Privacy Policy

Last updated May 13, 2026

This privacy notice for Ponimio (“Company,” “we,” “us,” or “our”), describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (the “Services”).

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, please contact us at contact@ponim.io.

Summary of key points

What personal information do we process?When you sign in with Google and use the Services, we receive your Google account’s stable user ID, email address, name, and profile picture, along with metadata about the episodes you choose to transcribe (episode IDs and timestamps) and your playback progress and followed podcasts.

Do we process any sensitive personal information? No.

Do we receive any information from third parties? Yes — we receive identity information from Google to sign you in, and we resolve podcast metadata and audio URLs from Podcast Index, a public podcast directory. We also send podcast audio URLs to a third-party transcription provider (Lemonfox) to generate transcripts on your behalf.

How do we process your information? To provide, improve, and administer the Services; to communicate with you; for security and fraud prevention; and to comply with law. We process your information only when we have a valid legal reason to do so.

In what situations and with which parties do we share personal information? Only with the third parties strictly required to provide the Services — Google (for sign-in), Podcast Index (to resolve podcast metadata and audio URLs), Lemonfox (to generate transcripts), and Google Translate (to translate transcript text).

What are your rights? Depending on where you are located, the applicable privacy law may give you certain rights regarding your personal information, including the right to access, correct, or delete it.

How do you exercise your rights? The easiest way is by emailing us at contact@ponim.io. You can also submit a data-deletion request directly from the footer of the site when signed in.

Table of contents

1. What information do we collect?
2. How do we process your information?
3. When and with whom do we share your personal information?
4. Do we use cookies and other tracking technologies?
5. How do we handle your social logins?
6. Is your information transferred internationally?
7. How long do we keep your information?
8. Do we collect information from minors?
9. What are your privacy rights?
10. Controls for do-not-track features
11. Do California residents have specific privacy rights?
12. Do we make updates to this policy?
13. How can you contact us about this policy?
14. How can you review, update, or delete the data we collect from you?

1. What information do we collect?

Personal information you disclose to us

In short: We collect the personal information you provide to us when you sign in with your Google account.

When you sign in with Google, Google shares with us:

• Your Google account’s stable subject identifier (a number that does not change if you rename your account).
• Your email address and whether it has been verified.
• Your display name, locale, and profile picture URL.

We do not request access to your Gmail, Drive, Calendar, or any other Google service. We only use the openid, email, and profile scopes.

In addition, when you use the Services we record:

• The episode IDs of podcasts you choose to transcribe, along with timestamps of those events, to enforce daily usage limits and avoid re-billing transcription costs for episodes you have already opened.
• Cached transcript text generated from those episodes, so subsequent visits to the same episode don’t require re-transcription.
• Your playback progress for each episode you listen to, so playback can resume where you left off.
• The list of podcasts you choose to follow within the Services.

Sensitive information. We do not process sensitive information.

Information automatically collected

In short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit the Services. This information does not reveal your specific identity but may include device and usage information. It is primarily used to maintain the security and operation of the Services and for internal analytics.

2. How do we process your information?

In short: We process your information to provide, improve, and administer the Services, communicate with you, for security and fraud prevention, and to comply with law. Specifically, we use your information to:

• Authenticate you via Google Sign-In and maintain your session via a signed, HTTP-only cookie.
• Stream podcast episodes you select directly from the podcast’s public RSS feed.
• Generate, cache, and display transcripts and translations of podcasts you select.
• Enforce daily transcription quotas and prevent abuse of the Services.
• Respond to your support requests and feedback.

3. When and with whom do we share your personal information?

In short: We share information only with the third parties strictly required to operate the Services.

• Google. Authentication flows through Google Sign-In. Google returns a signed ID token containing your account identifier, email, and basic profile. We verify the token server-side and discard the Google-issued tokens immediately — only your internal user record is persisted.
• Podcast Index. We look up podcast metadata (show titles, episode lists, cover art, audio enclosure URLs) from Podcast Index, a public podcast directory. We do not send any personal information with those lookups.
• Transcription provider (Lemonfox). When you ask us to transcribe an episode, we send the audio URL for that episode to Lemonfox so they can return a transcript. We do not send your identity or any other personal information with that request.
• Google Translate.Translated transcript text is generated by Google’s machine translation API when you select a target language. We send only the transcript text — not your identity — to that service.
• Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

4. Do we use cookies and other tracking technologies?

In short: We use a small number of cookies that are essential to the Services. We do not use advertising or analytics cookies.

The cookies we set are limited to a single signed session cookie used to keep you signed in across page loads, plus short-lived OAuth state cookies (cleared as soon as Google Sign-In completes). They are HTTP-only, scoped to this site, and not shared with third parties. If you do not agree to these essential cookies, do not use the Services.

5. How do we handle your social logins?

In short: Sign-in is provided exclusively through Google. When you choose to sign in with Google, we receive certain profile information from Google, which we use only for the purposes described in this notice. We do not control, and are not responsible for, other uses of your personal information by Google. We recommend that you review Google’s privacy policy to understand how they collect, use, and share your personal information.

6. Is your information transferred internationally?

In short: Our servers are located in the United States. If you are accessing the Services from outside, please be aware that your information may be transferred to, stored, and processed by us in the United States and by the third parties listed above. If you are a resident in the European Economic Area (EEA) or United Kingdom (UK), these countries may not necessarily have data protection laws as comprehensive as those in your country. We will take all necessary measures to protect your personal information in accordance with this privacy notice and applicable law.

7. How long do we keep your information?

In short:We keep your information for as long as necessary to provide the Services to you and to fulfill the purposes outlined in this privacy notice, unless otherwise required by law. Transcripts are cached so we don’t need to re-bill external transcription costs for episodes you have already opened. You can request deletion of your account and associated data at any time via the “Delete data request” link in the site footer.

8. Do we collect information from minors?

In short:We do not knowingly collect data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.

9. What are your privacy rights?

In short: You may review, change, or terminate your account at any time.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us at contact@ponim.io. However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

10. Controls for do-not-track features

Most web browsers include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

11. Do California residents have specific privacy rights?

In short: Yes — California residents have specific rights regarding access to their personal information.

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please contact us at contact@ponim.io.

12. Do we make updates to this policy?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

The updated version will be indicated by an updated “Last updated” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

13. How can you contact us about this policy?

If you have questions or comments about this notice, you may email us at contact@ponim.io.

14. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please contact us at contact@ponim.io— or, when signed in, use the “Delete data request” link in the footer of the site.