Privacy Policy
for the Kitchen Radio app
Last updated: 8 June 2026
Protecting your personal data matters to us. This privacy policy informs you about which data is processed when you use the Kitchen Radio app (hereinafter "the app"), for what purpose this happens and what rights you have. The processing is carried out in accordance with the General Data Protection Regulation (GDPR).
1. Controller
The controller within the meaning of the GDPR and other data protection regulations is:
David Malzner
4020 Linz
Austria
Email: info@kitchenradio.app
2. Privacy at a glance
- Using the app requires no registration and no user account.
- The app contains no advertising and uses no analytics, tracking or advertising services.
- No cookies or comparable tracking technologies are used.
- The app does not access the GPS or precise location of your device.
- Your favourites, alarms and onboarding selection are stored exclusively locally on your device.
- Your IP address is only transmitted where this is technically necessary (location detection, playback of streams, station search).
3. Location detection when starting the app
To start the app, a country and an (approximate) city must be selected. To make this selection easier for you, the app determines a suggestion for the country and approximate city on startup. For this purpose your IP address is transmitted to a dedicated kitchenradio.app server at kitchenradio.app.
This server is located in the European Union. Your IP address is processed there exclusively to determine the corresponding country and city name and return it to the app. We do not use the IP address to identify you and do not create usage or movement profiles. You can change the suggested city manually at any time.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a convenient, regionally appropriate default setting of the app).
Retention period: The IP address is only processed for the duration of the request. Insofar as technical access logs are created on the server side, these are deleted after 7 days.
4. Playback of radio stations
When you play a radio station, the audio stream is loaded directly from the servers of the respective radio provider. In doing so, your IP address is transmitted to that provider; this is technically necessary to deliver the stream. The radio providers are independent controllers and may be located anywhere in the world. We have no influence over the nature and extent of the data processing there; the privacy policy of the respective provider applies.
To display the track currently playing, the app reads – where provided by the station – the track information contained in the stream (so-called ICY metadata). This uses the same connection to the radio provider; no additional recipient is involved.
Legal basis: Art. 6(1)(b) GDPR (provision of the function requested by you). For transfers to third countries, see Section 11.
5. Station search ("Discover")
In the "Discover" area you can search for radio stations. For this the app
uses the community-operated directory Radio Browser
(api.radio-browser.info). When you search, your
search criteria (e.g. keywords, country, station name) as
well as your IP address are transmitted to its servers. If a
station found this way is started, the app additionally sends an anonymous
click statistic (station identifier) to Radio Browser. The
Radio Browser servers are community-operated and may be located in
various countries.
Legal basis: Art. 6(1)(b) GDPR (provision of the search
function requested by you).
Further information:
radio-browser.info.
6. Playback on Chromecast devices
Optionally, you can hand over playback to a Chromecast or Google Cast device
in your local network. To detect available devices, the app searches
exclusively in your local network; for this, the "Nearby
devices (Wi-Fi)" permission is used on Android. This permission is requested
with the neverForLocation flag and is not used to
determine your location.
When casting, the station's stream address and display data (station name, location, logo) are transmitted to the selected cast device; the cast device then retrieves the stream itself from the radio provider. The Google Cast SDK is used for the cast function.
Legal basis: Art. 6(1)(b) GDPR (playback on a cast device
initiated by you).
Further information:
Google's privacy policy.
7. Data stored locally on the device
The following data is stored exclusively locally on your device and is not transmitted to us or third parties:
- your selection of country and city from onboarding,
- the tracks and stations you have saved as favourites,
- the alarms you have set up (times and settings).
This data remains on the device until you delete it in the app or uninstall the app.
Legal basis: Art. 6(1)(b) GDPR (provision of the functions you use).
8. App permissions
Depending on the platform and the function used, the app only requests the permissions that are necessary for operation:
| Permission | Purpose |
|---|---|
| Internet / network access | Playback of streams, location detection and station search |
| Nearby Wi-Fi devices | Detection of Chromecast devices in the local network (not for determining location) |
| Notifications | Playback controls and alarm notifications |
| Foreground service / wake lock | Stable audio playback, including in the background |
| Exact alarms / full-screen display | Triggering and displaying the alarm at the set time |
| Start after reboot | Restoring set alarms after a device restart |
| Vibration / Do-Not-Disturb exception / battery optimisation | Reliable triggering of the alarm |
No additional personal data is collected from these permissions or transmitted to us.
9. Opening external apps and sharing
The app offers functions to open or share content in other applications (e.g. searching for a track on YouTube or Spotify, opening a website in the browser, sending an email or sharing via the system share function). As soon as you trigger such a function, the relevant data is handed over to the application or provider you have chosen. Their privacy policies then apply. These processes are always actively initiated by you.
10. No analytics, no tracking, no advertising
The app uses no analytics, statistics, tracking or advertising services. There is no cross-device tracking, and no profiles of your usage behaviour are created. To check whether an internet connection exists, the app merely performs a technical connectivity check.
11. Transfer to third countries
During the playback of radio stations (Section 4) and the station search (Section 5), your IP address may be transmitted to servers outside the European Union or the European Economic Area, since radio providers may be located anywhere in the world. This transfer is technically necessary to provide the stream or search result you have selected.
The legal basis for this transfer is Art. 49(1)(b) GDPR (transfer for the performance of the service requested by you). We point out that these third countries may not have a level of data protection comparable to that of the EU and that we have no influence over the processing there by the radio providers.
12. Retention period
- Local data (favourites, alarms, onboarding selection): until deleted by you or until the app is uninstalled.
- IP address during location detection: only for the duration of the request; for any server logs see Section 3.
- Transfer to radio providers and Radio Browser: The retention period is governed by the rules of the respective provider.
13. Your rights
Under the GDPR you have, in particular, the following rights:
- right of access (Art. 15 GDPR),
- right to rectification (Art. 16 GDPR),
- right to erasure (Art. 17 GDPR),
- right to restriction of processing (Art. 18 GDPR),
- right to data portability (Art. 20 GDPR),
- right to object to processing (Art. 21 GDPR).
To exercise your rights, an informal message to info@kitchenradio.app is sufficient. Data stored exclusively locally on your device can also be deleted by you at any time, either in the app or by uninstalling it.
Regardless of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular with the authority of your habitual residence or at the controller's registered office.
14. Data security
The connection to our server (location detection) and to the station search is encrypted via HTTPS. Please note that individual radio providers may deliver their streams unencrypted; we have no influence over the transport security of these third parties.
15. Changes to this privacy policy
We adapt this privacy policy as soon as changes to the app or the legal framework make this necessary. The current version published in the app or on our website applies in each case.
16. Contact
If you have any questions about data protection, you can reach us at: info@kitchenradio.app.