Privacy Policy

Who we are

Golden Replay is operated by Rhynes Media LLC. This policy covers our iOS app, website, and supporting account, membership, feedback, and cloud-sync services. Features may be introduced during testing before general release.

Basic listening does not require an account. Accounts support membership access, optional Patreon connections, episode reports, and personal cloud sync in app versions that support it; sync can be paused.

Information we handle

• Account identifiers and credentials: your display name, account ID/status, passkey public-credential records, authentication challenges, and sessions. We do not receive your private passkey, Face ID or Touch ID information, or device passcode. Apple manages device authentication and any passkey synchronization.
• Apple membership: transaction IDs, product, environment, purchaser or family-shared ownership, account-linking identifiers (including Apple’s appTransactionId for family recipients), entitlement status, expiration, and verification times. Signed family transaction proofs are verified in memory and are not stored. Apple processes payment; we do not receive your full card details.
• Patreon connection: your Patreon identifier, membership status and tier names, and encrypted access/refresh tokens used to recheck eligibility when you choose to link Patreon.
• Cloud library sync: in app versions with Automatic Sync, signing in syncs show/year and collection subscriptions, playlist names and episode entries, favorites, playlist and download/listening preferences, episode playback positions and completion, download requests, and the current episode and selected audio source. Sync also stores a random app-installation identifier, logical edit counters, deletion markers, a cloud reset marker, revision, and server update time to reconcile devices and offline changes. Sync can be paused in Account. Subscription ingestion checkpoints remain local.
• Episode reports: account ID, category/message, episode/show identifiers and names, selected audio source/version where available, app version/build, request ID, report status, administrative follow-up notes, and submission/update times. Please do not include passwords, payment details, or information about other people.
• Device-only files: downloaded audio, cached artwork, download queues and per-device ingestion checkpoints remain on the device. Synced download requests let each device fetch its own copy from the existing authorized audio provider under its download settings. Sync does not upload audio files, payment entitlements, or sign-in tokens.
• Service/security information: network requests include an IP address and may generate hosting/CDN/audio-provider logs of URLs, times, user agents, and errors. Temporary sign-in rate-limit records are derived from connection information. Account changes and minimal privacy-request receipts support administration and privacy operations.
• Correspondence: contact details and messages you send, including information reasonably needed to verify ownership or an authorized agent.

Sources are you and your app activity, device/network requests, Apple, Patreon when connected, and our support/administrative processes. These features do not collect precise device location, biometric templates, or full payment-card information.

How information is used

We use information to provide listening and cloud sync, authenticate accounts, verify memberships and eligible audio/early access, investigate episode issues, respond to requests, prevent abuse, and maintain required records. A preference or synced record cannot grant paid access.

Automatic Sync merges your account’s library across signed-in devices without a manual restore. Changes made offline are kept locally and reconciled on reconnect. Active apps check for changes regularly; iOS controls background opportunities, so suspended devices catch up when reopened or permitted to refresh. Playback handoff prepares the latest episode and saved position without automatically starting audio. Completed episodes are removed from other devices when their synced keep-played setting allows it. You may pause sync, resume it, or delete cloud data. Sharing an annual Apple subscription does not share your Golden Replay account or library.

This public website has no sign-in/payment form and adds no advertising pixels, third-party analytics scripts, or tracking cookies. It loads artwork from our CDN. Audio providers may use their own advertising/measurement systems.

Providers and information sharing

Hosting, database, delivery, and support providers process information necessary to operate these services. Authorized administrators access account/report information to support users and fix problems. Apple handles authentication and App Store purchases; Patreon verifies linked memberships. We may disclose information to meet legal obligations, protect rights/security, or handle a business transfer subject to applicable protections.

We do not sell account, membership, cloud-sync, or episode-report records or provide those records for cross-context behavioral advertising. We do not send cloud libraries or report text to Apple or Patreon for membership verification.

Externally hosted audio may disclose your IP address, requested URL, and network information to that provider and redirect/measurement/advertising partners such as Spreaker or Podtrac. Their independent practices may differ from ours. Ad-free audio does not mean no network information is processed.

See the Apple Privacy Policy, Patreon Privacy Policy, and the applicable audio provider’s policy. Apple manages Family Sharing; each family member should use their own Golden Replay account.

Storage and retention

Account/membership records are kept while your account exists to provide access. Cloud records, including deletion markers needed to reconcile offline devices, are kept until deleted separately or with the account; pausing sync keeps them. Reports and account-change records are kept to investigate/support the service while the account exists and are removed by account deletion.

Deletion removes the account, public-credential records, sessions, linked Apple/Patreon records/tokens, cloud sync data, reports, account-change records, and account-linked authentication challenges from the active database.

A minimal privacy-request receipt remains for 24 months: receipt/account IDs, action/channel, completion outcome, request/response times, and backup revision where applicable. Restricted receipts document responses and prevent deleted data returning after infrastructure restoration. They are not used for advertising or membership access.

Temporary challenges, sessions, and rate limits expire and are cleaned up during service use. Infrastructure logs, correspondence, and restricted disaster-recovery snapshots may remain under operational retention schedules or where needed for legal/security purposes. Archived data is not used to reactivate a deleted account; current deletion records must be reapplied before restored data returns to service. Contact us to review information outside the account database or retained records.

We use encrypted connections, protected configuration, encrypted stored Patreon tokens, and the device Keychain for sessions. No system guarantees absolute security.

Access, correction, and deletion

• Get a copy: in Account, select Confirm Identity if needed, then Download My Information and save the JSON file. It contains account-linked active records and your cloud copy; security secrets are omitted. Request correspondence or infrastructure logs separately by email.
• Delete a cloud copy: select Delete Cloud Data and confirm. The local library/account remains. Sync pauses on this device. Other devices pause when they detect the deletion or reset; they do not automatically recreate the deleted copy. Explicitly resuming sync can create or join a new cloud copy using your retained local library.
• Delete your account: confirm identity, select Delete Account, and confirm permanent deletion. Export and account/cloud-copy deletion require a sign-in within ten minutes. After the server confirms deletion, the app immediately erases this device’s library, downloads, favorites, playback history, caches, settings, and saved app session. Close the app from the app switcher and reopen it to start fresh. There is no recovery grace period.
• Correct information or request other records: email privacy@goldenreplay.app with your request and account ID if available. Do not send passwords, private passkeys, full card numbers, or identification documents unless we explain why they are reasonably necessary.
• Manage local data: remove downloads/playlists in the app or remove the app and its stored data using device settings. Pause sync first if local changes should stay local. Resuming reconciles those changes with your cloud library.
• Disconnect Patreon: remove the link from Account. This does not cancel Patreon billing.

California privacy choices

California residents may have rights under applicable law to know/access their information and its sources, uses, and recipients; receive a portable copy; correct inaccurate information; delete information subject to exceptions; opt out of sale/sharing; and limit certain sensitive-information uses. CCPA applicability depends on statutory business thresholds. We provide account export/deletion tools to account holders regardless of residence.

Email us without creating an account, or use the available in-app tools. An authorized agent may contact us with proof of authorization; reasonable identity verification may also be needed. Verification information is used only to verify/fulfill the request. If we cannot verify a request, deny it, or retain information under an exception, we explain the reason where legally permitted.

We confirm email-request receipt within ten business days and aim to complete verified access/correction/deletion requests within 45 calendar days of receipt. Where permitted, an additional 45 days may be needed; we notify you of the reason and expected time within the original period. Requests are free unless law permits a charge for an excessive or unfounded request. We do not penalize privacy-rights requests; deleting an account naturally ends features requiring it.

Sensitive credential information is used to authenticate and secure the requested service. Our public website does not sell/share information for behavioral advertising and does not change that practice based on Do Not Track or Global Privacy Control signals. External audio providers have separate practices; contact us about audio-delivery concerns or a sale/sharing opt-out request so we can review them.

Children and general audiences

Golden Replay offers classic radio for a general audience and is not directed to children under 13. We do not knowingly collect their personal information. Contact us if you believe a child has provided information so we can review and delete it as appropriate.

Changes and contact

Updates are posted here with a revision date. Material changes are communicated as required by law. For questions or requests, contact Rhynes Media LLC at privacy@goldenreplay.app.