Privacy Policy for Console Hosts

Last Updated: September 28, 2026

---

1. Introduction

This Privacy Policy describes how RadimySM ("we," "us," "our," or "the Service") collects, uses, stores, and shares your personal information when you use the RadimySM Console application and related broadcasting services.

By creating an account and using the Console, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use the Console.

2. Information We Collect

We collect several types of information from and about console users (station hosts):

2.1 Account and Registration Information

When you create a console account, we collect:

• Email address - Required for account creation, authentication, and important service communications
• Password - Stored securely using industry-standard encryption (we never store passwords in plain text)
• Station name (slug) - Your unique station identifier
• Station avatar - Profile image for your station (stored in Firebase Storage)
• Account creation date and last sign-in date

2.2 Station Content and Programming Data

To provide scheduling and programming features, we collect and store:

• Host information - Names, avatars, and biographical information for hosts and co-hosts
• Show information - Show titles, descriptions, genres, and cover images
• Schedule data - Programming schedule including timeslots, recurring events, and special broadcasts
• Content metadata - Tags, categories, and other descriptive information about your programming

2.3 Broadcasting and Usage Data

When you broadcast using the Console, we automatically collect:

• Broadcast sessions - Start time, end time, duration, and session identifiers
• Listener statistics - Number of concurrent listeners, peak listeners, total listener minutes
• Technical data - Audio quality settings, bitrate, sample rate, connection quality
• Feature usage - Which console features you use (soundboard, talkback, recording, etc.)
• Device information - Operating system, console version, device type, screen resolution
• IP address and general location - Country/region (not precise location)

2.4 Monetization and Payment Information

If you use monetization features (MegaTalk, MegaChat, MegaBoost, Memberships), we collect:

• Wise payout details — the email, phone number, or Wisetag of your own Wise account, the contact id Wise returns, and the currency you ask to be paid in. Wise verifies your identity. We do not collect your bank account number, routing number, or card number for host payouts.
• Tax information - As required by law for payment processing and reporting
• Transaction history - Records of earnings, payouts, and platform fees
• Billing address - For tax and payment processing purposes

Note: Listener purchases in the iOS and Android apps are processed by Apple and Google. Host earnings are paid to your Wise account. If you buy a Sponsor App Link, Stripe processes that subscription. We do not store full card numbers.

2.5 Age assurance

Depending on the law that applies to your connection, we may ask you to complete an age check before you create a station. That is a government requirement where it applies, not a RadimySM extra. To decide whether a check is required, we estimate country from your IP address at that moment. We do not store the IP from that lookup. We may keep a two-letter country code on the age-assurance record.

When a check is required, we use Didit as a processor. Didit may capture a selfie and, if the estimate is close to 18, an identity document. We do not store those photos, document images, biometric templates, or your date of birth on RadimySM systems. After a completed check we keep only:

• A pass/fail status for the 18+ (adult) purpose
• Whether the check used a selfie estimate or an identity document
• Timestamps and a non-biometric event record (no images)

If no check is required, we do not run Didit and we do not keep a Didit result. When a check does run, Didit deletes verification media after the purpose is met (process-and-purge). Didit is not authorised to use your verification data to train models for us. Didit’s Privacy Policy and End User Terms apply to the check itself.

2.6 Communications and Support Data

When you contact us for support or communicate with us, we collect:

• Support tickets and correspondence - Your questions, issues, and our responses
• Feedback and survey responses - When you provide feedback about the Service
• Chat logs - If you use in-console messaging features with listeners or co-hosts

2.7 Automatically Collected Technical Information

We automatically collect certain technical information through cookies and similar technologies:

• Log data - Error logs, crash reports, performance metrics
• Cookies and local storage - To remember your preferences and keep you signed in
• Analytics data - How you use the Console, which features are most popular, session duration

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide and Maintain the Service

• Create and manage your console account
• Enable you to broadcast live audio to listeners
• Store and display your station programming information to listeners via mobile apps
• Provide soundboard, talkback, recording, and other console features
• Sync your station data across devices
• Authenticate your identity and prevent unauthorized access
• Confirm you are 18 or over before you can create a station (age assurance)

3.2 To Process Payments and Monetization

• Process listener payments for MegaTalk, MegaChat, MegaBoost and Membership features
• Calculate and distribute your earnings (70% to you, 30% platform fee)
• Generate earnings reports and transaction history
• Comply with tax reporting requirements
• Detect and prevent fraudulent transactions

3.3 To Provide Analytics and Insights

• Show you listener statistics and engagement metrics
• Help you understand your audience and improve your broadcasts
• Provide aggregated industry insights and benchmarks

3.4 To Communicate With You

• Send you important service announcements and updates
• Notify you of new features or changes to the Service
• Respond to your support requests and inquiries
• Send you earnings notifications and payment confirmations
• Alert you to potential security issues with your account

3.5 To Improve and Develop the Service

• Analyze usage patterns to improve console features
• Identify and fix bugs and technical issues
• Develop new features based on user needs
• Conduct research and testing to enhance user experience

3.6 To Ensure Safety and Security

• Detect and prevent fraud, abuse, and violations of our Terms of Use
• Protect against unauthorized access to your account
• Enforce our policies and community guidelines
• Respond to legal requests and prevent illegal activity

3.7 Legal Compliance

• Comply with applicable laws and regulations
• Respond to lawful requests from law enforcement or government authorities
• Fulfill tax reporting and payment processing obligations
• Establish, exercise, or defend legal claims

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

4.1 With Listeners (Public Information)

The following information is publicly visible to listeners using our mobile apps:

• Station name and avatar
• Host names and avatars (for master host and co-hosts)
• Show information (titles, descriptions, cover images)
• Programming schedule
• Current broadcast status (On Air / Off Air)

Note: Your email address, payment information, and detailed analytics are never shared publicly.

4.2 With Service Providers

We share information with trusted third-party service providers who help us operate the Service:

• Firebase (Google) - Authentication, database, file storage, and hosting
• Wise - Host payouts. Wise holds the bank details on your Wise account. We send Wise the identifier you gave us and the amount.
• Stripe - Sponsor App Link subscriptions the station owner pays to RadimySM. Stripe is not used to pay host earnings.
• Apple and Google - Listener in-app purchases (MegaTalk, MegaChat, MegaBoost, and memberships)
• Didit - When local law requires an age check: selfie and, if needed, identity document. Didit processes that media on our instructions; we receive a pass/fail result, not the photos.
• MaxMind - Country database used on our servers so we can apply local age-assurance rules. We do not send your IP to MaxMind at request time, and we do not store the IP from that lookup.
• Cloud infrastructure providers - For hosting and content delivery
• Analytics providers - To understand usage patterns (aggregated data only)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 For Legal Reasons

We may disclose your information if required by law or if we believe in good faith that such disclosure is necessary to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Use and other policies
• Protect the rights, property, or safety of RadimySM, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

4.4 Business Transfers

If RadimySM is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice in the Console before your information becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

5.1 Account Information

• Active accounts: Retained for the lifetime of your account
• Deleted Console accounts: Station content, members, polls, programming metadata, and Firebase Auth are removed immediately when you confirm deletion. Transaction, payout, and in-app purchase records are retained in anonymized form for legal and tax purposes (typically 7 years)

5.2 Programming Content

• Hosts and shows: Retained while your account is active until you delete them. Deleting your account removes hosts, shows, schedule files, and sponsor records for every station you own, including copies stored on this computer under ~/.radio-switchboard/schedules/ and ~/.radio-switchboard/sponsors/
• Schedule timeslots: Automatically deleted 7 days after they end
• Future schedule: Limited to 14 days in advance

5.3 Session and Analytics Data

• Broadcast sessions: Currently retained indefinitely (retention policy under review)
• Listener statistics: Aggregated data retained indefinitely; individual session data subject to retention limits

5.4 Transaction Data

• Firebase retention: 30 days for active transaction data
• Local archival: Automatically archived to your local storage after 30 days
• Tax records: Retained for 7 years as required by law
• After account deletion: Transaction, payout, and in-app purchase records stay in Firebase in anonymized form. They are not deleted with your account

5.5 Cleanup Schedule

Automated cleanup of expired data runs:

• Daily at 3:00 AM (local server time)
• When you open the Console (for stations that don't operate overnight)

5.6 Age assurance

• Photos, identity documents, and date of birth: Not stored on RadimySM. When a check runs, Didit deletes them after the check (process-and-purge).
• Pass/fail status: If a check was completed, kept on your user account while the account exists so we do not ask you to repeat a completed 18+ check. If no check was required, we do not keep a Didit result.
• Event records: Decision-only rows (no images) are retained. If you delete your Console account we tombstone the user id on those rows.

6. Data Security

We take the security of your information seriously and implement industry-standard measures to protect it:

6.1 Technical Safeguards

• Encryption: All data transmitted between your Console and our servers is encrypted using TLS/SSL
• Password security: Passwords are hashed and salted using bcrypt or similar algorithms
• Firebase Security Rules: Database access is restricted based on authentication and authorization
• Secure storage: Images and files are stored in Firebase Storage with access controls

6.2 Access Controls

• Only authenticated users can access their own station data
• Co-hosts have limited access (cannot modify master station settings)
• Administrative access is strictly limited and logged

6.3 Your Responsibility

You are responsible for:

• Keeping your password secure and confidential
• Not sharing your account credentials with others
• Logging out of shared devices
• Notifying us immediately if you suspect unauthorized access to your account

Important: No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

You have certain rights regarding your personal information:

7.1 Access and Portability

• Access your data: You can view most of your information directly in the Console (account settings, station content, analytics)
• Download your data: Contact us to request a copy of your data in a portable format

7.2 Correction and Updates

• You can update your station name, avatar, host information, and show details directly in the Console
• To update your email address, contact support

7.3 Deletion

• Delete specific content: You can delete hosts, shows, and schedule entries directly in the Console
• Delete your account: Settings → Delete Account. Deletion is immediate after you type to confirm. It tears down every station you own (not only the one currently selected), removes your Firebase Auth user, and wipes station content, members, polls, and programming. Listener App Store / Play memberships are not cancelled. We delete the Wise contact reference stored on your account. We do not close your Wise account. If an earlier Stripe Connect account exists, it is closed unless unpaid payouts remain. Podcast files on CDN and HLS leftovers are removed from this Console when Bunny credentials are present. Local schedule and sponsor folders on this computer are removed; secrets and earnings backups are not. Information we must keep for legal or tax purposes (for example anonymized transaction and payout records) is retained, typically for 7 years

7.4 Opt-Out of Communications

• You can opt out of non-essential emails by clicking "unsubscribe" in any marketing email
• Note: You cannot opt out of essential service communications (e.g., security alerts, payment notifications, Terms updates)

7.5 Data Portability

You have the right to receive your data in a structured, commonly used format and to transmit it to another service. Contact us to exercise this right.

8. International Data Transfers

RadimySM operates globally, and your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your country.

When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your data, including:

• Using service providers that comply with international data protection frameworks
• Implementing standard contractual clauses approved by regulatory authorities
• Ensuring encryption and security measures are maintained across all locations

9. Children's Privacy

The RadimySM Console is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If you are under 18, do not use the Console or provide any personal information to us. If we learn that we have collected personal information from a child under 18, we will delete that information as quickly as possible.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Third-Party Services and Links

The Console may contain links to third-party websites or integrate with third-party services (e.g., Wise for host payouts, Stripe for Sponsor App Link subscriptions, Didit when an age check is required). This Privacy Policy does not apply to those third-party services.

We are not responsible for the privacy practices of third parties. We encourage you to read the privacy policies of any third-party services you use.

10.1 Wise host payouts

When you set up host payouts, you create or use your own Wise account. Wise verifies your identity. We store the email, phone, or Wisetag you enter and the contact id Wise returns. We do not store your bank account details. Wise's use of your information is governed by their privacy notice, available at wise.com/gb/legal/privacy-notice.

10.2 Stripe Sponsor billing

If you subscribe to a Sponsor App Link, that payment is processed by Stripe. Stripe's use of your information is governed by their Privacy Policy, available at stripe.com/privacy. Stripe does not receive your host payout bank details.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email (to the address associated with your account)
• Display a prominent notice in the Console
• Require you to accept the updated policy before continuing to use the Service (for significant changes)

We encourage you to review this Privacy Policy periodically. Your continued use of the Console after changes are posted constitutes your acceptance of the updated policy.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the personal information we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information (subject to certain exceptions)
• Right to Opt-Out: We do not sell personal information, so there is nothing to opt out of
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at privacy@radimysm.com. We will respond within 45 days.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to our processing of your data
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@radimysm.com. You also have the right to lodge a complaint with your local data protection authority.

13.1 Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: To provide the Service you've signed up for
• Legitimate Interests: To improve the Service, prevent fraud, and ensure security
• Legal Obligation: To comply with tax, payment processing, and other legal requirements
• Consent: Where you've given explicit consent (e.g., for marketing communications)

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@radimysm.com
• Support: Settings → Help & Support in the app Contact Support
• Subject Line: "Privacy Inquiry - Console Host"

We will respond to your inquiry within 30 days (or as required by applicable law).

---

15. Summary of Key Points

---

© 2025 RadimySM. All rights reserved.