← YourPods

YourPods – Privacy Policy

Privacy Policy for YourPods Last Updated: October 15, 2026

A Secret Company, LLC (“we,” “us,” or “our”) respects your privacy and is committed to protecting it. YourPods supports three distinct modes of operation, each with different data handling characteristics. This Privacy Policy describes how data is handled in each mode.

By using YourPods, you agree to the terms outlined in this policy.

1. Account Types & Data Handling

YourPods offers three ways to use the app. You choose how your data is handled based on the account type you use.

1.1 Vault Mode (Device Only — Default)

If you do not sign in to any sync service, YourPods operates in Vault Mode: everything stays on your device.

  • All data (subscriptions, downloads, playback progress, queue, settings) is stored exclusively on your device.
  • Data is encrypted by the iOS/macOS operating system using standard device passcode protection.
  • We have zero access to this data. Nothing is transmitted to our servers, except when you choose to share an episode or podcast (see Section 1.5).
  • No account or email address is required.
  • We do not collect personal information, track usage, or use third-party analytics SDKs or advertising networks.
  • Vault Mode is free and needs no purchase. If you choose to buy something in the App, the purchase is confirmed as described in Section 6.3.

This is the Zero-Knowledge mode described in our original privacy pledge. It remains fully available and is the default experience.

1.2 gPodder Sync (Self-Hosted or Public Server)

YourPods allows you to synchronize your subscriptions and playback state using a self-hosted Nextcloud server with the gpodder-sync application, any gPodder v2-compatible server, or the public gpodder.net service, which the App offers as a preset.

  • User-Controlled Infrastructure: Synchronization occurs exclusively between your device and your designated server URL. You control where your data is stored.
  • Data Transmitted to Your Server: Subscription URLs, episode playback actions (play, pause, delete, position), and a device identifier.
  • No Intermediary: This data traffic does not pass through A Secret Company, LLC’s servers. We are technically unable to intercept or view this data.
  • Credentials: Your server credentials (username, password, or authentication tokens) are stored in the iOS/macOS Keychain and are only transmitted to your specified server for authentication.
  • Public Services: If you use gpodder.net or another public gPodder service, that service handles your sync data under its own privacy policy. We receive nothing from those accounts.

We are not responsible for the security, availability, or privacy practices of your self-hosted server. See Section 6.4 for third-party liability details.

1.3 YourPods Sync Account (Our Cloud Service)

YourPods Sync is a cloud synchronization service operated by A Secret Company, LLC. When you create a YourPods Sync account, your data is stored on our servers.

What we collect and store:

Data Category What’s Stored Purpose
Account Email address, hashed password (via Firebase Authentication) Account creation, login, password recovery
Subscriptions Podcast feed URLs Library sync across devices
Playback State Episode URL, playback position, timestamp, completion status Resume listening on any device
Queue Ordered list of episode URLs with metadata Up Next sync
Settings Listening profiles, per-podcast playback preferences Preference sync
Groups Library folder names and podcast assignments Organization sync
Listening Stats Play/skip/complete events with timestamps and durations Personal listening analytics
Episode Notes (Pro only) Notes you write on an episode, with their playback timestamp and tags, and the episode’s feed URL, audio URL and identifier Notes sync across devices
Account Tier Sync or Pro status, and the record of the purchase that grants it (Sync Unlock, earlier purchase of YourPods, or Pro subscription) Feature access

What we do NOT collect:

  • Audio content or episode files (these are fetched directly from podcast publishers)
  • Device identifiers beyond what is needed for sync
  • Location data
  • Contacts, photos, or any other device data
  • Third-party analytics or advertising data

Where your data is stored:

  • Our servers are hosted on DigitalOcean infrastructure located in the United States.
  • Account authentication is provided by Google Firebase Authentication.
  • All data is transmitted over HTTPS/TLS encryption.

YourPods Pro (paid tier) additional data:

If you upgrade to YourPods Pro, we additionally store:

  • An auto-generated app password for gPodder bridge access (hashed, not stored in plaintext).
  • gPodder v2 protocol sync data used by third-party clients you connect.
  • Your episode notes (see the table above). Notes sync only with YourPods Pro; on every other tier they stay on your device.

1.4 Sync Unlock (From Version 26.10.0)

From version 26.10.0, YourPods is a free download and Vault Mode needs no purchase. Syncing between devices — with a self-hosted server, gpodder.net, or a YourPods Sync account — requires the one-time Sync Unlock or a YourPods Pro subscription. If you bought YourPods from the App Store before it became free, the Sync Unlock is included. YourPods accounts that existed when YourPods became free keep their sync, and a paid YourPods Pro term keeps the Sync tier on your account after Pro ends, unless that payment is refunded.

  • Confirmed with Apple: The Sync Unlock is bought and confirmed directly with Apple’s App Store on your device. It does not use RevenueCat.
  • gPodder sync: For self-hosted servers and gpodder.net, the App checks your Sync Unlock or earlier purchase on your device, with Apple only. Nothing is sent to us.
  • YourPods Sync account: The App sends Apple’s signed record of your Sync Unlock or earlier purchase to our server, which verifies it with Apple so that your account can be given the Sync tier.

1.5 Share Links (All Account Types)

When you tap Share on an episode or podcast, the App asks our server to create a share link. This happens only when you choose to share, in every mode including Vault Mode.

  • Data Sent: The podcast’s feed URL, the episode’s audio URL and identifier, and the start time you chose. No listening history or account details are sent.
  • Verification: If you are signed in to a YourPods account, the request is sent with your account sign-in token. Without an account, it is verified with Firebase App Check (see Section 6.1).
  • If It Fails: If the share link cannot be created, the App shares a plain link instead.

2. Account Credentials

Depending on your account type:

  • Vault Mode: No credentials required. No account exists.
  • gPodder Sync: Credentials are stored in the iOS/macOS Keychain and transmitted only to your server or to gpodder.net. We never see them.
  • YourPods Sync: Your email and password are managed by Firebase Authentication (a Google service). Passwords are hashed and salted; we do not have access to your plaintext password. See Firebase’s privacy documentation for details.

3. Podcast Host Interactions (All Account Types)

When you stream or download an episode, or refresh a podcast feed, the App makes a direct network connection to the podcast publisher’s server.

  • Data Transmitted: Your IP address and the App’s User Agent string are visible to the podcast host.
  • Privacy Note: We do not control how podcast publishers handle your IP address. We recommend reviewing the privacy policies of the specific podcasts you subscribe to.
  • Podcast Search: When you search for podcasts, your search terms are sent directly to Apple’s podcast directory, or to Podcast Index if you turn it on in Settings and enter your own API key. Your IP address is visible to the search service. Searches do not pass through our servers.

4. Privacy Preserving Playback (P3)

YourPods offers an optional feature called “Privacy Preserving Playback” (P3) that removes known third-party tracking redirects and dynamic ad insertion (DAI) services from podcast episode URLs before your device initiates playback or downloads. When P3 is enabled, your device connects directly to the podcast’s audio hosting server, bypassing intermediary analytics and advertising services.

P3 is available to all users, regardless of account type (Vault Mode, gPodder, or YourPods Sync).

4.1 How P3 Works

Many podcast episode URLs include multiple layers of tracking redirects. For example, a single episode URL may route through analytics services such as Podtrac, Chartable, and Podsights before reaching the actual audio file. Each service in the chain logs your IP address, device information, and download event.

P3 performs on-device URL cleaning — it parses the episode URL locally and extracts the direct CDN URL (the actual audio file) without making any network requests to the tracking services. P3 currently blocks 20 tracking and DAI services across 32 domains.

4.2 Data Processing

  • Data Collected: None. P3 does not collect, transmit, or store any user data.
  • Processing Location: On-device only. All URL parsing and cleaning happens locally using a static pattern-matching engine. No network requests are made as part of the cleaning process.
  • No Proxy or VPN: YourPods does not operate any proxy, VPN, or intermediary server in connection with P3. Your device connects directly to the podcast’s audio host.

4.3 What P3 Blocks

When P3 is active for a podcast:

  • Your device connects directly to the podcast’s audio CDN.
  • Your device does not connect to any of the blocked tracking or DAI services — not even a DNS lookup is initiated for their domains.
  • Known analytics query parameters (such as UTM parameters) are stripped from URLs. Non-tracking parameters (authentication tokens, CDN signatures) are preserved.

When P3 is inactive (the default), episode URLs are used as provided by the podcast’s RSS feed, and your device follows the full redirect chain as normal.

4.4 P3 User Controls

  • P3 is disabled by default. You must explicitly opt in via Settings → Playback → P3.
  • You may override the global setting on a per-podcast basis through each podcast’s Listening Profile settings.
  • For YourPods Sync and Pro users, your P3 preference is synced across devices as part of your app settings. For gPodder sync users, P3 preferences remain device-local (the gPodder protocol does not support settings sync).

5. On-Device Transcripts

From version 26.10.0, the YourPods Mac app can create transcripts of episodes you have downloaded, free of charge. Some transcript tools, such as transcript export and search across all your transcripts, are part of Mac Extras, an optional one-time purchase for the Mac app. Using those tools does not change how transcripts are created or stored.

  • On-Device Processing: Transcripts are generated on your device by Apple’s built-in speech recognition, from episode audio you have downloaded.
  • Nothing Sent to Us: No audio, transcript text, or listening data is sent to our servers or to any other third party to create transcripts.
  • Language Models: Your device may download Apple’s speech model for a language from Apple the first time it is needed.
  • Storage: Transcripts are stored on the device where they were created and are not synced.
  • Publisher Transcripts: Transcripts that a podcast publishes in its feed are separate. They are downloaded from the publisher’s server, like other episode content (see Section 3).
  • Purchase: Mac Extras is confirmed through RevenueCat, as described in Section 6.3. It does not require a YourPods account.

6. Third-Party Services

6.1 Firebase Authentication and App Check

YourPods Sync and Pro accounts use Google Firebase Authentication. The App also uses Firebase App Check, with Apple’s App Attest and DeviceCheck, only when you create a share link without a YourPods account, so that our server can confirm the request comes from a genuine copy of the App. Firebase makes no network requests until you sign in to a YourPods account or create a share link. Firebase may collect limited technical data as described in Firebase’s privacy documentation.

6.2 Crisp Chat (Account Portal Only)

The account management portal at account.yourpods.app uses Crisp for live chat support. When you initiate a support conversation while logged in, your email address is shared with Crisp to provide context to support agents. See Crisp’s privacy policy for details.

6.3 RevenueCat (Purchases and Accounts)

We use RevenueCat to confirm, restore, and keep records of App Store purchases of YourPods Pro and, from version 26.10.0, Mac Extras. Payment itself is always processed by Apple. The App contacts RevenueCat only when this is needed: while you are signed in to a YourPods account (including each time the App starts), when you view, buy, or restore Mac Extras, or on a Mac where Mac Extras was bought, to check that purchase is still valid. If you use YourPods without an account and buy nothing, the App does not contact RevenueCat.

  • Identifier: When you are signed in to a YourPods account, your account’s user ID is used as your RevenueCat ID, so that your purchases stay linked to your account on all your devices. If you buy Mac Extras without an account, RevenueCat uses an anonymous ID that it generates.
  • Purchase Data: RevenueCat receives your App Store receipt and transaction data, which can include other YourPods purchases on the same Apple Account. We receive your subscription status and purchase records. We never receive your payment details.
  • Why It Is Necessary: This purchase data, including the purchase analytics and reporting RevenueCat provides to us, is necessary to sell and provide paid features and to run your account. We use it to confirm and restore your purchases, to give or remove access to paid features on your account and devices (for example, after a refund), and to keep accurate purchase and subscription records. It is collected only for these purchase and account purposes.
  • What It Is Not Used For: It is not used for listening analytics, advertising, or tracking you across other companies’ apps or websites.

The Sync Unlock does not use RevenueCat; it is confirmed directly with Apple (see Section 1.4). See RevenueCat’s privacy policy for details.

6.4 Self-Hosted Servers

If you use self-hosted gPodder sync, you are solely responsible for:

  • The security, maintenance, and configuration of your server.
  • Ensuring your server complies with applicable data protection laws.
  • The reliability of the gPodder sync API implementation on your server.

To the maximum extent permitted by applicable law, A Secret Company, LLC disclaims all liability for data loss, corruption, or synchronization errors resulting from third-party services; security breaches or unauthorized access to your personal server; and service interruptions caused by third-party software.

7. Apple Standard Data

Apple Inc. may collect limited, anonymized technical data (such as crash reports or installation metrics) depending on your device’s privacy settings (Settings > Privacy > Analytics & Improvements). This data is aggregated and does not identify you personally to us.

8. Your Data Rights (GDPR / CCPA / WA State)

Your data rights depend on your account type:

Right Vault Mode gPodder Sync YourPods Sync
Access Data is on your device Data is on your server Export via account portal
Export N/A Managed by your server JSON export at account.yourpods.app
Deletion Delete the app Managed by your server Full account deletion in the App or at account.yourpods.app
Correction Edit locally Managed by your server Update via account portal or app

YourPods Sync account deletion:

  • You may delete your account at any time in the App (in Manage Profiles, edit your YourPods profile and choose Delete My Account) or through account.yourpods.app.
  • Upon deletion, all your data (subscriptions, playback, queue, settings, stats) is permanently and irreversibly removed from our servers.
  • A minimal retention record (hashed email address, account tier, and deletion date) is retained for 3 years as required by Washington State record-keeping laws. This record cannot be used to identify you or reconstruct your data.
  • Deleting your account does not cancel a YourPods Pro subscription. Cancel it in your Apple Account subscription settings.

9. App Permissions

The App may request access to certain iOS/macOS features. You can revoke these permissions at any time in iOS/macOS Settings, though this may limit functionality.

  • Network Access: Required to download feeds/episodes and to sync with your server or YourPods Sync.
  • Background App Refresh: Used to update feeds and sync data while the App is in the background.
  • Notifications: (Optional) Used to alert you of new episodes or download completions. These notifications are created on your device; the App does not use a push notification service.
  • Siri: (Optional) Used to control playback with your voice. Siri requests are handled by Apple.
  • Files (Mac): The Mac app can open or save only the files and folders you choose.

The App does not request access to your microphone, camera, location, contacts, or photos.

10. Children’s Privacy

The App is not intended for children under the age of 13. We do not knowingly collect information from children. If you are a parent or guardian and believe your child has created a YourPods Sync account, please contact us at support@asc.is and we will promptly delete the account.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our App or legal requirements. If we make material changes, we will notify you through the App or our website. Your continued use of the App after such changes constitutes acceptance of the new policy.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

A Secret Company, LLC
Vancouver, Washington, USA
Email: support@asc.is
Website: https://asc.is/