Draft for legal review. Not yet in effect.

Privacy Policy

Effective date: {{EFFECTIVE_DATE}}

This policy explains what {{COMPANY_LEGAL_NAME}} ("we", "us") collects when you use the Layer 24 iPhone app, why, who handles it for us, and how you can delete it.

What we collect

This is the complete list. We keep it in step with the app, and we do not collect anything that is not on it.

Your account and sign-in

• A login: Sign in with Apple, Google or Microsoft, or a username and password.
• Your username, if you sign up that way.
• Your email. For username accounts, this is the recovery email you give us, used only to reset your password. For Apple, Google or Microsoft sign-in, it is the email that comes with that sign-in (Apple may give us a private relay address).
• A hash of your password, never the password itself.
• Multi-factor authentication (MFA), only if you turn it on: the authenticator (TOTP) secret and the factor's status, plus the times of your sign-in challenges and the IP addresses they came from.
• Sign-in sessions: when each session was created and refreshed, with its IP address and user agent.
• No Sign in with Apple token. We do not store a Sign in with Apple token. When you delete your account, the app asks Apple to revoke Layer 24's access.

Your stations and listening

• Your stations and topics: the companies, industries and topics you set up.
• When you last opened each station.
• Your listening history, kept on a rolling 30 days.
• Ask the newsroom and Fresh take text. We send what you type to Anthropic so it can write your segment. We clear the text as soon as the segment is written, and in any case within 24 hours.
• Usage counts for how many asks and scans you have used this month and last month.

Notifications

• Your push device token and your opt-in choice. We send notifications through Apple.
• A short send log of notifications sent to you, so we can keep to the daily limit. We keep it for 7 days.

Your plan

• Your App Store plan state, such as plan, period, status and expiry.
• Your App Store transaction and product ids, and the account token we pass to Apple so purchases map back to your account.
• Apple's notification records about your subscription, kept for up to 90 days. When you delete your account, your account details are removed from them.
• A trial-claim hash. This is a one-way hash of your App Store original transaction id. It is not linked to your account. We keep it after you delete your account so a free trial cannot be claimed twice.

Crashes, errors and security logs

• Crash and error reports. They include the app and iOS version, device model, what went wrong, and a random install id. The install id is not linked to your account, and the reports are not tied to your account.
• IP addresses and user agents kept by our hosting provider for sign-in sessions and security logs.

We do not keep the name Apple, Google or Microsoft may share at sign-in.

How we use it

• To sign you in and keep your account secure.
• To build and play your stations, and to write your segments.
• To apply your plan's allowance limits, such as stations, asks and scans.
• To send push notifications, if you opt in.
• To send password-reset email. We use your email for that and nothing else. We never send marketing.
• To fix bugs and keep the service running.
• To produce first-party aggregate usage reports, such as how much is listened to. They contain no names or ids.

What we do not do

• We do not sell your data.
• We do not track you across other companies' apps or websites.
• We do not use advertising or third-party analytics tools.
• This website uses no trackers, no analytics and no third-party scripts.

Payments

Subscriptions are bought and billed by Apple. We receive your subscription status and the transaction records needed to verify it. We never receive your payment details.

Who handles your data for us

• Supabase: hosting and our database.
• Apple: Sign in with Apple, the App Store, and push notifications.
• Google and Microsoft: only if you sign in with them.
• Anthropic: writes the segments, and receives the text of your Ask the newsroom and Fresh take requests.
• Sentry: receives crash and error reports.
• {{EMAIL_PROVIDER_NAME}}: delivers password-reset email.

They handle data only to provide those services to us.

Deleting your data

You can delete your account in the app (Settings, then Delete Account). Within 30 days we delete your account, username, recovery email, stations, listening history, requests, devices and plan link. If you signed in with Apple, the app asks Apple to revoke Layer 24's access. You can also remove Layer 24 yourself under Apple ID, then Sign in with Apple, in your iPhone Settings.

Apple's notification records are kept for up to 90 days, with your account details removed at deletion. The trial-claim hash described above is kept after deletion. It is a one-way hash that is not linked to you.

A few things are not tied to your account, so they are not deleted one by one. They age out within our providers' retention periods: crash and error reports, hosting security logs, and backups.

Children

Layer 24 is not directed at children under 13, and we do not knowingly collect their information.

Changes

If we change this policy, we will post the new version here and update the effective date.

Contact

Questions: support@{{DOMAIN}}