Privacy Policy

1. Controller

Claude Flaig, Lucerne, Switzerland · [email protected]

2. Website

No marketing tracking or marketing cookies. The website does not use advertising profiles, tracking pixels or marketing cookies.

Anonymous usage statistics: To understand which content is read and where visitors come from, the website collects self-hosted, anonymous statistics – without cookies and without storing anything in your browser. We record the page viewed, the sections that came into view, scroll depth and time on page, clicks on the TestFlight button and other controls, the referring website, UTM parameters, device type, browser, operating system, language and country. IP addresses are not stored; the IP address, browser identifier and a secret that changes daily are only used to derive a non-reversible daily value that can no longer be linked to a visit after 24 hours. The data is stored on Cloudflare infrastructure, individual records are deleted after 120 days, and nothing is shared with third parties. The legal basis is our legitimate interest in improving the website.

Cloudflare Web Analytics: We also use Cloudflare Web Analytics to measure page views and loading performance (Core Web Vitals). The page loads a small script from Cloudflare that works without cookies, stores nothing in your browser and does not build visitor profiles. It transmits the page viewed, the referring website, browser, operating system, device type, country and performance measurements. Cloudflare processes this data on our behalf. The legal basis is our legitimate interest in a fast and reliable website.

Hosting: The website is delivered through Cloudflare Pages (Cloudflare Inc., 101 Townsend Street, San Francisco, CA, USA). Cloudflare processes technically necessary connection data such as IP address, time, requested resource and user agent to deliver the website securely.

TestFlight: The button on this website opens Apple's public TestFlight invitation link directly. We do not collect TestFlight signups on this website, store email addresses for that purpose, or send invitations manually.

3. General app data

Your library, favorites, queue, inbox, settings, playback positions and history are generally stored on your device. If you enable optional iCloud sync, this data is synchronized between your devices through your private iCloud/CloudKit account. Apple processes that data under its own privacy terms. We do not operate a user-account or library server and do not have direct access to this data.

Apple Music: If you connect Apple Music, zentr loads catalog data such as artists, albums, titles and artwork through Apple's MusicKit and plays content through Apple Music. These requests go directly to Apple and are subject to Apple's privacy policy. We do not receive any data from your Apple Account.

Podcasts: zentr loads feeds, episodes and artwork directly from the servers of the respective podcast providers. Like with any podcast player, they receive technically necessary connection data such as your IP address, the time and the app identifier. For podcast search, your search term is sent to Apple's iTunes Search API. Credentials for private feeds are only sent to the respective provider.

Your own audio files: Files you import from the Files app or your iCloud Drive folder stay on your device or in your iCloud Drive. We do not receive them.

Sleep data from Apple Health: Only if you explicitly allow it, zentr reads sleep analysis from Apple Health – read-only and no other health data. The data is evaluated only on your device to suggest rewinding to the moment you fell asleep after a night with the sleep timer ("Sleep Rewind"). It is not sent to us or third parties, not stored in iCloud and not included in error reports. You can revoke access at any time in the Health app and turn the feature off in the settings.

Purchases and subscriptions: You buy subscriptions and Lifetime through the App Store. Apple handles payment and billing; we receive neither payment data nor your Apple ID. The app checks on your device via Apple's StoreKit whether a subscription or purchase exists. The free trial week is an introductory offer in the App Store.

Notifications: Alerts about new episodes, albums and videos, as well as the reminder before the trial week ends, are created locally on your device. We do not operate our own push server for them.

Diagnostic export: In the settings you can export a diagnostic log and send it to us, for example by email, when you report a problem. It can contain titles of content you played, names of sources, and the times of the sleep timer and of falling asleep. The log only leaves your device if you share it yourself.

4. YouTube API Services: data accessed and stored

zentr uses the YouTube Data API, public YouTube RSS feeds and the official YouTube IFrame Player for playback.

zentr may access, display and locally store the following publicly available YouTube API Data:

• channel ID, channel name, handle or custom URL, channel description and channel image;
• uploads playlist ID and, where returned by the API, public channel statistics;
• video ID, title, description, channel association, publication date, thumbnails and video duration supplied by YouTube;
• public upload entries and video IDs from YouTube RSS feeds.

No Google sign-in: zentr currently does not connect a Google or YouTube account, does not use OAuth authorization, and does not access private YouTube data, subscriptions, comments, likes, YouTube watch history or contact information from a Google account.

5. How YouTube data is used and processed

The retrieved data is used only to search public channels, display selected channels in your local library, show public uploads, open videos through the official YouTube player or YouTube app, and organize content you select in the zentr queue or inbox.

zentr product data: Favorites, queue/inbox placement, personal playback positions and manually selected status information are local zentr features and are not supplied by YouTube. They must not be understood as YouTube metrics.

Local caching: Search results are cached briefly in memory. Public channel and video metadata and thumbnails may be stored on the device so that the library and inbox can work without downloading everything again whenever they are opened.

6. Refresh, retention and deletion of YouTube API Data

Stored YouTube API Data is regularly checked against current data supplied by YouTube. Stored API Data is refreshed or deleted no later than every 30 calendar days. Content that is no longer available, has been deleted or has become private is removed from local presentation and API-data storage when that change is detected during refresh.

If you unfollow a YouTube channel, its stored YouTube channel and video metadata is deleted unless it is still needed for an item you explicitly retained in your queue, inbox or history.

Deletion by you: Through Settings → Reset Data, you can immediately delete all content and YouTube API Data stored by zentr (library, queue, inbox, history, progress, and all channel and video data); pure app preferences such as language or theme are retained. If iCloud synchronization is enabled, the deletion is also propagated to records synchronized by zentr in your private iCloud/CloudKit account. Uninstalling the app removes local app data; to reliably delete previously synchronized iCloud data, use “Reset Data” before uninstalling.

We do not operate our own user or data storage service for your app data and cannot access data on your device or in your private iCloud/CloudKit account. Remote deletion by us is therefore not technically possible. If you have questions or problems deleting data, contact [email protected]; we will assist you as soon as possible and within seven calendar days. Deleting data in zentr does not delete or modify data held by YouTube or Google.

7. Sharing and external recipients

• Google/YouTube: Search, retrieval and playback requests are sent directly to Google/YouTube services. They may process your IP address, device and connection data, and the requested channel or video ID.
• Apple iCloud/CloudKit: only if you enable optional synchronization; locally stored library and playback data may then be synchronized between your devices.
• Sentry: for error, crash and app-hang diagnostics (Functional Software Inc., USA; data is stored in the EU, in Germany). The app sends the app version, device model, operating system, error and stack data, a technical log of the last steps before the error (playback and navigation events with internal identifiers, without titles, search terms or web addresses), and a random, anonymous installation ID created on your device. Automatic screenshots as well as network and user-interaction tracking are disabled. Sentry deletes error reports after 90 days at the latest. In addition, the app sends anonymous usage figures about the YouTube interface once a day: how many YouTube Data API requests were made that day, broken down by type and purpose (e.g. channel page, search, refresh), the type of your access (free, trial, subscription or lifetime) and whether only YouTube was used on free access – without channel or video IDs, titles or search terms. This lets us check whether the daily quota assigned by Google is sufficient for all users. You can turn this off at any time under Settings → Legal → "Send crash reports".
• Apple: for Apple Music (MusicKit), podcast search (iTunes Search API), purchases and subscriptions (App Store) and the optional iCloud sync, each under Apple's privacy policy.
• Podcast providers: feeds, episodes and artwork you follow or open are loaded directly from their servers.

We do not sell YouTube API Data or personal data, use it for advertising or cross-user profiling, or share it with other internal or external parties except as described above or where required by law.

8. Google and YouTube terms

Use of YouTube features is also subject to the YouTube Terms of Service and the Google Privacy Policy.

9. Your rights

For contact requests, you may request access, correction, deletion, restriction and, where applicable, portability. For library, playback and YouTube API Data stored locally in the app or in your private iCloud/CloudKit account, there is no deletion request to make to us: we do not store this data on our own servers, cannot access it, and therefore cannot delete it remotely. You delete this data directly through the existing “Settings → Reset Data” function.

Legal bases (where the GDPR applies): Processing for the app's features is necessary to provide the service you use (Art. 6(1)(b) GDPR); error and crash diagnostics are based on our legitimate interest in a stable app (Art. 6(1)(f) GDPR), and you can object at any time; reading sleep data from Apple Health happens only with your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw at any time.

You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or another competent authority. Send requests concerning data we actually process to [email protected].

10. Changes

We update this policy when our processing, app features or legal requirements change. The current version remains permanently available on this page.