The controller for your data under the GDPR and the Swiss Federal Act on Data Protection (revFADP) is Luis Macello, Sulzerallee 53, 8404 Winterthur, Switzerland. Contact for privacy questions: support@getpodtask.com.
Account: an anonymous user ID created by our backend (Supabase); if you sign in with Apple or Google, also the email address that provider shares. Content: the YouTube, Spotify, Apple Podcasts or iHeartRadio links you submit, the episode title, channel and artwork, its transcript, what you asked for, and the generated summary lines. Library: the tasks, habits, habit check-ins, notes and quotes you save, so they sync and survive a new phone. Usage: how many summaries and episodes you used (lifetime and per month), your plan, and bonus summaries from packs. Device-only: reminder time, language and appearance settings stay on your phone.
To provide the service (fetch captions, generate summaries), to enforce the free and premium limits, to fix problems, and to comply with legal duties. The legal basis is performance of our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in running a secure, fair service (Art. 6(1)(f) GDPR).
Supabase (database, authentication and server functions; your data is stored in Frankfurt, Germany). Supadata (fetches video captions; receives the video ID). Groq (transcribes podcast audio when the show publishes no transcript; receives the public audio URL). Anthropic (generates summaries; receives the captions and your request; not used to train its models under our agreement). RevenueCat and Apple/Google (subscriptions; receive your anonymous user ID and store transaction data, never your card details). Expo/Apple push services deliver local reminders; no message content leaves your device. When you paste a link, the app asks YouTube, Spotify, Apple or iHeartRadio directly for that episode's public title and artwork to show a preview; those services see your IP address and the episode link.
Some of these providers process data in other countries, in particular the United States (Anthropic, Groq, RevenueCat, and Supadata depending on its infrastructure). The United States does not offer a level of protection recognised as adequate for every provider. We therefore rely on the safeguards the providers offer: certification under the EU-U.S. and Swiss-U.S. Data Privacy Framework where a provider is certified, and otherwise the European Commission's standard contractual clauses, as recognised by the Swiss FDPIC, in their data processing terms. You can ask us for details at the contact above.
Captions are cached so the same video is not fetched twice. Your sources and summaries are kept until you delete them. Usage counters are kept while your account exists so plan limits can be enforced, and are deleted with it. Subscription records are kept as long as required for accounting.
You can access, correct, export or delete your data, object to processing, and complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country. "Delete account" in Settings permanently deletes your account together with your sources, summaries, saved items, usage counters and profile, from your device and from our servers. An App Store subscription is managed by Apple and must be cancelled there. For anything else, write to support@getpodtask.com.
PodTask is not directed at children under 16 and we do not knowingly collect their data.
We will show any material change to this policy in the app before it takes effect.