The short version
- Private by design. No account. No ads. No cloud sync.
- Your library stays under your control, and Hot Poddy does not send your subscriptions or listening history to Soldier Software.
- Android can include library data and settings in your encrypted device backup if backup is enabled for your device.
- Podcast content requests go directly to podcast publishers and hosting providers.
- Discover sends searches or browse requests directly to Apple and/or Podcast Index.
- You can choose to export subscriptions or a Hot Poddy backup to a document location you select.
- Release builds can send limited crash diagnostics to Firebase Crashlytics. This is enabled by default and can be turned off in Settings > Privacy & diagnostics.
- Hot Poddy does not sell personal information or use it for advertising or marketing.
Data managed by the app
Hot Poddy stores RSS feed addresses, subscriptions, podcast and episode details, downloaded audio, cached artwork, playlist and archive state, listening position and settings in its private storage on your device.
Hot Poddy has no Soldier Software account or cloud-sync service. Soldier Software cannot view or recover your library. Clearing Hot Poddy's storage or uninstalling removes its local copy, but an Android backup can remain under your device/account backup settings and may be restored later.
Android backup and device transfer
If Android backup is enabled on your device, Android can back up Hot Poddy's library database and settings to help restore the app or move to another device. Cloud backup is allowed only when the Android backup transport reports encryption capability. Downloaded episode audio and Hot Poddy's temporary import/restore files are excluded.
Google says Android backups are uploaded to Google servers and encrypted. On supported devices, some backup data is additionally end-to-end encrypted using your device's screen lock. Backup availability, retention and deletion are controlled through Android and your Google Account. Soldier Software does not receive or have access to the backup. See Android backup help and Google's Privacy Policy.
Connections to podcast services
Your phone connects directly to podcast publishers, hosting providers and content delivery networks to request RSS feeds, artwork and audio. Those services can receive your IP address, requested URL, request time, HTTP headers and Hot Poddy's user agent. Their own privacy policies apply. Podcast sources also control whether their connection uses HTTPS. Treat a private feed address as sensitive because it can contain an access token.
Hot Poddy does not add feed addresses, podcast titles or listening history to automatic crash diagnostics.
Podcast discovery and search
When you use Discover, Hot Poddy connects from your device to Apple's iTunes Search API and Podcast Index over HTTPS. If you submit a search, the words you enter are sent to both providers to return podcast results. Apple also receives your device locale's country code for search and country-specific charts. Podcast Index receives your device language and any category you select when browsing trending podcasts.
The services receive normal network request details, including IP address, request time and HTTP headers. Hot Poddy keeps the current search on screen and can cache browse results in memory while the app process is running. Soldier Software does not receive or retain these searches on its own server.
Apple and Podcast Index process requests under their own terms and privacy practices. See Apple's Privacy Policy and the Podcast Index API Terms of Service.
Imports and exports you choose
Hot Poddy can export subscription names and feed URLs as OPML, or export a Hot Poddy backup containing podcast and episode metadata, feed/enclosure URLs and listening/archive history. The Hot Poddy backup does not include downloaded audio, the playlist, playback position, download bookkeeping or app settings.
You choose the file location using Android's document picker. If you select a cloud-storage provider, that provider processes the document under its own terms. Soldier Software does not receive it. Private feed URLs can contain access tokens, so protect exported files and share them only with services or people you trust.
When you import, Hot Poddy reads the selected file and can temporarily stage it in private app storage while validating or processing it. An explicit restore replaces the current library only after showing a preview and asking for confirmation.
Crash diagnostics
Release versions use Google Firebase Crashlytics to help Soldier Software fix crashes and serious failures. Crash diagnostics are enabled by default and can include:
- crash stack traces and relevant app state;
- Hot Poddy and Android versions;
- device manufacturer, model and other device metadata;
- network connection type and limited session timing or quality metrics; and
- pseudonymous Firebase installation and Crashlytics installation identifiers.
Some feed/process failures add a random incident ID, failed operation, sanitized error details, database version and aggregate parser counts. Hot Poddy is designed to remove URLs and filesystem paths. It does not add an account identity, raw feed address, podcast title or listening history.
Google processes this information for Soldier Software. It can be processed outside Australia. Crashlytics data is encrypted in transit. Google states that crash traces and associated installation identifiers are retained for 90 days before removal begins. See Firebase Privacy and Security.
Turn diagnostics off under Settings > Privacy & diagnostics > Share crash diagnostics. This stops Hot Poddy's non-fatal reports immediately and deletes reports waiting to be sent. Automatic fatal collection changes the next time Hot Poddy starts. Reports already received follow Firebase's retention process.
Information you choose to send
Hot Poddy can prepare a feed-support email in your email app. You can review, edit or discard it. It can contain the exact feed URL, incident details, app/Android versions, device model, aggregate parser counts and a sanitized error. A private feed URL may contain an access token.
If you email hotpoddy@soldiersoftware.com, Soldier Software receives your email address and whatever name, message, technical details or attachments you provide. This is used to answer the request, investigate issues, protect the app and keep necessary support records—not for advertising or a marketing list.
Support correspondence is normally deleted within 12 months after resolution. It can be kept longer where reasonably necessary for security, law or an ongoing dispute. Email providers also process the message under their own terms.
The Hot Poddy website
The Hot Poddy pages do not use advertising, behavioural analytics, tracking pixels or marketing cookies. GitHub Pages and network providers can process standard request information such as IP address, browser/user-agent details, page and request time to deliver and secure the site. Their logs follow their operational and legal retention practices.
When information is disclosed
Soldier Software does not sell personal information. Information is disclosed only:
- to Google for Firebase Crashlytics and, where enabled by the user/device, Android backup;
- to Apple and Podcast Index when your device requests discovery or search results;
- to podcast publishers and hosts when your device requests content;
- to a document/storage provider you choose for an import or export;
- to website and email infrastructure providers as needed;
- when you direct another app or service to send information; or
- where reasonably necessary for law, rights, security or abuse investigation.
Security
Hot Poddy keeps its active library in Android private storage, minimizes data sent to Soldier Software, restricts diagnostic fields and sanitizes errors. Crashlytics and directory requests use HTTPS. Android cloud backup is limited to transports reporting encryption capability. No internet or storage system is perfectly secure; protect exported files as you would private podcast links.
Your choices and requests
You can:
- turn off crash diagnostics in Hot Poddy;
- manage Android backup through device/Google Account settings;
- choose, protect or delete exported files at their destination;
- edit or discard support email before sending;
- clear local Hot Poddy data or uninstall; and
- request access, correction or deletion of personal information Soldier Software holds by emailing hotpoddy@soldiersoftware.com.
Hot Poddy has no user account to delete. Soldier Software may be unable to identify a particular pseudonymous Crashlytics report without technical details, and Firebase retention can still apply. Android backups and user-created export files are controlled through their respective providers, not Soldier Software.
Children
Hot Poddy is a general-audience podcast app and is not directed to children under 13. Podcast content comes from third parties and can have its own ratings or warnings. If you believe a child sent personal information to Soldier Software, email hotpoddy@soldiersoftware.com.
Questions or complaints
Contact Soldier Software at hotpoddy@soldiersoftware.com. Describe the issue and desired resolution. Depending on location, you may also contact a privacy regulator; in Australia this is the Office of the Australian Information Commissioner.
Changes to this policy
This policy will be updated when Hot Poddy's data practices materially change. The effective date will show the latest revision. Material changes will also be reflected in the app or listing where appropriate.