Privacy
tldr;
- Audio metadata, playlists, and listening state stay on the device.
- Library sync runs through the iCloud account already signed in; the developer cannot read it.
- Shows and streams are fetched directly from each radio platform.
- No analytics, no trackers, no account.
On-device data
The app keeps a local database of audio items, radio shows, mix series, playlists, smart playlists, played and unplayed state, queue position, and refresh preferences. Cover art is cached on disk as JPEG files. Volume and request-delay settings are kept in standard user defaults.
iCloud sync
The library, playlists, smart playlists, radio shows, and mix series sync between devices through the iCloud account already signed in. The data lives in a private CloudKit container that only the account holder can read; the developer cannot see it. Sync is controlled by the system iCloud settings and can be turned off there. Current playback position is kept local to each device and is not synced.
Radio platforms
The app talks directly to each platform's public API to fetch show pages, episode lists, and stream URLs. Those requests carry the device's IP address and standard HTTP headers, and are subject to each platform's own privacy practices. The app does not log in to any of these services and does not send credentials.
Analytics and accounts
The app contains no analytics SDKs, no crash reporters, and no third-party trackers. There is no account to create. Woof operates no first-party server, so no playback, library, or device data is sent to one.
Diagnostic emails
When a URL fails to import inside the app, an option to send a bug report opens the system mail composer pre-filled with the failing URL, a short error description, network reachability info, and the app and OS versions. Sending the email is always an explicit action and goes to contact@getwoof.org.
Contact
Questions about this policy can be sent to contact@getwoof.org.