Your information

Privacy, in plain language.

Effective October 16, 2026

This policy explains how GraniteWave handles information in its podcast app, website, and optional connectors. See our support page for account management and deletion instructions.

What we collect and why

• Account information: your email address, optional display name, account identifier, and a password hash. We use these to authenticate you and operate your account. Your password is not stored as plain text.
• Your library and listening: followed feeds, queue entries, episode progress, listening history, and show settings. We store these with your account to deliver playback, synchronization, personalized discovery, and optional new-episode alerts. Authorized administrators can view account and listening information when operating and supporting the service.
• Activity and technical information: sign-in events, request counts, listening time, client platform, an app-generated playback-device identifier, playback-device status, assistant-requested download instructions and delivery status, and—when you enable alerts—an Apple push token and notification delivery status. Sign-in and administrative logs may contain your IP address and browser or app user-agent. We use these for security, support, usage measurement, communications you request, and reliability.
• Support messages: if you contact us, we receive your email address and the information you include. Do not send passwords or connector tokens.

Data on your device

The app caches library information, queue changes, listening progress, and settings. The native iOS app can save downloaded episodes in its own storage. iOS session credentials are stored in the device Keychain; the web app stores its session in browser storage. Local data enables faster loading, offline features where supported, and synchronization after a connection returns.

Podcast publishers and external services

Podcast search and discovery use Apple’s podcast directory services. Search requests may be sent through GraniteWave’s server to Apple. Artwork, feeds, audio, chapters, and transcripts come from podcast publishers and their hosting providers. Depending on the feature, those requests are made by your device or GraniteWave’s server. Direct requests disclose network information such as your IP address to the host. Podcast providers may include advertising or perform their own measurement under their privacy policies.

GraniteWave’s app does not include an advertising SDK or request Apple’s advertising identifier. The public information pages do not use analytics cookies. Apple Push Notification service receives the app identifier, device push token, and notification content when you enable new-episode alerts. Service providers that handle information for GraniteWave are used to deliver hosting, communications, and support; access is limited to the relevant service. Information may also be disclosed when required by law or needed to address abuse or protect the service.

Optional Muse and assistant connections

Creating a connector token is optional. Anyone you give the token to can access the library, episode information and available transcripts, manage followed shows, and read or change the queue, and request offline downloads within its permissions. Tokens expire after 90 days and can be revoked in Settings. Revocation stops future access; it does not delete information already copied by the connected service. Review that service’s privacy policy before connecting.

Retention and deletion

Account and listening data remain while your account is active. Listening history keeps the most recent 500 entries per account. Authentication, system-event, and administrative audit logs are pruned after 180 days.

When you delete your account, GraniteWave removes the account and associated subscriptions, queue, progress, history, activity, playback-device records, push-device records, notification delivery records, download-request records, and connector tokens from the active database. Associated authentication logs are deleted and account identity is removed from administrative audit entries. Anonymous operational records may remain until their retention period ends. The app also clears cached account data and downloaded episodes on the device performing the deletion. If local cleanup is interrupted, reopening the app retries it.

Other devices may retain downloaded files or caches until you clear the app’s data or uninstall it. Public podcast metadata is shared across listeners and is not deleted when one listener closes an account. Copies made by a connected service or information you send by email are handled separately; contact us to request removal of support correspondence. Any recovery copies must follow the same deletion decisions before they are returned to service.

Your choices

You can change your email, choose new-episode alerts for individual shows, disable notifications in iOS Settings, clear listening history, remove downloaded episodes where supported, revoke connector tokens, and delete your account in the app. You may also contact us to request access, correction, or deletion of information associated with your account. We may need to verify account ownership before completing a request. Depending on where you live, you may have additional privacy rights, including contacting your local data-protection authority.

Children

GraniteWave is a general podcast service and is not directed to children under 13. Podcast content is supplied by third parties and may include mature material. If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate.

Updates

We will update this page when our practices change and revise the effective date. Material changes will be communicated through the service where appropriate.