Privacy Policy
Last updated: September 4, 2026
This policy explains what data Podcastly ("the app", "we") collects, why, and who it is shared with. Podcastly is operated by Kenzo Marian Weiss, a private individual based in Germany (full contact details in the Imprint).
1. Data we collect
| Data | Purpose | Source |
|---|---|---|
| Email address, password (hashed) | Account creation and sign-in | You, via Supabase Auth |
| Saved words, review schedule, listening progress, study streak | Sync your library and flashcards across devices | Generated as you use the app, stored via Supabase |
| Podcast episode audio | Generating a transcript for an episode nobody has transcribed yet | Sent to AssemblyAI (transcription provider); not sent again once a transcript is cached |
| Short text snippets (words, example sentences) | Generating natural-sounding pronunciation audio | Sent to Google Cloud Text-to-Speech |
| Your questions and the dictionary lookups you ask about | The in-app AI chat and definition features | Sent to DeepSeek (AI provider) |
| Subscription/purchase status | Unlocking Pro features | Apple's App Store and RevenueCat; we never see your payment details |
Saved words and your review schedule are also kept locally on your device (in an on-device database) so the app works offline; this local copy never leaves your device except via the sync described above.
2. Legal basis
We process this data under Art. 6(1)(b) GDPR (necessary to provide the service you signed up for). We do not run advertising, analytics, or tracking SDKs, and we do not sell data.
3. Third-party processors
- Supabase — account authentication and database hosting.
- AssemblyAI — speech-to-text transcription of podcast audio.
- Google Cloud (Text-to-Speech) — generating spoken audio for words and sentences.
- DeepSeek — AI-generated answers and dictionary definitions.
- Apple (App Store) and RevenueCat — processing purchases and verifying subscription status.
Some of these providers may process data outside the European Economic Area, including in the United States and, in the case of DeepSeek, in China. Where a provider is located outside the EEA, we rely on the safeguards that provider offers (such as standard contractual clauses) to the extent they are available; we recommend not submitting sensitive personal information in chat questions or search terms.
4. Retention
Your account data is kept for as long as your account exists. You can delete your account yourself at any time, in the app under Settings › Account › Delete account. Deletion takes effect immediately and is permanent: your account, your saved words, their review schedule and your listening history are erased and cannot be restored. You can also ask us to delete it for you (see Section 6). Cached podcast transcripts are shared, anonymous infrastructure — they are not tied to any individual account and are kept so the same episode does not need to be transcribed twice.
5. Children
Podcastly is not directed at children under 16. We do not knowingly collect data from children under that age.
6. Your rights
Under the GDPR you have the right to access, correct, delete, or export your data, and to object to or restrict its processing. Deletion you can carry out yourself at any time, in the app under Settings › Account › Delete account (see Section 4). To exercise any of the other rights, or to request removal of a podcast feed you hold rights to, contact us at kenzo.voicebox@gmail.com. You may also lodge a complaint with your local data protection authority; for the controller named above, that is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz.
7. Changes to this policy
If this policy changes materially, we will update the date above. Continued use of the app after a change means you accept the updated policy.