Privacy Policy

Who we are

Casty: AI Podcasts (“Casty”) is operated by SKAPP LLC. This policy explains what Casty collects, why, and the choices you have. Contact us any time at info@skapp.llc.

Information you give us

Account (optional). Casty works without an account. If you create one, we store your email address, first name and a securely hashed password (we never see or store your actual password). If you use Sign in with Apple, we receive an anonymous Apple user ID and, if you choose to share it, your name and email (which may be an Apple private relay address).

Password reset. When you ask to reset your password we email you a one-time 6-digit code. Only a hashed copy of the code is stored, and it expires after 15 minutes.

Community posts. If you publish a podcast to the Community, its title, description, topic, audio and the display name you choose become public to other Casty users until you delete it.

Reports. If you report a podcast, we store the reason you selected so we can moderate content.

Information stored only on your device

Your interests, favorites, listening history and progress, and podcasts you create but don't publish (including recordings and uploads) are stored on your device only and are never uploaded to us.

The microphone is used only while you are recording. Videos you pick are converted to audio on your phone; the original video is not kept or uploaded.

Third-party AI services

Permission first. Casty asks for your permission in the app before sending anything to a third-party AI service. If you don't allow it, nothing is sent and you can still upload, record or type podcasts, which are made entirely on your device. You can withdraw permission at any time in Profile → AI Data Sharing.

What is sent and how. When you tap Generate on an AI podcast, the app sends the topic you typed and the style, language and host voices you selected. The resulting script text is then sent to be converted into audio. Your name, email, account details, recordings, uploads, listening history, location and device identifiers are never sent.

Who receives it. Anthropic, PBC (Claude) writes the podcast script. X.AI Corp (xAI Grok voices) turns the script into speech. Requests are forwarded over encrypted HTTPS by our AI proxy providers Rork, Inc. and Vercel, Inc. (AI Gateway).

How it is used. This data is used only to generate the podcast you asked for and is returned to your device. We do not use it for advertising or to identify you. We only use providers whose terms require them to give this data the same or equal protection as described in this policy.

Please don't include personal or sensitive information in topics. Every AI-generated episode is labeled as AI-generated in the app.

Anonymous device identifier

To count likes and plays fairly, prevent spam and let you manage your Community posts, the app creates a random identifier on install. We only store a one-way hash of it. It is not linked to your advertising ID, contacts or location.

What we don't do

Casty has no ads, no third-party analytics or tracking SDKs, and does not sell your personal information or share it with anyone other than the AI services described above, and only with your permission. We don't collect location, contacts or advertising identifiers.

How long we keep data

Account data is kept until you delete your account. Sign-in sessions expire after 180 days. Password-reset codes expire after 15 minutes. Community posts remain until you or our moderators remove them.

Deleting your data

Delete your account: Profile → Account → Delete Account. This permanently removes your account from our servers right away.

Delete local data: Profile → Delete All My Data removes everything Casty stored on your device.

Delete a Community post: open it in My Published and choose Delete.

You can also email info@skapp.llc and we will delete your data within 30 days.

Children

Casty is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

Security

Data is sent over encrypted HTTPS connections. Passwords are hashed with PBKDF2, and session tokens are stored on your device in the iOS Keychain.

Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, export or delete your data. Email info@skapp.llc and we'll respond within 30 days.

Changes

If we change this policy, we'll update the date at the top and, for significant changes, let you know in the app.