PhoonOS Privacy Policy
PhoonOS (com.phoonos.phoonos) is the ecosystem's music and podcast app: you pay by the minute and the quality, and most of it goes to the artist.
1. Controller and scope
The data controller is Empoorio (https://empoorio.org). This policy covers the PhoonOS Android app published on Google Play as com.phoonos.phoonos. It does not cover the other apps in the ecosystem, each of which has its own. For any privacy matter: legal@empoorio.org.
2. You need an account
This app has its own account: you can sign in with an email and password or with your Google account. Signing up stores the form's data — name, email, phone and whatever your profile asks for — and a photo if you add one.
3. Where your data is stored
In Firebase, Google's service: the account in Firebase Authentication and everything else in Cloud Firestore. Google acts as a hosting provider processing that data on our behalf.
4. Camera and photos
For your profile picture and, if you publish, the cover of what you upload.
5. Bluetooth
To connect to headphones and speakers. Android also requires the location permission to scan over Bluetooth, even though the app does not use your position for anything.
6. Biometrics
To protect payments with the phone's fingerprint or face.
7. What this app does NOT do
• No third-party analytics measuring what you do inside. • It does not sell or share your data for advertising. • It does not track you across other apps or the web. • It does not use your location while the app is closed.
8. Permissions you will see on Google Play
The Google Play listing shows the permissions the app declares. The ones actually used are explained above. The listing also shows precise location. They are declared in the app without its code using them: they collect nothing, and we are removing them release by release. We say so here because we would rather you knew than found it in the permission list.
9. Your rights
You can request access to your data, its correction or its deletion by writing to legal@empoorio.org from your account's email. Deleting the account deletes your profile data; what is needed to resolve a claim — an order record, for instance — may be kept as long as necessary.