Privacy Policy — Rondo Radio

This Privacy Policy explains how Fambridge Trading Inc. ("Fambridge", "Rondo", "we", "us", or "our") collects, uses, discloses, retains, and protects personal information in connection with the Rondo Radio application and related Rondo services.

Rondo is designed so that you can browse stations and listen to radio without creating a Rondo Account.

1. Scope

This Privacy Policy applies to information processed by Fambridge through the Rondo Radio application and Rondo-operated cloud services.

It does not govern the independent privacy practices of radio broadcasters, streaming providers, content delivery networks, Apple, Google, your email provider, your internet service provider, or other third parties that operate under their own policies.

2. Information Rondo Processes

The information Rondo processes depends on the features you choose to use.

2.1 Basic Radio Use and Rondo Cloud Requests

You do not need to provide your name, email address, phone number, or other profile information to browse stations or listen to radio.

When the App connects to Rondo-operated cloud services, Rondo and its infrastructure providers may process technical information necessary to provide and protect those services, including:

IP address and ordinary network request information;
request date and time;
the Rondo service endpoint being requested;
station identifier where needed to provide catalogue or playback-source functionality;
App version and relevant software environment information;
pseudonymous app-security identifiers;
app-integrity or security-attestation information; and
security, rate-limiting, and abuse-prevention information.

This information is used to deliver requested Rondo services, authenticate legitimate Rondo App requests, protect playback-source information, prevent abuse, maintain security, and investigate operational problems.

Rondo does not use this technical information for third-party behavioral advertising.

2.2 Rondo Account Information

If you choose to use a Rondo Account, Rondo may process:

an internal Rondo account identifier;
the authentication provider you use, such as Apple or Google;
the provider's stable account identifier;
an email address if the provider legitimately supplies one and it is needed for account operation;
information identifying which supported authentication methods are linked to the account; and
session, token, and security information necessary to maintain and protect your authenticated session.

Rondo does not use an email address as the primary identifier for a Rondo Account and does not automatically merge accounts based solely on matching email addresses.

Rondo does not operate a first-party email-and-password authentication system.

2.3 Subscription and Membership Information

If you choose to purchase, restore, or use a supported Rondo Membership subscription or other Membership entitlement, Rondo may process information needed to verify billing status, associate an eligible entitlement with a Rondo Account, prevent conflicting transaction ownership, and provide Membership features. Depending on the store and event, this may include:

the internal Rondo Account identifier and any store-provided app-account association token used for subscription verification;
the billing platform, subscription product identifier, transaction and original-transaction identifiers, and applicable Sandbox or production environment;
purchase, renewal, expiry, introductory-offer, automatic-renewal, billing-status, refund, or revocation information and relevant timestamps made available by the store;
verified store transaction data, server notifications, and reconciliation results used to determine an active Membership entitlement; and
limited processing and security records necessary to avoid duplicate transactions or notifications, investigate errors or fraud, and maintain service integrity.

Rondo uses verified store information to determine Membership access; it does not treat an unverified purchase claim as proof of entitlement. Payments for App Store subscriptions are handled by Apple. Rondo does not receive or store your full payment-card number as part of those purchases. The applicable store independently processes payment and may retain its own transaction records under its privacy policy.

2.4 Favorites

If you use Rondo without signing in, Favorites are stored locally on your device.

When a signed-in Rondo Account has an eligible Membership entitlement for Favorites Sync, Rondo stores station identifiers in its synchronized Favorites collection so that additions and removals can be kept consistent across supported signed-in devices. Without synchronization access, Favorites may remain stored locally on the device.

2.5 Recent Stations, Timer, Sleep Timer, and Settings

Recent Stations, active Timer and Sleep Timer state, and various App preferences are stored locally on the device.

Active Timer and Sleep Timer state is not synchronized through the Rondo Account service.

2.6 Help & Feedback

Help & Feedback is user initiated.

Rondo prepares a report locally and does not automatically send it. You decide whether to send or share the report through the available system interface.

Depending on the report you choose to send, it may contain:

station name and station identifier;
issue or feedback category;
a country or region only if you voluntarily select one where that option is presented;
text you voluntarily enter;
App version and build;
hardware model or device family;
operating-system version;
a product-level error category where available; and
report date, time, and time-zone or offset information.

A normal Rondo feedback report does not automatically include:

precise GPS location;
contact lists;
advertising identifiers;
user-assigned device name;
passwords or authentication credentials;
signed or tokenized stream URLs;
raw playback logs; or
developer diagnostic history.

If you send a report by email, the sender information associated with the email account you choose may be visible to Fambridge and will also be processed by the applicable email service providers.

2.7 Station, Broadcaster, and Rights-Holder Communications

If you contact Fambridge to submit or update a station, provide stream or branding information, request a correction or removal, raise an intellectual-property concern, or otherwise communicate with us about third-party radio content, Fambridge may process:

your name, business contact information, organization, and role where you provide them;
information reasonably necessary to verify that you are authorized to act for a station or rights holder;
station URLs, stream information, logos, artwork, descriptions, schedules, metadata, or other materials you provide; and
correspondence and records relating to permissions, corrections, removals, disputes, and resulting actions.

Fambridge uses this information to evaluate and maintain station listings, document permissions, respond to station and rights-holder requests, prevent fraudulent or unauthorized submissions, resolve disputes, and comply with applicable legal obligations.

2.8 First-Party Listening Analytics

Rondo uses first-party listening analytics to understand how people use the App and its curated radio stations. When you listen, Rondo may record station selections, aggregated effective listening duration, completed listening-session counts, and explicit Favorites changes. Related context may include the date, time zone or offset, and station category or descriptive tags.

Effective listening duration begins after playback is first confirmed and may include temporary buffering or automatic recovery while a listening session remains active. This information is aggregated on the device before upload to Rondo-operated cloud services. Rondo does not upload individual playback-action or track-by-track timelines, the text of station searches, microphone recordings, or raw player diagnostics as part of Listening Analytics.

Listening records are attributed to a randomly generated, pseudonymous App-instance identifier, rather than a hardware identifier or advertising ID. No Rondo Account is required for basic listening. If you sign in, eligible listening history may become associated with your Rondo Account. Signing out does not itself erase listening statistics or necessarily end the association of an existing listening-data scope with that account. Switching to another account does not retroactively assign earlier listening records to the new account.

Rondo's cloud infrastructure may supply an approximate country or coarse geographic area associated with an authorized App request to support regional listening statistics. Rondo does not request GPS coordinates for this purpose and does not store the raw IP address in Listening Analytics facts. Ordinary IP-address and network-request processing is described separately in Section 2.1.

These analytics help Rondo understand station and App use, not deliver individualized station recommendations or track users for third-party advertising. A country or region you voluntarily select when reporting a station problem under Section 2.6 is a separate customer-support information flow.

3. Information Rondo Does Not Require for Ordinary Radio Listening

Rondo does not require the following information for ordinary station browsing and listening:

your legal name;
postal address;
phone number;
date of birth;
gender;
precise GPS location;
contacts;
photos or photo library;
camera data;
microphone recordings;
health information;
payment-card information;
advertising identifiers such as Apple's IDFA;
IMEI;
hardware serial number; or
user-assigned device name.

Rondo does not use third-party advertising SDKs and does not use Rondo activity to track users across unrelated companies' apps or websites for advertising purposes.

4. How Rondo Uses Information

Fambridge uses information processed through Rondo only for purposes associated with operating and protecting the service, including:

providing the curated station catalogue;
providing radio playback and playback-source resolution;
authenticating legitimate Rondo App requests;
protecting Rondo cloud services and playback-source information;
creating and maintaining Rondo Accounts when requested by the user;
authenticating signed-in users;
synchronizing Favorites for accounts with eligible feature access;
verifying subscription transactions, processing relevant store notifications, and determining Membership entitlements;
handling subscription renewals, expirations, refunds, revocations, and account-to-purchase ownership checks;
maintaining account and service security;
detecting and preventing unauthorized access, scraping, fraud, and automated abuse;
responding to feedback and station reports;
measuring aggregated station selections, effective listening duration, completed sessions, Favorites changes, and approximate listening regions to understand the audience and improve the radio service;
evaluating station submissions and updates, documenting permissions, and responding to rights-holder correction or removal requests;
troubleshooting and maintaining service reliability; and
complying with applicable legal obligations.

Fambridge does not sell personal information.

Fambridge does not rent personal information.

Fambridge does not use Rondo personal information for third-party behavioral advertising.

5. Authentication Providers

Rondo supports authentication through Sign in with Apple and Google Sign-In.

Apple or Google authenticates you under its own terms and privacy practices and provides Rondo with information needed to establish or identify your Rondo Account.

Rondo relies primarily on the provider's stable account identifier for authentication. If a provider supplies an email address, Rondo may retain it where reasonably necessary for account operation.

Rondo does not treat a matching email address from different authentication providers as proof that two accounts belong to the same person.

6. App Integrity and Security Services

Rondo uses platform security mechanisms, including Apple app-integrity and attestation services, to help determine whether protected Rondo cloud requests originate from a legitimate copy of the Rondo App.

These mechanisms may involve Apple processing device- or app-security information under Apple's own privacy practices. Rondo receives only the information necessary to establish and maintain the relevant security relationship and does not use this process for advertising.

7. Radio Broadcasters, Streaming Providers, and CDNs

Rondo generally does not relay the radio audio itself through Fambridge servers.

When you select a station, your device may connect directly to the broadcaster, streaming provider, or content delivery network that delivers the audio.

As part of an ordinary internet connection, that third party may receive technical information such as:

your IP address;
request time;
the requested stream or resource; and
ordinary network and client information made available by the connection.

Those organizations operate independently from Fambridge. Their handling of information is governed by their own privacy practices, and Fambridge does not control their independent processing.

8. Service Providers

Fambridge uses service providers to operate portions of Rondo.

Relevant providers include:

Cloudflare, for Rondo cloud infrastructure, network delivery, security, storage, and request processing;
Apple, for App Store distribution, Sign in with Apple, in-app subscription billing, StoreKit purchase verification and subscription-status notifications, app-integrity and platform security services, and operating-system functionality;
Google, when you choose Google Sign-In; and
email and sharing providers, when you voluntarily send feedback or contact Fambridge using those services.

Service providers acting on Fambridge's behalf are permitted to process information only for the services they provide, subject to applicable contractual and legal protections.

Some providers, such as Apple, Google, broadcasters, and email services, may also act independently under their own terms and privacy policies for portions of their services.

9. International Processing

Fambridge is a Canadian company. Some service providers used by Rondo operate infrastructure in Canada, the United States, and other jurisdictions.

As a result, information may be processed or stored outside your province or territory and, in some cases, outside Canada.

Information processed in another jurisdiction may be subject to the laws of that jurisdiction, including lawful access by courts, law-enforcement agencies, or governmental authorities.

Fambridge uses reasonable contractual, technical, and organizational safeguards appropriate to the information and the processing involved.

10. Data Retention

Fambridge retains personal information only for as long as reasonably necessary for the purposes for which it was collected, for legitimate security and operational requirements, or as required by law.

In particular:

Rondo Account information is retained while needed to operate the account and is deleted or disassociated following successful account deletion, subject to limited lawful retention requirements;
authentication sessions and credentials are retained only for their applicable security and session lifecycle and are revoked, replaced, or deleted when no longer required;
synchronized Favorites are retained while associated with the relevant Rondo Account and are deleted from account storage when that account is successfully deleted;
account-linked subscription and Membership records are retained as needed to verify ongoing access, reconcile store billing events, and prevent duplicate or conflicting ownership; account deletion removes or disassociates records tied to the deleted account, subject to necessary limited security, audit, and legal retention;
limited store-notification processing and audit records may be retained for integrity and troubleshooting purposes after account deletion, with account-identifying information removed or disassociated where no longer required;
security and operational records are retained for limited periods appropriate to security, abuse prevention, reliability, and legal requirements;
Listening Analytics awaiting upload may be stored on the device in a bounded, rolling buffer of up to 180 days, and may be removed earlier because of device storage limits, technical failures, or the App/device lifecycle;
accepted first-party listening statistics may be retained in Rondo's operational cloud records and protected historical archives for legitimate analytics purposes, subject to applicable retention, security, and data-minimization requirements. Pseudonymous App-level records can persist separately from account identifiers;
feedback and ordinary correspondence are retained only for as long as reasonably necessary to review, respond to, investigate, or resolve the matter, and for any applicable legal requirement;
station, broadcaster, and rights-holder submissions or correspondence may be retained for as long as reasonably necessary to document permissions, listing history, correction or removal requests, dispute resolution, and applicable legal obligations; and
device-local information remains subject to the App and operating-system storage lifecycle and may be removed when you delete App data or remove the App.

Fambridge does not retain personal information simply because storage is available.

11. Account Deletion

A signed-in user can initiate deletion of a Rondo Account from within the App.

Request deletion without the App: If you no longer have the App installed or cannot access its account settings, you can email [email protected] to request deletion of your Rondo Radio Account and associated data. Include the email address associated with your Rondo Account so our support team can identify your request. We may need to verify that you own the account before completing deletion. Do not send passwords, one-time codes, or authentication tokens by email. You do not need to reinstall the App to submit this request.

After successful account deletion, Fambridge deletes or irreversibly disassociates account-specific information that is no longer required for a legitimate legal or security purpose, including as applicable:

the Rondo account record;
linked Apple and Google identity mappings;
optional account email information held by Rondo;
synchronized Favorites;
active Rondo sessions and refresh credentials;
account-linked Membership entitlements and subscription associations held by Rondo; and
other account-specific cloud state.

Where required by an authentication provider, Rondo also performs the applicable provider authorization-revocation process.

Deleting a Rondo Account is not the same as signing out. Deleting a Rondo Account does not cancel an existing Apple App Store or other platform-store subscription; you must manage or cancel that subscription through the platform store to prevent future charges. The store may retain its independent billing records, and Rondo may retain limited non-account-linked notification or audit records for legitimate security, fraud-prevention, and legal purposes as described in Section 10.

For Listening Analytics, successful account deletion removes or irreversibly disassociates the deleted Rondo Account identifier from associated listening records, including relevant historical records, subject to applicable requirements. Pseudonymous App-level listening statistics may remain for legitimate analytics purposes without the deleted account association. Deleting a Rondo Account does not necessarily delete all local App data or every previously aggregated listening record. Applicable privacy rights and request options are described in Sections 11 and 14.

After account deletion, you can continue using Rondo without an account.

Information stored only locally on your device is not necessarily removed by deleting a cloud account. You can remove local App data using the controls available on your device or by removing the App.

12. Disclosure of Information

Fambridge may disclose personal information:

to service providers that need the information to provide services to Fambridge;
when you direct or authorize the disclosure, such as when you send a feedback report through an email or sharing service;
where reasonably necessary to investigate security abuse or protect Rondo, users, or others; or
where disclosure is required or permitted by applicable law, court order, or lawful governmental process.

Fambridge does not disclose personal information to data brokers or advertising networks for cross-service behavioral advertising.

13. Security

Fambridge uses administrative, technical, and organizational safeguards appropriate to the sensitivity of the information it processes.

These include measures such as:

encrypted network transport;
platform app-integrity mechanisms;
short-lived security and authentication credentials;
access controls;
separation of public catalogue functionality from private account data;
rate limiting and abuse prevention; and
minimization of credentials and sensitive information in logs and diagnostics.

No internet-connected service can guarantee absolute security. Fambridge reviews its security measures as part of normal service operation.

14. Your Privacy Rights and Choices

Depending on applicable law, you may have the right to:

ask whether Fambridge holds personal information about you;
request access to personal information held by Fambridge;
request correction of inaccurate or incomplete information;
withdraw consent where the processing is based on consent and withdrawal is legally available;
request deletion of information where applicable; and
challenge Fambridge's compliance with applicable privacy requirements.

Rondo also provides direct product controls for certain choices, including signing out and deleting a Rondo Account.

Fambridge may need to verify your identity before fulfilling a request concerning account-specific personal information.

If information cannot be provided, corrected, or deleted because of a legal requirement or another valid exception, Fambridge will explain the basis where required by law.

15. Children and Privacy

Rondo is a general-audience radio application and does not ask users to provide age, date of birth, or a child profile in order to listen to radio.

Fambridge does not knowingly solicit unnecessary personal information from children.

Where applicable law requires parental or guardian consent for a child's use of an account or other feature involving personal information, that consent must be obtained before the feature is used.

A parent or guardian who believes Fambridge has received a child's personal information without legally required consent may contact the Privacy Officer using the information below.

16. Changes to This Privacy Policy

Fambridge may update this Privacy Policy when necessary to keep the description of Rondo's actual privacy practices accurate or to comply with applicable law.

If a change materially affects the collection, use, or disclosure of personal information, Fambridge will provide notice and obtain consent where required by applicable law.

The effective and last-updated dates shown at the top identify this published version.

17. Privacy Officer and Contact

Fambridge is accountable for personal information under its control.

Privacy questions, access or correction requests, complaints, and other privacy inquiries may be directed to:

Privacy Officer
Fambridge Trading Inc.
Ontario, Canada
[email protected]

Fambridge will investigate privacy complaints and respond in accordance with applicable law.

You may also have the right to contact the privacy regulator responsible for your jurisdiction.