Sail Listener App Privacy Policy

Effective October 17, 2026. This policy covers Sail’s iPhone, iPad, and Android listener apps and the account and safety services they use. Contact Sail Podcasting at fkhosti@gmail.com with privacy or deletion questions.

Information we handle

If you create an account, Firebase Authentication processes your email address, password, account identifier, and authentication requests. On Apple devices, the app stores session tokens in the iOS Keychain. On Android, Firebase Authentication manages the device session in app-private storage. Sail does not separately save your password. Your saved episodes and followed shows are linked to your account in Firebase Firestore. These services process connection information, such as IP addresses, as needed to deliver and secure the service.

On your device

Listening history, playback position, cached catalog data, downloaded episodes, blocked creators, and explicit-content preferences are stored on your device. Apple widgets share the last episode’s title, show, and playback progress through Sail’s app group. The Android home screen widget reads the last episode and progress from app-private storage. The app can play audio while in the background when you request playback.

Optional episode notifications

If you enable notifications while signed in, Sail stores an installation identifier, Apple or Firebase Cloud Messaging push token, account identifier, and notification preferences in Firebase. We use your followed shows, blocked creators, and explicit-content preferences to send relevant new-episode alerts through Apple Push Notification service on Apple devices or Firebase Cloud Messaging on Android. Notification titles may appear on your Lock Screen according to your device notification settings. This information is used for app functionality, not advertising or tracking. You can turn alerts off in Account or device Settings. Signing out disables alerts for that installation; a pending server opt-out syncs when the app is online again. Device registrations expire after 30 days without renewal, and delivery receipts are retained for up to 30 days.

Optional listening analytics

On iPhone and iPad, listening analytics are off until you enable Share Listening Analytics in Account. On Android, Share Listening Analytics is on by default and you can turn it off in Account or the first-use notice. When enabled, Sail sends episode and show references, playback sessions, actual listening time, completion, follow actions, completed shares on Apple devices or share-destination selections on Android, device category, and a random app identifier to Firebase to calculate creator statistics. Signed-in activity is linked to your Sail account; guests use a random identifier. Creators receive aggregate statistics rather than listener identities. Audio and video activity are included. Seeking ahead does not count as listening time.

Offline events wait on your device for up to seven days and sync when connected. Event and session records are removed on a daily schedule after 30 days; non-identifying aggregate reports may remain. Turn collection off at any time in Account; this clears pending uploads and resets the random analytics identifier. Previously uploaded records remain subject to retention and account-deletion processing. There is no advertising identifier or cross-app tracking. Media hosting providers may separately receive playback requests even when this optional collection is off.

Playback providers

Streaming, artwork loading, and downloads connect your device to the creator’s hosting or delivery provider. That provider receives connection information and the requested media address. Its privacy practices also apply. Sail uses these connections to provide the playback or download you requested.

The current catalog includes media delivered by Firebase Storage and Buzzsprout. Buzzsprout records media requests, IP addresses, user agents, and sometimes referring addresses, and uses network information to understand approximate download geography. It uses this information for download statistics, fraud prevention, and legal compliance. These hosting-provider logs are separate from Sail’s optional listening analytics and may be collected when you stream or download even if Share Listening Analytics is off. See Buzzsprout’s privacy policy for its practices and delivery providers. Sail does not request GPS or precise device location.

Safety reports

Reports include the episode reference, chosen reason, optional details you provide, submission time, and your account identifier if you are signed in. Guests can report content without creating an account. A daily derived network or account key limits abusive reporting. We use reports for moderation, abuse prevention, and responding to concerns; avoid including sensitive personal information in report details.

Use and sharing

We use this information to authenticate users, sync libraries, deliver media, process account deletion, and protect the service, and produce creator statistics when listening analytics are enabled. Firebase/Google Cloud and media providers process information to supply these services. Authorized Sail personnel can access information needed for support, moderation, and account administration. The native apps include no advertising or third-party analytics SDKs, do not request tracking permission, and do not sell personal data.

Request deletion of your Sail account

You can request account deletion in Sail’s Account screen after confirming your password. If you no longer have the app, email fkhosti@gmail.com to request account deletion from the email address associated with your Sail account. You do not need to reinstall Sail. Include “Sail account deletion request” in the subject. We may verify account ownership before processing; never send your password.

Account and cloud library information remain until you delete them or request account deletion. Deletion applies across Sail, including creator profiles and owned shows associated with that login. Requests are completed within 30 days; staff or shared-workspace accounts require administrator processing to protect other owners’ data. Contact us at the address above if a request remains unresolved.

In-app deletion clears this app’s local listening history and downloads and removes the account and associated cloud library. If you request deletion by email, remove remaining local downloads and app data on any devices where Sail is still installed. Operational report-rate keys expire within two days. Completed deletion receipts expire after 30 days. Moderation reports are retained while a concern is investigated and for up to 90 days after resolution, unless a legal obligation requires longer retention. Records needed for legal, security, or financial obligations may be retained only for those purposes. Third-party media copies and backups follow their providers’ deletion and retention processes.

Your choices

You can browse, listen, download authorized episodes, and report concerns without an account. Sign-in is needed for cloud library features and optional followed-show notifications. You can remove downloads, block or unblock creators, and manage explicit-content access in the app. Explicit content is hidden by default; access requires declaring that you are 18 or older. Contact us to request access to or correction of account information.

Children, security, and changes

The Android app is intended for adults aged 18 and older. Sail is not a service directed at children under 13. Contact us if you believe a child has supplied personal information. Data is transmitted over HTTPS; Apple account tokens use the iOS Keychain; Android sessions use Firebase Authentication’s app-private storage, and Android backup is disabled. No system can guarantee absolute security. We will update the effective date and this policy when our data practices change.