Reader 隐私政策

Data Reader handles

Reader reads only a folder and its subfolders that you authorize, or the app-specific document area provided by the operating system. It does not request device-wide audio or shared-storage access and does not browse other apps' folders. File names, folder structure, audio metadata, covers, library indexes, and playback progress remain on your device.

On iOS, iCloud access is limited to Reader's app-specific iCloud Drive/Reader document space. After an in-app explanation and confirmation, Reader lists only Audiobooks and its subfolders; it does not open the Files picker or browse other iCloud Drive locations. File indexes and temporary audio prepared for playback remain on the device.

Google handles Google Drive sign-in. Reader receives read-only access to the folder you select and its subfolders; it never receives your Google password and cannot modify or delete Drive files.

A network media library may receive account credentials, an app-generated device identifier, library and media identifiers, playback requests, and—when enabled—listening progress. Your device's app store handles payment; Reader receives only product and verified entitlement information, not payment-card details.

WebDAV

Reader sends sign-in details, folder addresses, and audio requests to the WebDAV server you choose. It does not modify original files. Sign-in details are protected by operating-system secure storage; book information and listening progress remain on your device. HTTPS encrypts the connection. An HTTP connection you confirm does not encrypt sign-in details or audio.

Finding podcasts

Opening Discover Podcasts requests Reader’s public recommendations without a Reader account. Keyword search sends the words you enter, the search region, and the explicit-content filter setting to Apple Podcasts. Search-result artwork may also come from Apple's image service. Reader’s directory service and Apple receive your IP address and other network information needed to respond. Pasting an RSS address requests that feed to preview the show; the address is not sent to Apple as a search term.

Apple search filters out shows marked explicit by default. You can change the setting, and Reader saves your choice on this device. It applies only to Apple search results, not recommendations, direct RSS addresses or followed shows. It does not verify age or guarantee that content is suitable for younger listeners.

Podcast content and listening records

The Reader directory helps you discover public RSS feeds. Show information, episodes, artwork, and audio are requested directly from publishers and their media services. They receive your IP address, requested addresses, and other request information, and may handle these under their own privacy policies. Reader does not rehost podcast audio.

Follows, tags, and listening progress remain on this device and are not sent to the Reader directory or Apple search service. Unfollowed shows you play also retain progress so you can continue listening. Directory and show information can be saved locally for later use. Search results are held briefly while the app is running. Podcast audio is streamed directly; Reader does not provide podcast downloads.

Purpose, sharing, and retention

Reader uses data to connect your chosen sources, find podcasts, display books and shows, play audio, save or sync progress, verify purchases, and protect account security. These features connect as needed to Apple, Google, Reader’s directory, your chosen servers, and podcast publishers or their media services. Reader does not sell personal data, provide personalized advertising, or track you across apps. Third-party services handle data they receive under their own privacy policies.

You can remove libraries, disconnect accounts, and clear saved audio and artwork. Unfollowing removes that followed show’s listening progress from this device, but does not delete every preview record, saved directory, or third-party copy. The saved directory may remain until updated or app data is removed; show information and images are gradually cleared as storage limits are reached. Temporary search results are released when the app process ends.

Deleting the app removes its local data, but sign-in details in operating-system secure storage may remain. To remove a connected account’s details, disconnect it in Reader first. This does not delete original files or other data held by third parties. Reader recommendations and Apple search use HTTPS; other connections depend on the service address. HTTP connections you confirm do not encrypt sign-in details or audio.

Deletion requests and contact

To request deletion of account profile and synchronized playback data held by a Reader-hosted network library, email [email protected]. After identity verification, data no longer required for security, fraud prevention, legal obligations, or an active service is deleted or anonymized. Minimized operational logs may be retained for up to 180 days.