Privacy Policy

Effective date: 18 April 2026 Last updated: 18 April 2026

This Privacy Policy describes how Sigil Radio LTD ("Sigil Radio", "we", "us") collects, uses, and shares information when you use the Sigil Radio iOS app and the website at sigilradio.live.

Who we are

Sigil Radio LTD India House 88–92 (Suite C), John Bright Street, Birmingham, England, B1 1BN Company number: 15833631

For privacy questions, email privacy@sigilradio.live.

The short version

• We do not require an account, email, or password to use the app.
• We do not run ads and we do not sell your data.
• We do not track your location, contacts, photos, microphone, or health data.
• The only personal data we process is what we need to run the service: a random per-device identifier (so your favorites and history stay with you), the shows and tracks you interact with, search queries, and automatic crash reports if the app crashes.
• You can delete your listening history and favorites from inside the app at any time. You can also email us for a full wipe.

What we collect

1. Information you provide

Because Sigil Radio has no sign-in, the only information you actively provide is:

• Favorites and likes you create by tapping the heart on a broadcast, show, or track.
• Listening history generated as you play broadcasts.
• Search queries you type into the search screen.
• Feedback if you email us.

2. Information collected automatically

When you open the app:

• A random device identifier (UUID) generated locally on first launch. It is not your Apple ID, not the IDFA advertising identifier, and not tied to any other identifier Apple provides. We use it so your favorites and history stay with you on that device.
• Playback telemetry — which broadcasts or tracks you played, when, and for how long — used to drive the "Recently Played" section.
• Technical data — device model, iOS version, app version, approximate timezone, and the rough geography derived from your IP address (country/region, not a precise location). Collected when you connect to our streaming servers or crash-reporting servers.
• Crash and performance diagnostics — if the app crashes, we receive a stack trace, the state of the app at the time, the iOS version, the device model, the crash time, and an installation UUID plus IP address generated by Firebase Crashlytics. Used solely to diagnose and fix bugs.

3. Information we do not collect

• We do not collect your name, email, phone number, contacts, precise location, health data, financial data, photos, microphone input, or IDFA advertising identifier.
• We do not use cookies, fingerprinting, or cross-app tracking.
• The app does not request App Tracking Transparency permission because it does not track you across apps or websites owned by other companies.

Third-party services we use

Each provider has its own privacy policy and its own security posture. We only send them what the table above describes.

How we use the information

• To stream audio to your device.
• To remember your favorites, likes, history, and playback position across app launches on the same device.
• To populate personalized views such as "Recently Played" and "Recommended".
• To detect, diagnose, and fix crashes and bugs.
• To protect the service from abuse (e.g. rate-limiting).
• To comply with legal obligations.

We do not use your information for advertising, profiling for marketing purposes, or automated decision-making with legal effects.

Legal basis for processing (UK / EEA users)

Under UK GDPR and EU GDPR, our legal bases are:

• Contract — to provide the app you requested (streaming, favorites, history).
• Legitimate interests — to keep the service running, secure, and debuggable (crash reports, rate-limiting).
• Consent — where required by law for specific integrations; you can withdraw consent via the in-app controls below.

Data retention

• Favorites and likes — kept until you tap the trash icon on the Favorites tab to clear them, or email us.
• Listening history and playback positions — kept until you tap the trash icon on the History tab to clear them, or email us. (Clearing history also clears saved playback positions.)
• Crash reports — retained by Firebase Crashlytics for up to 90 days, then automatically deleted.
• Server logs (IP + user-agent for stream requests) — retained for up to 30 days, then deleted or aggregated.
• Search queries — Algolia retains query logs for its own analytics; we do not tie them to your device UUID.

Your rights

Depending on where you live, you may have the right to:

• Access the data we hold about your device.
• Correct inaccurate data.
• Delete your data.
• Restrict or object to processing.
• Port your data (receive an export in JSON).
• Withdraw consent where we rely on it.
• Complain to a supervisory authority — for UK users, the Information Commissioner's Office (ico.org.uk).

California residents have analogous rights under CCPA/CPRA, including the right to know, delete, correct, and limit use of sensitive personal information. We do not sell or
share personal information for cross-context behavioral advertising.

To exercise any right, email privacy@sigilradio.live. Because we do not have accounts, you will need to give us the device UUID (shown in Settings) so we can locate your
records.

How to delete your data

You have three routes:

1. Inside the app.
   • History & playback positions: on the Saved tab, open the History sub-tab and tap the trash icon in the top right. Confirm to clear all listening history and saved playback positions for that device.
   • Favorites & likes: on the Saved tab, open the Favorites sub-tab and tap the trash icon in the top right. Confirm to clear all favorites and likes for that device.
2. By email. Write to privacy@sigilradio.live including the device UUID shown in Settings. We will delete all Firestore records tied to that UUID within 30 days.
3. By deleting the app. Uninstalling removes on-device state but does not automatically delete cloud-side favorites/history tied to the old UUID. Use the trash icons or
   email us before uninstalling if you want a clean wipe.

Data security

We use HTTPS for all data in transit. Firebase and Algolia enforce encryption at rest. Access to production systems is restricted to authorised personnel. No service is
perfectly secure, and we cannot guarantee absolute security.

International transfers

If you are in the UK, EEA, or Switzerland, your data may be transferred to servers in the United States (Google Firebase). Such transfers rely on the UK International Data
Transfer Agreement (IDTA), the EU–US Data Privacy Framework, and Google's Standard Contractual Clauses, as applicable.

Children

Sigil Radio is not directed to children under 13 (or the equivalent minimum age in your jurisdiction) and we do not knowingly collect personal information from them. If you
believe a child has provided us information, email privacy@sigilradio.live and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be announced via an update to the app. The "Last updated" date at the top reflects the latest change.

Contact

Sigil Radio LTD India House 88–92 (Suite C), John Bright Street, Birmingham, England, B1 1BN Company number: 15833631
privacy@sigilradio.live