Privacy Policy

Effective date: April 22, 2026

This Privacy Policy describes how Pond ("we", "us", "our") collects, uses, and protects information when you use the Pond mobile application ("Pond" or the "App"). By using Pond you agree to the practices described below.

1. Information We Collect

1.1 Account information

Pond is usable anonymously without creating an account. If you choose to sign in with Google or Apple, we receive a limited set of profile fields from the identity provider:

• A unique user identifier issued by Google or Apple.
• Your email address (Apple users may choose to share a private relay address instead).
• Your name, where provided (Apple only shares this on first sign-in).

We do not receive your Google or Apple password, and we do not have access to your broader Google or Apple account.

1.2 Anonymous device identifier

When you first launch the App, we generate a random device token and register it with our backend so that we can provide an anonymous session and synchronize playback state. This token is not derived from any hardware identifier and is reset if you sign out or reinstall the App.

1.3 Listening and content activity

To deliver and improve the listening experience, we may process information about which topics, episodes, and clips you view or play, and your playback position within them. This activity is associated with your anonymous device token or, if you are signed in, your account.

1.4 Voice input (microphone)

Pond offers an optional voice search feature. When you tap the microphone and grant permission, the App uses your device's built-in speech recognition service (Apple's Speech framework on iOS, Google's speech service on Android) to convert your speech into text in real time. We use the resulting text only to fulfill your search or command within the App.

We do not record, store, or transmit raw audio of your voice from the App to our servers. However, the underlying platform speech service may transmit audio to Apple or Google for recognition, subject to their respective privacy policies. You can revoke microphone permission at any time in your device settings.

1.5 Technical and diagnostic data

We may collect basic technical information necessary to operate the App, including app version, operating system version, and error or crash diagnostics. This data is used solely to maintain reliability and is not used to identify you personally.

2. How We Use Information

• To provide, maintain, and improve the App's features and content.
• To authenticate you and keep you signed in across sessions.
• To remember your playback progress and preferences.
• To diagnose crashes and operational issues.
• To comply with legal obligations and protect against fraud or abuse.

3. How Information Is Stored

Authentication tokens are stored securely on your device using the operating system's secure storage (Keychain on iOS, EncryptedSharedPreferences on Android). Account and activity data is stored on our backend protected with industry-standard transport encryption (HTTPS/TLS).

4. Sharing and Third Parties

We do not sell your personal information. We share information only in the limited cases below:

• Identity providers: Google Sign-In and Sign in with Apple are used to verify your identity when you choose to sign in. See Google's and Apple's privacy policies for how they handle authentication data.
• Platform speech services: When you use voice search, audio is processed by Apple's or Google's speech recognition service.
• Service providers: We may use infrastructure and hosting providers acting on our behalf to operate our backend. These providers are bound by confidentiality and may only use data to provide services to us.
• Legal requirements: We may disclose information if required by law, subpoena, or to protect the rights, property, or safety of users or the public.

5. Permissions We Request

• Microphone (RECORD_AUDIO): Required only when you actively use voice search. You can decline or revoke this permission without losing access to other features of the App.
• Bluetooth: Used to detect connected headphones and media controls (play/pause, skip) for podcast playback.
• Foreground service / media playback: Allows audio to continue playing and remain controllable from the lock screen and notification shade while the App is in the background.
• Network access: Required to fetch podcast content, transcripts, and authentication.

6. Data Retention and Deletion

We retain account and activity data for as long as your account exists or as needed to provide the App. You can request deletion of your account and associated data at any time by emailing justin@makebelieveproductions.com. Anonymous device data is deleted automatically when you uninstall the App or sign out and a new device token is generated.

7. Children's Privacy

Pond is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Your Rights

Depending on your jurisdiction (for example, the EU under GDPR or California under the CCPA), you may have rights to access, correct, port, or delete the personal information we hold about you, and to object to or restrict certain processing. You may exercise these rights by contacting us at justin@makebelieveproductions.com.

9. International Users

Our backend is operated from the United States. If you access Pond from outside the United States, you understand and consent to the transfer of your information to the United States and processing under United States law.

10. Security

We use reasonable administrative, technical, and physical safeguards to protect information from unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is, however, completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this policy from time to time. We will post the updated version at this URL with a new effective date. Material changes will be reflected in the App where appropriate.

12. Contact

Questions or requests about this policy or your data can be sent to justin@makebelieveproductions.com.