Fermisio Radio Privacy Policy
Platform scope: Sections 1–11 and their September 8, 2026 date below describe the iOS and CarPlay app only. The separate Android section describes the Android app (2.2.6 and later), including its own storage, permissions, network connections and deletion choices.
iOS and CarPlay
Fermisio ("we", "us") builds Fermisio Radio (formerly Play Radio). This policy explains what information the app handles, why, and the choices you have. The short version: you can use the app without an account, we do not sell your data, and most of what the app stores stays on your device or in your own iCloud.
This policy also covers the app's planned name change to Fermisio Radio in version 1.3.69.
1. What we collect
| Data | Where it lives | Why |
|---|---|---|
| Favorites, playlists, presets, settings | On your device. Optionally in your iCloud, and in your Fermisio Radio account if you sign in. | To run the app and keep your library in sync across devices. |
| Listening activity (which stations you play, when, for how long) | On your device for Recents. Aggregated, non-identifying statistics reach our servers. If you are signed in, recent activity can be associated with your account so it syncs. | Recents, personal charts, and understanding which features matter. |
| Account details (only if you sign in) | Our backend (see section 5). | To identify your account and sync your library. |
| Crash and performance reports | Sentry (see section 5). | To find and fix bugs. Contains device model, OS version, app version and technical stack traces. Not linked to your identity. |
| Advertising identifier (IDFA) (free tier only, and only if you allow tracking) | Google AdMob (see section 3). | To show ads that keep the free tier free. |
| Installation and Apple Ads attribution data (a random installation identifier, attribution token, app version, platform and events such as viewing the Premium offer) | The installation identifier is saved on your device and sent with attribution or event data to our backend. Apple provides the attribution token through AdServices. | To measure which Apple Ads campaigns lead to installations and purchases, and to tailor when the Premium offer is shown. |
| Purchase information (Premium status, product and transaction identifiers) | Apple and the app. Purchase events sent to our backend include the product identifier, transaction identifier and installation identifier. The installation identifier is also passed to Apple with purchases as an app account token. | To manage Premium access and relate purchases to installation attribution. We do not receive your card or billing details. |
| Optional location and selected city | Apple's location and geocoding services help identify your city. The nearby feature uses coordinates in memory to sort stations by distance, saves your selected city on your device, and uses country and city information in requests to our station catalog. | To find radio stations in your city when you choose “Use My Location.” You can select a city manually instead. |
We do not access your contacts, photos or phone number. Choosing a city or country manually is a filter and does not read your device's location. If you choose Use My Location, the app requests a one-time location reading with your iOS permission and uses Apple's geocoding service to identify a supported city. This feature does not continuously track your location. You can deny or revoke location access in iOS Settings and continue selecting stations manually.
2. Optional account
You can sign in with Apple or Google to sync favorites and playlists across devices. When you do, we receive the identifier the provider gives us and, if you share it, your name and e-mail address. With Sign in with Apple you can hide your real e-mail address. We use these details only to identify your account and to answer support requests you send us.
You can delete your account and everything attached to it at any time by e-mailing support@fermisio.com from the address on the account. We complete deletion within 30 days.
3. Advertising
The free tier shows ads served by Google AdMob in the phone app, including ads within lists and full-screen ads. You may also choose to watch a rewarded ad for a temporary period without app ads. We do not display app ads on the CarPlay screen. Radio stations may include their own advertising in their broadcasts.
- The app presents Google's consent choices where applicable, and iOS may ask whether the app may track you across other apps and websites. If you decline tracking, the app does not provide IDFA to AdMob. Ad availability and personalization also depend on your consent choices. You can change tracking permission in iOS Settings → Privacy & Security → Tracking, and revisit Google's privacy choices in the app when that option is available.
- If you allow tracking, Google may use your advertising identifier (IDFA) to personalize ads, as described in Google's advertising policy.
- Premium removes ads displayed by the app. Advertisements included in a radio station's own broadcast may remain.
Separately from AdMob, the app uses Apple AdServices for Apple Ads attribution. It sends an attribution token and a random identifier for this installation to our backend, together with app version and platform information. The same identifier links events such as viewing the Premium offer and completing a purchase to the installation. This attribution flow does not use IDFA and operates without requiring you to sign in or grant the iOS tracking permission described above.
Our authorized ad sellers are listed in app-ads.txt.
4. Song identification
When you tap the Shazam button, the app uses the microphone to capture a few seconds of audio and sends an acoustic fingerprint to Apple's ShazamKit to identify the song. We never store or transmit the raw recording, and the microphone is used only while identification is running. You can revoke microphone access in iOS Settings at any time.
5. Third-party services
- Radio stations. Audio streams come directly from each broadcaster's servers. Like any internet radio player, the station can see your IP address and standard connection details. We do not control what stations log.
- Radio Browser. The open station directory that seeds our catalog. Station names, logos and stream URLs are public data.
- Supabase. Hosts our backend (accounts, sync, station catalog requests, live song charts, installation attribution and purchase events). Data is stored on servers in the European Union.
- Apple iCloud (CloudKit). Optional sync of your library within your own iCloud account, governed by Apple's privacy policy.
- Sentry. Crash and performance monitoring, technical data only.
- Google AdMob. Ad serving for the free tier, see section 3.
- Apple AdServices. Apple Ads installation attribution, see section 3.
- Apple location and geocoding services. Optional one-time location and city lookup when you choose “Use My Location,” see section 1.
- Apple ShazamKit. Song identification, see section 4.
- Apple App Store. Handles all payments. We never see your card or billing details.
6. Storage and security
Local data is stored with Apple's SwiftData framework inside the app's sandbox. Data in transit is encrypted with TLS. Backend access is restricted per user with row-level security, so one account cannot read another account's data.
7. Retention
- Data on your device is deleted when you uninstall the app or clear it in Settings → Data & Sync.
- Account data is kept until you delete your account.
- Crash reports are kept for 90 days.
- Aggregated listening statistics contain no identifiers and are kept indefinitely.
8. Your rights and choices
Depending on where you live (including under the GDPR in the European Union and the KVKK in Türkiye), you may have the right to access, correct, export or delete your personal data, to object to certain processing, and to complain to your data protection authority. To exercise any of these, e-mail support@fermisio.com. We respond within 30 days.
In the app you can also: sign out or delete your account, turn iCloud sync off, and clear cached data. Through iOS Settings you can revoke microphone or location access and withdraw tracking permission. You can choose a city manually without allowing location access.
9. Children
The app is not directed at children under 13 (or the age of digital consent where you live) and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
10. Changes
We will post any changes on this page and update the date at the top. For material changes we will also notify you in the app.
11. Contact
Fermisio · support@fermisio.com · fermisio.com
Android
Fermisio provides Fermisio Radio. This Android policy covers radio and podcast listening, music discovery, favorites, optional accounts, Premium purchases and the optional features described below. You can listen without creating a Fermisio account. Contact us at support@fermisio.com.
Catalog, search and audio providers
The app sends your searches, selected country, city, genre or language and requested station or chart identifiers to our catalog on Supabase. Music and podcast discovery also requests results from Apple’s public directory. Broadcasters and podcast publishers supply their own streams, episode files and RSS feeds. Artwork loads from the relevant image host. These services receive the requested content and ordinary connection details, including your IP address.
Supabase infrastructure may retain request logs and location inferred from the connection. Our inspected Pro plan provides a seven-day hosted log window; this is not a promise about independent providers or separately configured exports. Broadcasters, publishers, Apple and image hosts can have their own logging, advertising and retention practices. Ads embedded in a broadcast or podcast are controlled by its provider.
Favorites, history, downloads and settings
The app keeps favorites, station collections, custom stream addresses, recently played stations, song playlists, heard-song and recognition history, followed podcasts, episode progress, queues, downloads and preferences in private device storage. Home recommendations use your local preferences and recent listening. Heard-song history is limited to 200 entries and 90 days in the Android app. Your library is excluded from Android cloud backup and device transfer.
When you download an episode, the app saves its audio file for offline playback. Removing a download removes that local file. Clearing artwork cache preserves your library and downloaded episodes. Clearing Android app storage or uninstalling removes local data, but does not cancel a Google Play subscription or delete remote records.
Optional account and synced favorites
If you sign in with Apple or Google, the sign-in provider supplies an account identifier and the email or profile information you permit. Supabase Authentication manages the Fermisio session. Tokens are encrypted in Android Keystore-backed storage. Signed-in favorite station identifiers can be synchronized with your Fermisio account. Other local libraries are not represented as automatically synchronized.
You can sign out without erasing your local library. You can request deletion of your Fermisio account at support@fermisio.com; in-app deletion requires recent authentication and removes the Fermisio account and its associated synced favorites; retained listening events are separated from the deleted account by the deletion service. Local libraries can be cleared separately. Deleting a Fermisio account does not delete an Apple or Google account and does not cancel purchases billed by Google Play.
Premium purchases
Google Play processes subscription and lifetime purchases. Fermisio does not receive your payment card details. The app sends the product identifier and Google purchase token to our Android verification service so it can confirm the purchase with Google, acknowledge it, restore access and handle expiry, replacement or refund events.
The service keeps purchase status and keyed hashes of purchase or order identifiers. Revocation and replacement records are retained to prevent a refunded or replaced purchase from restoring access. Operational refund-review data and reconciliation cursors are encrypted on the server. An optional signed, time-limited entitlement is encrypted locally for offline access. Purchase record retention and Google billing records are separate from an optional Fermisio account.
You can manage or cancel recurring billing through Google Play subscriptions. Canceling normally ends the next renewal; the paid access period is determined by Google Play.
Advertising and privacy choices
The free version integrates Google Mobile Ads and Google’s consent controls. Depending on your choices, region and ad configuration, Google can process IP-derived approximate location, advertising or app identifiers, interaction data and diagnostic information for ads, measurement and fraud prevention. Consent and privacy options are available in the app when required. Premium suppresses Fermisio’s app ads; it does not remove ads in broadcasters’ audio.
Android settings let you manage the advertising identifier. Google’s Privacy Policy and Mobile Ads data disclosure explain Google’s handling. A rewarded ad is optional; its completed-view callback can grant a temporary ad-free period.
Google Cast (Chromecast)
The Cast button lets you send the live stream to a Chromecast, Google TV or Nest device on your Wi-Fi network. Google’s Cast SDK discovers nearby receivers and, when you start a session, the receiver device fetches the station’s stream directly. According to Google’s SDK disclosure the Cast framework may process device or other identifiers, app interaction data and diagnostics to operate the session. No Fermisio account is required, and Fermisio does not receive a list of your home devices.
Optional nearby discovery
If you choose nearby stations and grant approximate location access, the app requests a foreground location fix, rounds its coordinates and asks Android’s geocoding service for a city and country. The geocoding provider may process those coordinates remotely. Fermisio’s catalog receives the resulting city/country filter, not the coordinates. The app does not retain the coordinate fix or track location in the background. You can choose a city manually and revoke location permission in Android settings.
Optional song recognition
Recognition can use a short sample of the station playing in Fermisio, or microphone audio after you explicitly choose microphone recognition and grant permission. Microphone sampling ends when the recognition session ends or the app leaves the foreground. The intended ShazamKit integration derives an acoustic signature for Apple’s recognition service; Apple states that the original audio is not shared with Apple and cannot be reconstructed from that signature. A recognized result is saved locally only as song information.
Song recognition is switched off in the current Android release and the microphone is not accessed; the permission is declared for this optional feature only. When recognition is enabled, the developer-token service uses Google Play Integrity to validate the app/device request and prevent token abuse. Apple’s ShazamKit overview and Apple’s Privacy Policy describe the service.
Optional song alerts and wake reminders
If you enable song alerts, Firebase Cloud Messaging uses a device installation identifier and push token to deliver them. Our server stores that token, a hashed installation secret, your selected song identifiers/artist/title and language. Each installation can watch up to 20 songs. A fresh, verified broadcast match is required to send an alert, and the app checks the broadcast again after you tap it. Alerts never start audio on their own.
You can remove a watched song or disable notification permission. Disabling delivery clears the server token; removing a watch deletes its queued delivery records. Completed delivery records are cleaned up after seven days. Installations inactive for 180 days and their watches are removed. Firebase has its own processing and retention described in its privacy information. Firebase Analytics and BigQuery delivery export are not enabled by this Android integration.
Wake reminders are scheduled locally for the station and time you select. Android may require notification and exact-alarm access. Tapping the reminder opens the station; a reminder does not itself start background audio.
Reports and support
A station report or suggestion sends the station name, stream address, reason, optional message, app version and locale to Fermisio. Avoid including sensitive information in the message. If you contact support by email, we receive the address and content you send and use them to respond and resolve the request.
Security, control and contact
Fermisio’s catalog, account, purchase, notification and recognition-token endpoints use HTTPS. Some independent radio streams, podcast feeds or artwork addresses use unencrypted HTTP, so we do not claim that every publisher connection is encrypted. Server credentials are not embedded in the app.
You can manage permissions in Android Settings, remove library items or downloads in the app, manage Google Play billing, and contact support@fermisio.com about access, correction or deletion of information handled by Fermisio. Removing local data cannot erase an independent provider’s records.