Privacy policy
Ondalo is built to collect as little as possible. There's no account, it never asks for your name or email, and your favourites stay on your phone. This policy explains, in plain words, what happens to data when you use the app.
Who is responsible
The controller is Curly Idea, Lda, based in Lisbon, Portugal. For any privacy question, email [email protected].
What stays on your phone
Your favourite stations and their order, recently played stations, recent searches and your preferences (language, appearance, privacy) are stored on the device. We don't send them to any server of ours. If you delete the app, they're gone.
Usage analytics (Firebase Analytics)
To understand which parts of the app are used and what to improve, the app sends anonymous events to Google Firebase Analytics: for example, which screen you opened or which station started playing (station details are public). It also adds broad traits such as country, language, theme and whether you have Premium.
We don't use the advertising identifier, we don't attach a user ID, and we never send names or emails. Firebase uses a random identifier for the app installation. User-level data is kept for no more than 14 months.
You can turn analytics off at any time in Settings › Privacy. From then on the app stops sending it.
Crash reports (Firebase Crashlytics)
If the app crashes, Firebase Crashlytics receives a technical report: device model, system and app version, where in the code it failed, and a short log of recent actions in the app (for example, the screen or station). It is used only to fix bugs. You can turn crash reports off in Settings › Privacy.
Purchases and Premium (Apple and RevenueCat)
Purchases are made and charged by Apple, through your Apple Account. We never see your payment details or your Apple ID.
We use RevenueCat to confirm purchases and unlock Premium. RevenueCat receives an anonymous identifier created by the app, Apple's purchase receipts, the product, dates and the store country or currency. This is needed to provide what you bought and to restore it on another device.
Location
The app asks for your location only when you open the map, and the map works without it. If you allow it, your position is used on the device to centre the map on you; to show the place name, your iPhone uses Apple's map services. Ondalo does not send your location to servers of its own or keep it. You can withdraw permission at any time in your iPhone's Settings.
Stations and the radio-browser.info directory
To show and search stations, the app asks radio-browser.info, a public directory, for listings. When you listen, the audio comes directly from the broadcaster's server. As with any internet connection, these services receive your device's IP address and what was requested, and handle it under their own policies. Ondalo does not control those servers.
Legal bases
We process purchase data to perform our contract with you (GDPR Article 6(1)(b)). Analytics and crash reports rely on our legitimate interest in keeping the app stable and improving it (Article 6(1)(f)), and you can object by turning them off in Settings › Privacy.
Processors and transfers
Our providers are Google (Firebase), RevenueCat and Apple. Some process data outside the European Economic Area, under GDPR safeguards such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework. We don't sell data or use it for personalised advertising.
Your rights
You have the right to access, rectify, erase, restrict, port and object. Because there's no account and no data that identifies you directly, we often can't link data to you, but we'll help as far as we can: email [email protected]. You can also complain to the Portuguese data protection authority (CNPD), at cnpd.pt, or to your local authority.
Children
Ondalo is not directed at children and does not knowingly collect data from children under 13.
Changes
If this policy changes, we'll publish the new version here with its date. Important changes will also be flagged in the app.