Privacy policy

Who is responsible

Yield Compiler AB operates Podidex and is responsible for the personal information described here. Contact: Robert@podidex.com. Postal address: Anckargripsgatan 3, 211 19 Malmö, Sweden. Podidex is intended for adults aged 18 and over.

Account and your library

We process your email, authentication information and profile name to create and secure your account. We store your podcast ideas, source URLs, preferences, scripts, episodes, listening progress, usage and feedback to provide the service. Supabase provides authentication and database services. Cloudflare Turnstile performs security checks during authentication.

Your device stores your session and a local library cache. Downloaded MP3 files and download settings are stored on your device. These local copies are separate from server storage.

AI generation and Live

Podcast ideas, clarification choices, source text, instructions and relevant podcast history are sent to OpenRouter and its model providers for text generation. Source URLs and requests are sent to selected websites and source APIs to collect material. Tavily processes search queries and research results. OpenAI processes text for embeddings used to retrieve relevant podcast knowledge. Google Gemini processes scripts and voice instructions for generated speech.

When you join Live, your microphone audio, listener name and relevant episode script, research and playback context are sent through our relay to Google Gemini. Live web searches send search queries to Tavily and results to Gemini. Microphone permission is separate from the processing described here. Do not submit passwords, sensitive personal information or private information about other people.

Hosting, messages and payments

Vercel and Google Cloud host application services. Audio is stored through Supabase Storage or Cloudflare R2. Apple receives device push destinations and notification content, including podcast and episode titles and routing identifiers, when iPhone notifications are enabled. Mailgun delivers episode emails; authentication emails use the configured Supabase mail service.

Existing web subscriptions use Stripe. Subscription identifiers, plan and usage information are linked to your account. The iPhone app has no purchases. Support receives the email address and message you choose to send.

Website cookies and diagnostics

Our websites use cookies and local storage for authentication and PostHog analytics, including session replay. Website input content can appear in replay; password fields are masked. Sentry collects website and server errors and diagnostic information. Server events can be linked to a user identifier. These website tools are separate from the iPhone app’s local library and download storage.

Storage and deletion

Account and library records remain until you remove them or delete your account. The server audio cleanup job selects completed episode audio older than 30 days from episode creation; failed cleanup can remain queued for retry. Terminal notification delivery records are pruned after 30 days. The notification ledger remains for the episode’s lifetime to prevent duplicate delivery.

Account deletion removes the Auth account and associated podcasts, episodes, listening records and notification registrations. Audio cleanup can finish afterward. Technical deletion and synchronization records, shared fetched source pages, payment records, support correspondence, diagnostics and separate evaluation copies can remain outside the account deletion operation. Deletion does not promise immediate removal of every provider or backup copy. Contact us about personal information in these separate records.

Service providers and international processing

Information is processed by the services named above and their applicable service providers. Processing may take place outside Sweden and the EEA. Provider retention and processing terms differ. We do not promise that all data stays in the EU, that provider retention is zero or that deleting your Podidex account deletes every external copy.

Your requests

You can ask for access to your personal information, a copy or export, correction, deletion, restriction or objection, and portability where applicable. Email Robert@podidex.com. We verify account ownership before disclosing information or acting on an email deletion request. We do not routinely ask for identity documents, passwords or login codes.

We respond without unnecessary delay, normally within one month. If a lawful extension is needed, we explain it within the first month. We agree a secure delivery method after verification. You can complain to the Swedish Authority for Privacy Protection (IMY). See the support page for account deletion instructions.