Privacy Policy
Effective date:
This policy describes the 24h Radio iOS app and website, operated by Aziz Firat. We use information to provide accounts, saved stations, optional social features and reliable playback. We do not sell personal data or use it for advertising tracking across other companies’ apps or websites.
Your account and profile
You can listen without an account. If you sign in with Apple, we receive an account identifier and the email address Apple provides, which may be a private relay address. We store your profile name, username, optional photo, bio and links, saved stations, station preferences and follows to provide these features. Your profile and public collection can be seen by other listeners. Custom stream URLs are kept in your private collection.
Optional listening and location sharing
You can choose whether to share what you are listening to and your approximate region. Location is estimated from your network request and rounded to a broad area; we do not request GPS access. Shared listening information expires shortly after playback updates stop. You can turn sharing off in Settings. Turning it off removes the shared listening or location information from the live view.
Community activity
During the beta, new additions to your public station collection and tracks you save to Apple Music or open in Spotify through 24h Radio can appear in station discovery with your profile name and photo. We store the station or track identifier, track title, artist, artwork link and time of the action. We do not read or publish the rest of your Apple Music library. Spotify opens are included as discoveries, not confirmed saves. We cannot see whether you save a track in Spotify. Each person is counted once per track during the retention period. Private stations are excluded.
When listening sharing is on, we also keep a daily record of the public stations you listen to, linked to your account, to count distinct listeners for the past seven days. Turning sharing off excludes you from these rankings. Activity is retained for 30 days and ranking records for seven days, with expired records removed by daily cleanup. Removing a station from your collection removes its addition activity. Account deletion removes the associated activity records.
Playback diagnostics
When you play a shared radio station, the app can automatically send small technical samples to help us investigate connection problems. Each sample contains:
- The shared station and channel identifiers, the time recorded by our server and a random identifier for that event.
- The app build, iOS version and connection category, such as Wi-Fi or cellular.
- The time to connect, a resumed buffering duration, or a numeric playback error code.
These samples do not contain audio, GPS location, your account identifier, a stream URL or free-text logs. Apple Music playback, private custom stations and directory search previews are excluded. Diagnostics are sent in the background and can also be sent when you are signed out.
Our server receives an IP address as part of the request. It derives a salted network hash that changes daily to limit requests. This is a pseudonymous security measure, not a guarantee of anonymity. Scheduled cleanup deletes samples after 30 days. The administrator sees grouped results from the past 24 hours. Automatic samples are limited to 20 per network per hour and 2,000 globally per hour. Manual connection reports are also used to investigate channel problems.
Information kept on your device
The app caches station information, artwork and your last played station on your device. Playback preferences, including the option to play on launch for signed-in listeners, are also stored locally. Sign-in credentials are stored using the iOS Keychain.
Apple Music and song identification
Apple Music access is requested through Apple’s permission prompt. Apple handles playback and music-library actions through MusicKit. We do not receive your Apple Account password.
When you’re signed in and listening, the app may automatically identify tracks by processing up to ten seconds of the station’s stream on your device and send a derived signature to Apple’s Shazam service for a match. It does not use your microphone or send that audio to our server. The latest 100 identified tracks are saved on your device, separately for each account. They remain after you close the app, with older entries removed as new tracks are identified. Signing out hides your account’s history; signing back in restores it on the same device. This history is excluded from device backups and is removed when you delete the app. We do not send this history to our server. Saving a matched song to your Apple Music library is a separate action.
Services and network requests
Supabase provides our account, database and storage services. Cloudflare provides the approximate-region service and our admin infrastructure. Cloudflare also hosts the public website. Radio Browser supplies directory searches. OpenAI helps assess station artwork on our server using station and image information; profile information and listening diagnostics are not sent for this artwork work. Radio streams and artwork are requested from their providers, who receive the network information needed to deliver them. Apple services, these providers and our hosting services handle requests under their own privacy practices. Service logs may contain IP addresses and request information used for security and operation.
The public website
The public website does not use advertising, analytics trackers, or account cookies. Our hosting providers receive the network information needed to serve pages and may keep security and operational logs. The private admin tool stores its sign-in session in the browser for the duration of the tab.
Your choices and requests
You can edit your profile, remove saved stations and follows, disable sharing, sign out, and revoke Apple Music access in iOS Settings. Account and collection information is kept while your account is in use. You can request access, correction or deletion of your account information by contacting us. Some security records or backups may remain while needed for security or legal obligations.
Privacy questions and account-deletion requests: hi@azizfirat.com.
Changes to this policy
We will update this page when our practices change and show the revised date above.