Privacy Policy for WRP Companion

1. Who we are and what this policy covers

WRP Companion is the mobile companion for Web Radio Players. It provides access to your existing SaaS account, station information, live listening, audience reports, public pages and geoblocking controls.

The app is provided by Enocus Limited, registered in England and Wales, company number 16482583. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Enocus Limited is the data controller for personal information relating to your use of the app and your SaaS account. Our role when processing listener information for station operators is described in section 5.

For privacy questions or requests concerning your personal data, contact [email protected]. For technical support, contact [email protected].

This app-specific policy should be read together with the Web Radio Players Privacy Policy at Web Radio Players Privacy Policy. That policy governs the underlying SaaS service, including account and server-side processing, service providers, retention, deletion and international transfers. This policy explains the additional processing associated with using the companion app. It does not establish a separate retention schedule for your SaaS account or listener records.

2. Account and service information

To sign in, you provide your account email address and password. The app sends these to the Web Radio Players authentication service and receives access and refresh tokens that keep your session signed in. The app does not save your password in its own persistent local storage. Your operating system or password manager may separately offer to save credentials under its own settings.

The app accesses the account information associated with your SaaS account, such as your email address and name, and the stations and features you are authorised to use. It retrieves station names and identifiers, logos, stream addresses and status, track information and artwork, recent tracks, public-page details, geoblocking settings and audience reports.

When you publish or unpublish a public page or change geoblocking settings or country lists, the app sends the requested changes to the SaaS service. This information is used to provide the functions you select, authenticate access and manage your stations. Without the information necessary to sign in and load your account, these functions cannot be provided.

3. Information stored on your device

The app stores sign-in tokens and their expiry information using platform-backed secure storage. It also stores local preferences and operational state, including pinned station identifiers, your selected analytics period, alert settings, muted station identifiers, app-lock settings, the time the app moved into the background, and stream-problem summaries and acknowledgements.

These preferences help the app remember your choices and avoid repeatedly presenting the same station problem. They are not a separate advertising profile. Station information and media can also be held temporarily in memory or in caches or temporary files managed by the app, its playback/sharing components or your operating system.

Generating a public-page QR code takes place on your device. When you share the QR image, a temporary image file may be created so the operating system can pass it to the app you choose. Copies you save or send are subsequently controlled by you and the receiving service.

4. Connections to our services and other providers

The app connects to Web Radio Players account, station and metadata services to provide its features. Network requests make your IP address and ordinary connection/request information available to the receiving service. Such information may be processed for service delivery, security and troubleshooting in accordance with the Web Radio Players Privacy Policy.

Live audio streams, station logos, track artwork and page-preview images may be delivered by station operators or other providers. Loading these resources sends a request directly to the relevant host, which can receive your IP address and standard request information and may keep its own logs. These independent providers' processing is governed by their own privacy notices.

If you open a public page or another external link, your browser connects to that destination. The website may use cookies or other technologies under its own privacy policy. The companion app itself does not use browser cookies for advertising or include advertising, advertising-ID collection, or third-party marketing analytics or crash-reporting SDKs.

5. Audience reports and listener data

The Analytics screen displays station-level reports provided by the SaaS, including session totals, recorded listening time, duration groups, engagement, country distribution and player, stream or device/browser segments. Displaying these reports does not itself activate a separate tracking service for your use of the companion app.

Collection and processing of the station's underlying listener data are governed by the Web Radio Players Privacy Policy and the applicable service agreements, including the Data Processing Addendum. As described in that policy, station operators are responsible for the appropriate privacy information and lawful basis for their listeners, and Enocus Limited processes that listener data on their behalf. Listener privacy requests should be directed to the relevant station operator.

When you use live listening in the companion, the stream provider still receives the connection information described in section 4.

6. Permissions, app lock and notifications

App lock uses your device's biometric or PIN/passcode authentication system. Authentication takes place through the operating system. The app receives the authentication result; it does not receive or store your fingerprint or face template or your device PIN/passcode.

If you enable stream alerts, the app uses station-status information to generate notifications on your device when it detects a problem. Alert delivery depends on the app being able to run, your device settings and notification permission. It is not a guarantee of continuous monitoring. Media playback also uses your device's playback service and controls.

Notifications and media controls may display station or track information on your lock screen or notification panel, depending on your device settings. You can change notification visibility or permission in system settings and disable stream alerts or app lock in the app's Account screen.

The app does not request access to your contacts, microphone, camera, SMS messages or precise device location. Country reports describe listener data supplied by the SaaS, rather than obtaining your phone's GPS location.

7. Sharing and the clipboard

When you select a share action, the operating system passes the chosen URL, QR image or station details to the application or recipient you select. Shared station details can include the station name, stream information and listener count, depending on the action. Sign-in passwords and sign-in tokens are not included in the app's share payloads.

When you select Copy, the chosen information is written to your device's clipboard. Clipboard access and any copies held by your browser, messaging app or other recipient are subject to those services' policies and your device settings. Only share information with recipients you intend to receive it.

8. How information is used and disclosed

Enocus Limited uses the app's account and service information to provide authenticated access, deliver the requested features, apply your station changes, maintain service security and respond to support or privacy requests. Information is transmitted to the SaaS services and their service providers as described in the Web Radio Players Privacy Policy, as well as to the resource providers or recipients involved in the actions described above.

The purposes and lawful bases for SaaS processing, disclosures to service providers or for legal reasons, and safeguards for international transfers remain those described in the Web Radio Players Privacy Policy. The app does not introduce a separate advertising or marketing data flow. Contact [email protected] for questions about recipients, processing locations or transfer safeguards.

9. Retention, sign-out and deletion

SaaS account data, server/security records and listener analytics follow the retention and deletion practices in the Web Radio Players Privacy Policy. Under that policy, personal data is retained only for as long as necessary for the purpose for which it was collected and as required by applicable law, and is removed or anonymised when no longer needed. Using the companion does not create a separate retention period for those records.

Signing out removes the app's stored sign-in tokens and stops its signed-in playback and monitoring activity. The app also attempts to revoke the server session; server revocation requires connectivity. Signing out does not delete your SaaS account or all device preferences.

You can remove local app data using your device's app-storage controls where available. Uninstalling the app generally removes its local app data, subject to your platform's secure-storage and backup/restore behaviour. Uninstalling does not delete your SaaS account, server records, or content you have saved or shared with other services.

To request deletion of your Web Radio Players account or associated personal data, email [email protected] and identify the account concerned. You may mention that you use WRP Companion. We may need to verify your identity before acting on a request. Requests and any information that must be retained for legal obligations or other applicable exceptions are handled under the Web Radio Players Privacy Policy and applicable law. Do not send your password with a privacy request.

10. Security

The app's configured production authentication, management and metadata services use HTTPS. Sign-in tokens are kept in platform-backed secure storage. App lock provides an optional additional device-access control.

External stream, artwork and website providers control the security of their own connections and systems. No app or service can guarantee absolute security. Protect your device and account credentials, and review lock-screen notification visibility if your device is shared. Our server-side security practices are described in the Web Radio Players Privacy Policy.

11. Your privacy rights

Depending on the law that applies and the processing involved, you may have rights to access, correct or delete your personal data, restrict processing, obtain a portable copy, object to processing based on legitimate interests, and withdraw consent where consent is the applicable basis. Withdrawing consent does not affect processing that was lawful before withdrawal.

You can exercise your rights by contacting [email protected]. You also have the right to complain to the applicable data protection authority, including the UK Information Commissioner's Office at ico.org.uk or your local authority in the EEA. The Web Radio Players Privacy Policy provides further information about these rights and how requests are handled.

12. Children and policy changes

WRP Companion is intended for Web Radio Players account holders and station operators and is not directed to children under 18, consistent with the Web Radio Players Privacy Policy. If you believe a child's personal data has been provided improperly, contact [email protected].

We may update this policy when the app's features or data practices change. The revised version will show an updated date. Important changes will be communicated where required by applicable law. Updates to the underlying SaaS Privacy Policy continue to apply to the service processing it governs.