Privacy Policy

for the Kitchen Radio app

Last updated: 8 June 2026

Protecting your personal data matters to us. This privacy policy informs you about which data is processed when you use the Kitchen Radio app (hereinafter "the app"), for what purpose this happens and what rights you have. The processing is carried out in accordance with the General Data Protection Regulation (GDPR).

1. Controller

The controller within the meaning of the GDPR and other data protection regulations is:

David Malzner
4020 Linz
Austria
Email: info@kitchenradio.app

2. Privacy at a glance

3. Location detection when starting the app

To start the app, a country and an (approximate) city must be selected. To make this selection easier for you, the app determines a suggestion for the country and approximate city on startup. For this purpose your IP address is transmitted to a dedicated kitchenradio.app server at kitchenradio.app.

This server is located in the European Union. Your IP address is processed there exclusively to determine the corresponding country and city name and return it to the app. We do not use the IP address to identify you and do not create usage or movement profiles. You can change the suggested city manually at any time.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a convenient, regionally appropriate default setting of the app).

Retention period: The IP address is only processed for the duration of the request. Insofar as technical access logs are created on the server side, these are deleted after 7 days.

4. Playback of radio stations

When you play a radio station, the audio stream is loaded directly from the servers of the respective radio provider. In doing so, your IP address is transmitted to that provider; this is technically necessary to deliver the stream. The radio providers are independent controllers and may be located anywhere in the world. We have no influence over the nature and extent of the data processing there; the privacy policy of the respective provider applies.

To display the track currently playing, the app reads – where provided by the station – the track information contained in the stream (so-called ICY metadata). This uses the same connection to the radio provider; no additional recipient is involved.

Legal basis: Art. 6(1)(b) GDPR (provision of the function requested by you). For transfers to third countries, see Section 11.

5. Station search ("Discover")

In the "Discover" area you can search for radio stations. For this the app uses the community-operated directory Radio Browser (api.radio-browser.info). When you search, your search criteria (e.g. keywords, country, station name) as well as your IP address are transmitted to its servers. If a station found this way is started, the app additionally sends an anonymous click statistic (station identifier) to Radio Browser. The Radio Browser servers are community-operated and may be located in various countries.

Legal basis: Art. 6(1)(b) GDPR (provision of the search function requested by you).
Further information: radio-browser.info.

6. Playback on Chromecast devices

Optionally, you can hand over playback to a Chromecast or Google Cast device in your local network. To detect available devices, the app searches exclusively in your local network; for this, the "Nearby devices (Wi-Fi)" permission is used on Android. This permission is requested with the neverForLocation flag and is not used to determine your location.

When casting, the station's stream address and display data (station name, location, logo) are transmitted to the selected cast device; the cast device then retrieves the stream itself from the radio provider. The Google Cast SDK is used for the cast function.

Legal basis: Art. 6(1)(b) GDPR (playback on a cast device initiated by you).
Further information: Google's privacy policy.

7. Data stored locally on the device

The following data is stored exclusively locally on your device and is not transmitted to us or third parties:

This data remains on the device until you delete it in the app or uninstall the app.

Legal basis: Art. 6(1)(b) GDPR (provision of the functions you use).

8. App permissions

Depending on the platform and the function used, the app only requests the permissions that are necessary for operation:

PermissionPurpose
Internet / network accessPlayback of streams, location detection and station search
Nearby Wi-Fi devicesDetection of Chromecast devices in the local network (not for determining location)
NotificationsPlayback controls and alarm notifications
Foreground service / wake lockStable audio playback, including in the background
Exact alarms / full-screen displayTriggering and displaying the alarm at the set time
Start after rebootRestoring set alarms after a device restart
Vibration / Do-Not-Disturb exception / battery optimisationReliable triggering of the alarm

No additional personal data is collected from these permissions or transmitted to us.

9. Opening external apps and sharing

The app offers functions to open or share content in other applications (e.g. searching for a track on YouTube or Spotify, opening a website in the browser, sending an email or sharing via the system share function). As soon as you trigger such a function, the relevant data is handed over to the application or provider you have chosen. Their privacy policies then apply. These processes are always actively initiated by you.

10. No analytics, no tracking, no advertising

The app uses no analytics, statistics, tracking or advertising services. There is no cross-device tracking, and no profiles of your usage behaviour are created. To check whether an internet connection exists, the app merely performs a technical connectivity check.

11. Transfer to third countries

During the playback of radio stations (Section 4) and the station search (Section 5), your IP address may be transmitted to servers outside the European Union or the European Economic Area, since radio providers may be located anywhere in the world. This transfer is technically necessary to provide the stream or search result you have selected.

The legal basis for this transfer is Art. 49(1)(b) GDPR (transfer for the performance of the service requested by you). We point out that these third countries may not have a level of data protection comparable to that of the EU and that we have no influence over the processing there by the radio providers.

12. Retention period

13. Your rights

Under the GDPR you have, in particular, the following rights:

To exercise your rights, an informal message to info@kitchenradio.app is sufficient. Data stored exclusively locally on your device can also be deleted by you at any time, either in the app or by uninstalling it.

Regardless of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular with the authority of your habitual residence or at the controller's registered office.

14. Data security

The connection to our server (location detection) and to the station search is encrypted via HTTPS. Please note that individual radio providers may deliver their streams unencrypted; we have no influence over the transport security of these third parties.

15. Changes to this privacy policy

We adapt this privacy policy as soon as changes to the app or the legal framework make this necessary. The current version published in the app or on our website applies in each case.

16. Contact

If you have any questions about data protection, you can reach us at: info@kitchenradio.app.