gcd software

Podoyo privacy policy

This page says what the Podoyo app stores, who processes it, and how you get it back or delete it.

Last updated 6 October 2026.

What Podoyo stores

Podoyo needs an account. It stores:

  • Account: your email address (or the address from Google, Apple or Microsoft sign-in), a password hash if you registered with a password, your language and your time zone.
  • The requests you make in the app, your in-app settings and preferences.
  • The content generated for you from those requests.
  • Your playback position, so you can continue where you stopped.
  • A push token for your phone, so we can send notifications. It is removed when you sign out.

Registration asks your date of birth to check that you are 18 or over. The date itself is not stored — only the fact that the check passed, and when.

Podoyo shows no ads and contains no third-party analytics or tracking SDK. Your microphone is used only while you dictate, and we do not keep the recording.

Music

Music in the breaks is instrumental music we generate ourselves. It is served from our own servers, it is the default, and it needs no music account.

You can choose a different source in Settings. Jamendo streams free-licensed music from Jamendo’s own servers, so your device connects to them directly. On iPhone you can choose Apple Music, which asks for your permission through Apple and plays from your own subscription; we never see your Apple Music library.

Spotify is also optional. If you connect it, playback happens in your own Spotify account through the Spotify app and needs a Spotify Premium subscription. Our server exchanges the authorization code for tokens and hands them back to the app; the tokens are not kept on our servers, and we do not read your Spotify library or listening history. Spotify’s own privacy policy applies inside Spotify.

Who processes your data

We use third-party services to run the app and to generate the programmes you ask for. Each one receives only what it needs for its step:

  • Microsoft Azure (United States) hosts the service, the database and stored files.
  • Google (AI services that read your request, research your topics, write the programme and generate the speech and the break music; Firebase Cloud Messaging for notifications on Android).
  • Apple (push notifications on iPhone go directly to Apple). On both platforms, dictation uses your phone’s own speech recognition, so the audio is handled by Apple or Google under their terms before we receive the text.
  • OpenAI and ElevenLabs (speech services, used as alternatives to Google). These services receive the text needed to produce your programme; your email address and account details are never sent to them.
  • Web search runs inside the Google AI call. If that call fails we fall back to Tavily, which receives only the topic being researched.

We do not sell your data and do not share it with anyone else.

How long it is kept

Generated programmes are deleted seven days after they are made. The requests you write are kept for 30 days unless a programme or a schedule still uses them. A push token is dropped 90 days after we last saw the device. Your account and preferences stay until you delete the account.

If you create a share link for a programme, that link lives 30 days from the day you create it, and the programme is kept while the link works. Anyone with the link can listen, so the programme’s personal greeting is part of what you share. You can revoke a link.

Your data, your choice

From the app you can export everything Podoyo holds about you as a single file, and you can delete your account. Deletion removes the account, your requests, preferences, generated programmes, playback positions and push tokens. It cannot be undone. If someone added one of your shared programmes to their own library, their copy stays with them.

Age

Podoyo is for people aged 18 and over. Registration checks your date of birth and refuses younger users.

Contact

Questions about this policy or your data: contact@gcdsoftware.com