Privacy Policy

Effective date: 18 April 2026 Last updated: 27 September 2026

This Privacy Policy describes how Sigil Radio LTD ("Sigil Radio", "we", "us") collects, uses, and shares information when you use the Sigil Radio iOS app and the website at sigilradio.live.

Who we are

Sigil Radio LTD India House 88–92 (Suite C), John Bright Street, Birmingham, England, B1 1BN Company number: 15833631

For privacy questions, email privacy@sigilradio.live.

The short version

• The app itself does not require an account, email, or password. If you join the app beta programme on our website, we keep the email you give us to send your invite (see App beta programme below).
• We do not run ads and we do not sell your data.
• We do not track your location, contacts, photos, microphone, or health data.
• The only personal data we process is what we need to run the service: a random per-device identifier (so your favorites and history stay with you), the shows and tracks you interact with, search queries, and automatic crash reports if the app crashes.
• You can delete your listening history and favorites from inside the app at any time. You can also email us for a full wipe.

What we collect

1. Information you provide

Because the app has no sign-in, the only information you actively provide in the app is:

• Favorites and likes you create by tapping the heart on a broadcast, show, or track.
• Listening history generated as you play broadcasts.
• Search queries you type into the search screen.
• Feedback if you email us.

2. Information collected automatically

When you open the app:

• A random device identifier (UUID) generated locally on first launch. It is not your Apple ID, not the IDFA advertising identifier, and not tied to any other identifier Apple provides. We use it so your favorites and history stay with you on that device.
• Playback telemetry — which broadcasts or tracks you played, when, and for how long — used to drive the "Recently Played" section.
• Technical data — device model, iOS version, app version, approximate timezone, and the rough geography derived from your IP address (country/region, not a precise location). Collected when you connect to our streaming servers or crash-reporting servers.
• Crash and performance diagnostics — if the app crashes, we receive a stack trace, the state of the app at the time, the iOS version, the device model, the crash time, and an installation UUID plus IP address generated by Firebase Crashlytics. Used solely to diagnose and fix bugs.

3. Information we do not collect

• The app does not collect your name, email, phone number, contacts, precise location, health data, financial data, photos, microphone input, or IDFA advertising identifier.
• We do not use cookies, fingerprinting, or cross-app tracking.
• The app does not request App Tracking Transparency permission because it does not track you across apps or websites owned by other companies.

App beta programme

If you sign up at sigilradio.live/app to test new versions of the app before they are released, we collect:

• Your email address, so we can send you the invite.
• The platform you chose (iOS or Android).
• The time you gave consent, and whether you ticked the newsletter box.
• A hashed version of your IP address and your browser's user agent, so we can spot and block abuse of the signup form. We do not store the IP address itself.

Why: to send you the beta invite and, if you left the newsletter box ticked, our newsletter. Our legal basis for both is your consent. You can withdraw it at any time by emailing appfeedback@sigilradio.live, or for the newsletter with the unsubscribe link in any newsletter email. We keep the hashed IP address and user agent on the basis of our legitimate interest in protecting the signup form from abuse.

Who we share it with:

• Apple, through TestFlight and App Store Connect, to deliver the iOS invite. Apple sends the invite email and runs TestFlight under its own privacy policy.
• Google, through Firebase App Distribution, to deliver the Android invite once the Android beta exists.
• MailerLite, only if you opted in to the newsletter.

How long we keep it: we keep the signup list while the beta programme runs and delete it when the programme ends. Newsletter subscriptions last until you unsubscribe with the link in any newsletter email.

How to leave: email appfeedback@sigilradio.live. We remove you from the tester list with Apple (and Google, once the Android beta exists) and stop sending you anything about the beta. We keep your signup marked as removed, so you are not invited again, until the signup list is deleted when the programme ends. The newsletter is separate: unsubscribe with the link in any newsletter email.

Third-party services we use

Each provider has its own privacy policy and its own security posture. We only send them what the table above describes.

How we use the information

• To stream audio to your device.
• To remember your favorites, likes, history, and playback position across app launches on the same device.
• To populate personalized views such as "Recently Played" and "Recommended".
• To detect, diagnose, and fix crashes and bugs.
• To protect the service from abuse (e.g. rate-limiting).
• To comply with legal obligations.

We do not use your information for advertising, profiling for marketing purposes, or automated decision-making with legal effects.

Legal basis for processing (UK / EEA users)

Under UK GDPR and EU GDPR, our legal bases are:

• Contract — to provide the app you requested (streaming, favorites, history).
• Legitimate interests — to keep the service running, secure, and debuggable (crash reports, rate-limiting).
• Consent — where required by law for specific integrations; you can withdraw consent via the in-app controls below.

Data retention

• Favorites and likes — kept until you tap the trash icon on the Favorites tab to clear them, or email us.

• Listening history and playback positions — kept until you tap the trash icon on the History tab to clear them, or email us. (Clearing history also clears saved playback positions.)

• Crash reports — retained by Firebase Crashlytics for up to 90 days, then automatically deleted.

• Server logs (IP + user-agent for stream requests) — retained for up to 30 days, then deleted or aggregated.

• Search queries — Algolia retains query logs for its own analytics; we do not tie them to your device UUID.

• Recent searches — the app also keeps your recent search terms in Firestore under your device UUID, so they show on the search screen. They are kept until you clear them in the app, or email us.

  Your rights

  Depending on where you live, you may have the right to:

  • Access the data we hold about your device.
  • Correct inaccurate data.
  • Delete your data.
  • Restrict or object to processing.
  • Port your data (receive an export in JSON).
  • Withdraw consent where we rely on it.
  • Complain to a supervisory authority — for UK users, the Information Commissioner's Office (ico.org.uk).

  California residents have analogous rights under CCPA/CPRA, including the right to know, delete, correct, and limit use of sensitive personal information. We do not sell or
  share personal information for cross-context behavioral advertising.

  To exercise any right, email privacy@sigilradio.live. Because we do not have accounts, you will need to give us the device UUID (shown in Settings) so we can locate your
  records.

  How to delete your data

  You have three routes:

  1. Inside the app.
     • History & playback positions: on the Saved tab, open the History sub-tab and tap the trash icon in the top right. Confirm to clear all listening history and saved playback positions for that device.
     • Favorites & likes: on the Saved tab, open the Favorites sub-tab and tap the trash icon in the top right. Confirm to clear all favorites and likes for that device.
  • Recent searches: on the Search screen, clear your recent searches. This deletes the recent search terms stored for that device.
  2. By email. Write to privacy@sigilradio.live including the device UUID shown in Settings. We will delete all Firestore records tied to that UUID within 30 days.
  3. By deleting the app. Uninstalling removes on-device state but does not automatically delete cloud-side favorites, history or recent searches tied to the old UUID. Clear them in the app or email us before uninstalling if you want a clean wipe.

  Data security

  We use HTTPS for all data in transit. Firebase and Algolia enforce encryption at rest. Access to production systems is restricted to authorised personnel. No service is
  perfectly secure, and we cannot guarantee absolute security.

  International transfers

  If you are in the UK, EEA, or Switzerland, your data may be transferred to servers in the United States (Google Firebase). Such transfers rely on the UK International Data
  Transfer Agreement (IDTA), the EU–US Data Privacy Framework, and Google's Standard Contractual Clauses, as applicable.

  Children

  Sigil Radio is not directed to children under 13 (or the equivalent minimum age in your jurisdiction) and we do not knowingly collect personal information from them. If you
  believe a child has provided us information, email privacy@sigilradio.live and we will delete it.

  Changes to this policy

  We may update this policy from time to time. Material changes will be announced via an update to the app. The "Last updated" date at the top reflects the latest change.

  Contact

  Sigil Radio LTD India House 88–92 (Suite C), John Bright Street, Birmingham, England, B1 1BN Company number: 15833631
  privacy@sigilradio.live