Who we are
Podlog is a social podcast diary for iPhone. Podlog is developed and operated by Busra Hekimoglu, an individual developer (“we”). You can reach us at support@logventure.net.
This Privacy Policy explains how we handle your personal data when you use the Podlog app and Podlog’s web pages. We are the data controller for that data under the EU General Data Protection Regulation (GDPR) and Türkiye’s Personal Data Protection Law No. 6698 (KVKK), and this policy is also our information notice under Article 10 of the KVKK.
At a glance
- Once you’ve chosen a username, your profile, diary entries, ratings, reviews, Top 4 and public lists are visible to anyone, including people who aren’t signed in. Your follower and following counts are public, but who follows whom is visible only to the two people involved. Your Listen later queue and private lists are visible only to you.
- No ads, no tracking, and we never sell your personal data.
- There is no third-party analytics SDK and no crash-reporting SDK in the current version of Podlog.
- You can delete your account in the app at any time, and deletion is immediate.
What we collect
Account and sign-in
When you create an account we process your email address and the identifiers our authentication service assigns to your account. You can sign up with email and password, with Sign in with Apple (on iPhone) or with Google. If you use Apple or Google, we receive the details that provider shares to sign you in: an account identifier, your email address and, if the provider shares it, your name. Apple may give us a private relay address instead of your real email address, and shares your name only the first time you sign in with Apple. Other profile details the provider includes, such as a link to your Google profile picture, may be stored in your private sign-in record too. None of this is shown publicly: we don’t copy your name or picture to your public profile. Passwords are stored by our authentication provider only in hashed form, so we can’t see them.
If you use Sign in with Apple, we also keep the refresh token Apple issues to Podlog. It is stored encrypted and used only to revoke Podlog’s access with Apple when you delete your account.
Your profile
You choose a username when you set up your account: 3–24 characters made of lowercase letters, numbers and underscores. Usernames can’t be changed later. Your public display name starts empty and becomes your username when you choose one; you can change it in Edit profile at any time. We never fill it in from your email address or from a name Apple or Google shares with us. You can also add an optional bio. Podlog doesn’t currently let you upload a profile photo. Until you’ve chosen a username, your profile isn’t visible to other people.
Your diary and social activity
To provide the service, we store what you create and do in Podlog:
- diary entries: the episode, the date you listened, your rating, whether you liked it, your review text, and whether the entry is marked as containing spoilers;
- your Listen later queue;
- your Top 4 podcasts;
- the lists you create and whether each one is public or private;
- the accounts you follow and the accounts you block;
- reports you submit about reviews or profiles, including the reason and any details you add.
We also store reports other people submit about your reviews or profile, so we can review them.
Terms acceptance
When you continue from the sign-in screen, we record in your account metadata which version of the Terms of Use you accepted and when. We do the same when you accept an updated version.
Purchases
If you subscribe to Podlog Pro, the purchase is processed by Apple through the App Store. We use RevenueCat to manage subscriptions: it receives purchase information from the store together with a pseudonymous identifier for your Podlog account, and tells us your subscription status, such as which plan is active and until when. We never receive or store your payment card details.
Podcast search
Podcast and episode information (titles, descriptions, artwork and episode lengths) comes from the open Podcast Index directory (podcastindex.org). When you search, our server sends your search terms to Podcast Index without your identity. We keep your search terms and their results for about six hours, without any link to your account, so repeated searches are faster. To protect the shared directory from abuse, we keep a running count of directory requests per account.
Technical data
Like any online service, our hosting providers process technical data such as IP addresses and request details when your device connects to them, to deliver the service and keep it secure. We don’t use this data to profile you. Podlog’s web pages don’t use cookies or analytics, and the password reset page keeps its temporary session in memory only, not in browser storage.
In the app, podcast artwork images load directly from the podcast publishers’ servers (or the services they use to host their artwork), not from ours. Like any image on the web, those servers can see your IP address when your device loads an image.
What’s public and what’s private
Podlog is a social app. Once you’ve chosen a username, your profile (username, display name and bio), your diary entries with their ratings, likes and reviews, your Top 4 and your public lists are visible to anyone through our services, including people who aren’t signed in. Lists are public unless you make them private. Profiles that haven’t finished setup, because no username has been chosen yet, aren’t visible to others.
Your follower and following counts are public, but who follows whom is visible only to the two people involved: you can see who you follow and who follows you, and others can’t.
Your Listen later queue, your private lists, the accounts you’ve blocked, the reports you’ve submitted and your email address are never shown to other users. Please don’t put personal information you want to keep private in your reviews, lists, display name or bio.
Why we use your data
- To create and run your account and provide Podlog’s features, including Pro: this is necessary to perform our contract with you, the Terms of Use (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- To keep Podlog safe: reviewing reports, enforcing the community rules, filtering objectionable words, preventing spam and abuse, and securing our systems. This is based on our legitimate interest in a safe, working service (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
- To record your acceptance of the Terms, respond to your requests and comply with the law: our legal obligations and our legitimate interest in establishing and defending legal claims (GDPR Art. 6(1)(c) and (f); KVKK Art. 5(2)(ç) and (e)).
We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. The automatic word filter only stops some objectionable words from being saved; reports are always reviewed by a person.
No ads, no tracking, no data sales
Podlog shows no ads and doesn’t track you across other companies’ apps or websites. We don’t sell or rent your personal data, and we don’t share it for advertising.
The current version of Podlog contains no third-party analytics SDK and no crash-reporting SDK. If we ever decide to add one, we’ll update this policy before it ships, and ask for your consent where the law requires it.
Who we share data with
We use a small number of providers to run Podlog:
- Supabase, our hosting provider: database, authentication and server functions. It also sends account emails, such as confirmation and password reset links, which may be delivered through an email delivery service acting on our behalf.
- RevenueCat: subscription management for Podlog Pro.
- Apple and Google: sign-in, if you choose them; Apple also handles App Store purchases. They act under their own privacy policies.
- Podcast Index: the podcast directory. It receives search terms, not your identity.
- Vercel: hosts Podlog’s web pages.
Podcast publishers aren’t our providers, but because artwork images load directly from their servers, those servers can see your IP address. We don’t share your account details with them.
We may also disclose data when the law requires it, to protect the rights and safety of our users or others, or if Podlog is transferred to a new owner, who would have to keep honouring this policy.
International transfers
Our providers may store or process data outside Türkiye and outside the EU/EEA, for example in the United States. When that happens, we rely on the appropriate safeguards the law requires, such as standard contractual clauses, and on the transfer mechanisms set out in Article 9 of the KVKK.
How long we keep data
We keep your data for as long as your account exists. Anything you remove in the app, such as a log, a list or a Listen later item, is deleted right away. Search terms and their results are kept for about six hours, without any link to your account.
Deletion is immediate when you delete your account: your account and the data listed on our Account deletion page are removed from our systems at once. This includes the reports you filed and the reports others filed about you. We keep only a non-identifying record that a deletion took place, without your user ID. Copies may survive in our hosting provider’s encrypted backups for a short time until they are overwritten. Apple and RevenueCat may keep purchase records under their own policies and legal obligations.
Your rights
Data protection law, including Article 11 of the KVKK in Türkiye and the GDPR in the EU/EEA, gives you rights over your personal data.
Under the KVKK (Türkiye)
Under Article 11 of the KVKK, you can apply to us to:
- learn whether your personal data is processed;
- request information about the processing if it is;
- learn the purpose of the processing and whether your data is used in line with that purpose;
- know the third parties in Türkiye or abroad to whom your personal data is transferred;
- ask for your personal data to be rectified if it is incomplete or inaccurate;
- ask for your personal data to be erased or destroyed under the conditions in Article 7 of the KVKK;
- ask for any rectification, erasure or destruction to be notified to the third parties to whom your personal data was transferred;
- object to a result against you that arises from your data being analysed exclusively by automated systems;
- claim compensation if you suffer damage because your personal data was processed unlawfully.
Under the GDPR (EU/EEA)
If you’re in the EU/EEA, the GDPR also gives you these rights:
- Access: learn whether we process your data, why and with whom we share it, and get a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: have your data deleted.
- Objection and restriction: object to processing based on our legitimate interests, or ask us to limit processing in certain cases.
- Portability: receive the data you gave us in a structured, machine-readable format.
You can do much of this yourself in the app: edit your display name, bio and diary at any time, and delete your account in Profile → Settings → Delete account. There is no in-app export yet, so email us for a copy of your data and we’ll send it to you.
To exercise any of these rights, email support@logventure.net from the email address linked to your Podlog account, so we can verify it’s you. We answer free of charge and within 30 days at the latest.
If you’re not satisfied with our answer, you can complain to the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu, kvkk.gov.tr) or, in the EU/EEA, to the data protection authority where you live or work. Under the KVKK, a complaint to the Board can be made after you have first applied to us.
Children
Podlog isn’t meant for children. You must be at least 13 years old to use it, or older if your country sets a higher minimum age for consenting to online services on your own (for example 16 in some EU countries). If we learn that an account belongs to someone below that age, we’ll delete it. If you believe a child is using Podlog, please contact us.
Security
We protect your data with encryption in transit (HTTPS), database access rules that let each account change only its own data, and encryption of sensitive tokens such as Apple refresh tokens. No system is perfectly secure, so please use a strong password you don’t use anywhere else. If a breach affects your personal data, we’ll notify you and the authorities as the law requires.
Changes to this policy
We’ll update this policy when Podlog changes, for example before adding a new provider or a new kind of data. The effective date at the top shows the current version, and we’ll tell you in the app about significant changes.
Contact
Questions or requests about privacy: support@logventure.net