your IP address as above.
• Apple: App Store payments, song matching (a private audio fingerprint only), on-device speech & translation, syncing your library privately across your own devices via iCloud, and opening a matched song in Apple Music.
• LRCLIB (lrclib.net): a free, no-account lyrics database. Once you open lyrics or captions, the song's title and artist are sent to look them up: first through our own radiodad.app cache, and directly to LRCLIB only if that is slow or unreachable. Nothing is sent for a song you never asked about, and no identifier about you is attached to any of it.
• MusicBrainz, Wikipedia and Wikidata: the artist card and the place blurb. When a song is identified we look the artist up; when you tune a station we look its city up. Both go through our edge, so these services see our servers, not you.
• MET Norway (the Norwegian Meteorological Institute): the weather on a station's card, used under CC BY 4.0. Your device never contacts them. We collect one forecast for the whole world on our own server and publish it as a single file; the app downloads that file at most a few times a day and looks the answer up on the device, so it works offline and MET never sees you, your location, or which station you tuned to. What we changed is written out on the weather data page.
• Podcast Index: the podcast directory, when you search podcasts. Through our edge, as above. The feed for a show you open goes through our edge too.
• Podcast publishers & their hosts: an episode's audio and any transcript the show ships load directly from the publisher's own servers, which see your IP address in the same way a broadcaster does. Both are fetched only for a show you actually open. Cover art is no longer in that group: it loads through our own radiodad.app edge for the podcast hosts we recognise, which covers almost every show in the directory, so those hosts see our servers rather than you. Artwork for a show on a host we don't recognise still loads from the publisher's server.
• Apple (iTunes Search): only if you play a 30-second song preview, which needs the track's title and artist.
• Episode alerts: if, and only if, you turn on notifications for a podcast, your device's Apple push token and the list of shows you follow are stored on our server so we can tell you when a new episode lands. Turning notifications off deletes them. Nothing else about your listening is stored there.
• Spotify: only if you tap "open in Spotify," which hands off to Spotify with a track search. We don't share anything with Spotify otherwise.

This website. The page you're reading serves its own fonts and uses Cloudflare Web Analytics: a cookieless, privacy-respecting measurement that counts visits without cookies, without collecting any personal data, and without tracking you across sites. The one exception is the globe player in the hero: if you tap play, your browser streams live audio directly from a broadcaster (or a short Apple Music preview as a fallback). Nothing is fetched until you tap, and no identifier about you is attached. The separate web player at listen.radiodad.app is its own app: alongside streaming audio directly from broadcasters, it loads map tiles and routing data for the globe and its Road Trip feature, and queries the community radio directory to find stations. It uses the same cookieless Cloudflare Web Analytics, sets no other cookies, and keeps your favorites and history only in your browser. See its note at listen.radiodad.app/privacy.

6. What we never do

• We never show ads, and there are no advertising SDKs in the app.
• The app contains no advertising or crash-reporting SDKs, and we never profile you. Usage statistics are anonymous and never tied to you; subscription status is handled by RevenueCat against an anonymous id (both in section 2).
• We never sell or rent your personal data.
• We never record, relay, or modify a station's audio.

7. Data retention

Content you create (favorites, history) lives on your device, and in your private iCloud if you have it enabled, until you delete it. Anonymous usage statistics are kept at PostHog for one year, tied to nothing about you, then deleted (section 2). We hold no server-side profile of you, because there are no accounts. Deleting the app removes its data from your phone, and you can remove the iCloud copy from your Apple account settings.

8. Where your data is processed

Radio Dad is published from the United States, so some of the limited data described above is processed outside the country you live in. Here is exactly where, and what makes each transfer lawful:

• Anonymous usage statistics stay in the EU. PostHog processes and stores them on EU infrastructure in Frankfurt, Germany. For readers in the EEA and the UK, this is not an international transfer at all.
• Subscription status goes to the United States. RevenueCat is US-based. It receives which plan you bought and whether it is active, against an anonymous identifier it generates.
• Apple and Cloudflare operate globally. Apple handles payments, iCloud sync and on-device technologies; Cloudflare runs our edge, which usually answers from the data centre closest to you.

Where personal data does leave the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum for UK transfers), together with the EU-US Data Privacy Framework where the provider is certified under it. You can ask us for a copy of the safeguards that apply to a specific provider at [email protected].

We have not appointed an Article 27 representative in the EU or the UK. Our processing of EEA and UK data is occasional, limited to the categories named in section 2, and does not include special-category data, which is the exemption Article 27(2) describes. If that changes, this section changes with it.

9. Your choices and controls

Most of what a privacy policy elsewhere calls a "request" is a switch inside the app here. You do not need to email us to use any of these.

• Delete my data. Settings → Data & Privacy → Delete my data erases everything the app holds on the device and in your private iCloud. Your subscription is not affected, because Apple owns that record, not us.
• Which countries you see. Settings → Countries changes the countries the app leans on, which is what "close to home" reads. There is nothing to revoke here, because it was never a permission.
• Episode alerts. Turning notifications off for a show deletes the push token and the follow list we held for it. There is nothing left to request.
• Everything else is already yours. Favorites, history and saved songs live on your device, so access, correction, deletion and export are things you do directly rather than ask us for.

10. Your rights (GDPR, UK GDPR & KVKK)

Depending on where you live, you have the right to access, correct, delete, or restrict processing of your personal data, to object to processing, and to data portability. Because Radio Dad holds almost no personal data tied to your identity, most of it is already under your direct control on your device, and section 9 is the fastest route to most of them.

Our lawful basis, per purpose. A single blanket answer would not be honest, so:

• Running the app, playing stations, and reaching the services in section 5: our legitimate interest in providing a radio app you asked to use (Article 6(1)(f)).
• Anonymous usage statistics: our legitimate interest in knowing which features are used (Article 6(1)(f)). We judged this proportionate because the data is not linked to you, is never sold, never leaves the EU, and is deleted after a year. These events carry no identifier we can match to a person, and the app has no account, so we cannot find yours in order to show them to you, export them or stop them separately. Article 11 covers this case, and we will not start collecting something that identifies you just to make it possible.
• Episode alerts: your consent (Article 6(1)(a)), given by turning notifications on for a show and withdrawn by turning them off, which also deletes what was stored. Withdrawal does not affect processing that already happened.
• Subscription status: performance of our contract with you (Article 6(1)(b)), so that a feature you paid for unlocks.

No automated decision-making. We do not carry out automated decision-making or profiling that produces legal or similarly significant effects about you, within the meaning of Article 22.

Your right to complain. If you think we have handled your data badly, please tell us first at [email protected]. You also have the right to lodge a complaint with a data protection authority without contacting us at all. In the EEA that is the supervisory authority where you live, work, or where the issue arose, and the full list is published by the European Data Protection Board. In the UK it is the Information Commissioner's Office. In Türkiye it is the Kişisel Verileri Koruma Kurumu.

For residents of Türkiye, we process personal data in accordance with the Law on the Protection of Personal Data (KVKK) No. 6698, and the rights listed in its Article 11 apply. To exercise any right anywhere, email us and we will respond within the period the law sets, which is one month under the GDPR and thirty days under the KVKK. Using a right costs nothing and we will never treat you differently for it.

11. California privacy rights

This section is for California residents and is written to the terms the CCPA, as amended by the CPRA, uses.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months. There is no "Do Not Sell or Share My Personal Information" link on this site because there is nothing for it to switch off. We also honour Global Privacy Control signals as an opt-out; there is simply no selling or sharing for one to stop.

In the preceding twelve months we collected these categories, all of them from you or your device as you use the app, and none from data brokers:

• Identifiers: the random, app-generated identifiers described in section 2, and a push token if you turn on episode alerts. Business purpose: measuring feature use, keeping subscription status accurate, and delivering the alerts you asked for. Disclosed to PostHog, RevenueCat and Apple as service providers. Retention: one year for statistics, and only until you turn alerts off for the push token.
• Commercial information: which subscription plan you bought and whether it is active. Business purpose: unlocking what you paid for. Disclosed to RevenueCat and Apple as service providers. Retained while the subscription record exists.
• Internet or network activity: the anonymous product events in section 2. Business purpose: knowing which features are used. Disclosed to PostHog as a service provider. Retention: one year.

We do not collect geolocation data. The app has no location permission and no location code, and "close to home" is read from your iOS region setting on the device. We also do not collect sensitive personal information as the CPRA defines it, so the right to limit its use has nothing to act on. You have the right to know, to delete, to correct, to opt out of sale or sharing, and to be free from discrimination for exercising any of them. Section 9 does all of this without a request, and you can also email [email protected]. We will verify a request by asking you to send it from the address you contacted us on, since we hold no account to check it against. An authorized agent may act for you with written permission.

12. How we protect what little there is

The strongest protection here is structural: there are no accounts, no passwords to steal, and no server holding a profile of you. What remains is protected as follows.

• Every connection the app makes to our own edge, and to the services in section 5, is encrypted in transit with TLS. Some broadcasters still publish plain-HTTP streams, and the app tells you nothing to the contrary; that hop is the broadcaster's choice, not ours.
• Favorites, history and saved songs are protected by your device's own encryption, and by your Apple account if you sync them through iCloud.
• Access to our Cloudflare configuration and to the analytics project is restricted to the people who run Radio Dad and protected by two-factor authentication.
• If a breach ever affects personal data, we will notify the relevant supervisory authority within 72 hours as Article 33 requires, and tell affected users directly where the risk to them is high.

13. Children

Radio Dad is not directed to children under 13 (or the equivalent minimum age in your country) and we do not knowingly collect personal data from them. Radio content is provided by third-party broadcasters and is not curated for children. If you believe a child has provided us personal data, contact us and we will delete it.

14. Changes to this policy

We may update this policy as the app evolves. When we make material changes, we'll update the "Effective" date above and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.

15. Contact

Questions about privacy, or want to exercise a data right? Email us at [email protected].