Privacy Policy
Yotuna — Last updated: March 23, 2026
Effective date: March 23, 2026
Mobulum (“we”, “us”, “our”) operates the Yotuna mobile application (the “App”) available on iOS and Android. This Privacy Policy explains how we collect, use, and protect information when you use the App.
1. Information We Collect
1.1 Anonymous Device Identifier
When you first install the App, we generate a random anonymous identifier using a one-way SHA-256 cryptographic hash of your app installation metadata (package name, app version, installation timestamp, and platform). This identifier:
- Cannot be linked to your real identity — it contains no personal information such as your name, email address, phone number, or hardware identifiers (IMEI, Android ID, advertising ID).
- Is unique per installation — reinstalling the App generates a new identifier.
- Is stored locally on your device and sent with API requests to provide basic service functionality.
1.2 Usage Analytics (Consent Required)
Only when you grant explicit consent, we collect anonymous usage analytics through Amplitude (EU server zone). This includes:
- App events: app opened, app backgrounded, screen views, tab changes.
- Audio events: play, pause, stop actions (with station identifier only).
- Search queries: search terms you enter in the station search bar.
- Preference changes: theme, language, and timezone selections.
- Feature interactions: adding/removing favorites, copying playlist tracks, opening streaming service links, viewing station details.
- Onboarding progress: which onboarding steps were viewed, skipped, or completed.
- Error events: anonymous error type and context when something goes wrong.
Each event includes: timestamp, platform (iOS/Android), anonymous device identifier, app version, current theme mode, selected language, and selected timezone.
If you decline consent, no usage analytics are collected. Amplitude is fully disabled and all tracking calls become inactive.
1.3 Crash Reports
We use Sentry (EU data center, Germany) to collect crash and error reports. This helps us identify and fix bugs to improve the App’s stability. Crash reports may include:
- Error messages, stack traces, and diagnostic breadcrumbs.
- Anonymous device identifier (as a tag for grouping related reports).
- App version and platform information.
Crash reporting operates under our legitimate interest in maintaining App stability and is active regardless of your analytics consent choice. Crash reports do not contain personal information.
1.4 Information We Do NOT Collect
- No personal data: We do not collect names, email addresses, phone numbers, physical addresses, payment information, or any other personally identifiable information.
- No user accounts: The App does not require registration or login.
- No location data: We do not access or track your geographic location.
- No contacts or address book: We do not access your contacts.
- No photos, camera, or microphone: The App does not access your camera, microphone, photos, or files.
- No advertising identifiers: We do not use IDFA, GAID, or any advertising tracking identifiers.
- No audio recording: The App is a streaming client only — no audio is recorded or stored on your device.
2. How We Use Information
We use the collected information solely to:
- Provide the service: Stream radio stations, display playlist history, manage your favorites, and apply your preferences (theme, language, timezone).
- Improve the App: Analyze anonymous usage patterns to understand which features are used and how to improve the experience.
- Fix bugs: Use crash reports to identify, diagnose, and resolve technical issues.
- Ensure compatibility: Detect outdated App versions that may no longer be compatible with our API.
3. Data Storage
3.1 Local Storage
The App stores the following data locally on your device:
| Data | Purpose |
|---|
| GDPR consent status | Remember your privacy choice |
| Anonymous device identifier | Consistent API communication |
| Theme, language, timezone preferences | Apply your preferred settings |
| Favorite stations | Quick access to your saved stations |
| Onboarding progress | Avoid re-showing completed tutorials |
| App open count | Determine when to show a review prompt |
| Cached API responses | Faster loading and offline resilience |
This data is stored in your device’s app-private storage, accessible only to the App, and is deleted when you uninstall the App.
3.2 No Cookies
The App does not use cookies or any web-based tracking technologies.
4. Third-Party Services
4.1 Amplitude (Usage Analytics)
- Purpose: Anonymous usage analytics.
- Data residency: European Union (EU server zone).
- Consent: Only active when you grant GDPR consent. Fully disabled on decline.
- Privacy policy: amplitude.com/privacy
4.2 Sentry (Crash Reporting)
- Purpose: Crash and error reporting.
- Data residency: European Union (Germany ingest endpoint).
- Consent: Active regardless of consent (legitimate interest basis).
- Privacy policy: sentry.io/privacy
4.3 Yotuna API
- Purpose: Provide station data, playlist history, and app configuration.
- Data sent: Anonymous device identifier, app version, and GraphQL queries.
- No personal data is transmitted.
4.4 Streaming Service Links
The App allows you to open playlist tracks in external streaming services:
When you tap a streaming service button, the App opens the corresponding app or website using only the track identifier. No user data from Yotuna is shared with these services. Once you leave the App, the streaming service’s own privacy policy applies.
4.5 External Links
The App may open the following external websites:
- Station websites and social media profiles (Facebook, Twitter/X, Instagram) as provided by station data.
- Discord community server.
- App Store and Google Play Store pages for app updates.
5. Data Sharing
- We do not sell your data to anyone.
- We do not share data with advertising networks. The App contains no advertising.
- We do not share data with data brokers or any third parties for marketing purposes.
- Service providers (Amplitude, Sentry) process anonymous data on our behalf under data processing agreements, solely for the purposes described in this policy.
6. Data Retention
- Usage analytics (Amplitude): Retained according to Amplitude’s data retention policies. Data is anonymous and cannot be linked to you.
- Crash reports (Sentry): Retained for 90 days to allow bug resolution, then automatically deleted.
- Local data: Stored on your device until you uninstall the App or clear app data.
7. Your Rights (GDPR)
7.1 Consent Management
- Grant or withdraw consent at any time via Settings > GDPR Consent in the App.
- Withdrawing consent immediately disables all usage analytics. Previously collected anonymous data cannot be linked to your device after reinstallation.
7.2 Right to Access
Since we do not collect personal data and use only anonymous identifiers, there is no personal data to provide in a data access request.
7.3 Right to Erasure
- Local data: Uninstall the App to delete all locally stored data.
- Analytics data: Since data is anonymous, it cannot be identified or deleted for a specific individual. Withdrawing consent ensures no further data is collected.
- Crash reports: Automatically expire after the retention period.
7.4 Right to Object
You may object to crash reporting data collection by contacting us. However, as this data is anonymous and collected under legitimate interest, we may not be able to identify or isolate your specific data.
7.5 Data Portability
As no personal data is collected, data portability does not apply.
8. Data Security
We implement appropriate technical measures to protect information:
- Encryption in transit: All network communication uses HTTPS/TLS. Cleartext traffic is explicitly prohibited.
- App-sandboxed storage: Local data is stored in private app storage, inaccessible to other apps.
- Anonymous by design: The device identifier is a cryptographic hash that cannot be reversed to reveal source data.
- EU data residency: Both Amplitude and Sentry process data within the European Union.
9. Children’s Privacy
The App is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect any information from children. Since the App does not require registration and collects no personal data, no age verification mechanism is implemented.
10. Android Permissions
The App requests only the minimum permissions necessary:
| Permission | Purpose |
|---|
| Internet access | Load station data and stream audio |
| Network state | Detect connectivity for error handling |
| Foreground service | Continue audio playback in the background |
| Wake lock | Keep audio streaming when screen is off |
The App does not request permissions for camera, microphone, location, contacts, storage, or phone state.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by updating the “Last updated” date at the top of this document. Continued use of the App after changes constitutes acceptance of the updated policy. For significant changes, we may notify you through the App.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
13. Supervisory Authority
If you are located in the European Economic Area and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.