Privacy policy
In short
- To listen, you do not need to sign up. On first use the app creates a guest account — a random identifier, with no name or email — to hold your coins, your unlocked episodes and your subscription.
- To buy coins or subscribe, you need to create an account with an email and password. That is all we ask for: never your real name, phone number or date of birth. The password is kept by Google's Firebase Authentication in encrypted form — we never see it.
- The app has no ads and we do not sell data.
- We measure how the app is used (screens, episodes played, searches) to understand what works and improve the product.
- The public name you choose, your comments and your reviews are visible to other people.
- To send notifications, we keep a delivery token for your device and your notification choices. Episode reminders start on; offers and promotions only arrive if you turn that option on, and it starts off. You can turn everything off under Profile › Settings › Notifications.
- You can delete your account and data inside the app at any time.
1. Who is responsible for your data
Empire FM: Audio Series ("Empire FM", "the app") is operated by DIGITAL DREAM NEGOCIOS DIGITAIS LTDA, a company registered in Brazil under CNPJ 24.378.761/0001-40, located at Rua Alberto Cintra, 161, Sala 900, União, Belo Horizonte – MG, CEP 31160-370, Brasil. We are the data controller for the personal data handled by the app.
For any privacy matter, including contacting our data protection contact, write to desenvolvedor@ddmp.com.br.
2. What data we handle
2.1 Account
The first time the app opens with an internet connection, it creates a guest account: a random identifier with no name, email, phone number or password. That identifier is what links the device to your coin balance, the episodes you unlocked, your subscription and what you post. A guest account is all you need to listen.
To buy coins or subscribe, the app asks you to create an account with an email and password (or sign in to one you already have). That is what lets you get back what you paid for if you switch devices or reinstall the app. With an account, we handle:
- your email address;
- your password, which Firebase Authentication (Google) stores only in encrypted (hashed) form — we have no access to it;
- account information recorded by Firebase Authentication: whether the email has been confirmed, the sign-in method (email and password), the creation date and the date of the last sign-in.
When you create the account, the email is linked to your guest account: the identifier does not change, and your coins, unlocks and subscription stay where they were. We send an email to confirm the address; confirming it is not required to use the app. The email is used for you to sign in, to reset your password ("Forgot your password?") and for us to answer requests about the account — we do not send marketing by email. The email is kept in Firebase Authentication: it is not stored in our database, is not shown to other users and is not sent to the usage measurement service or to RevenueCat.
If you sign in to an account that already existed on a device where you were using the app as a guest, what the guest account held (coins, purchases not yet credited, unlocked episodes, wait timers, public name and blocked authors) is moved to the account you signed in to, and the guest account is deleted. If the account you signed in to already had a public name, the comments and reviews made as a guest are deleted, and the app tells you.
2.2 Purchases, coins and subscription
- Coin balance and the history of coins added and spent (date, amount, pack purchased, series and episodes unlocked).
- Episodes unlocked in each series, the wait-for-free timer and the auto-unlock setting.
- Subscription status: plan, expiry date and whether renewal is on.
- Records of purchases made in the store (product, date, transaction identifier, price and currency).
Payment is processed by Google Play or the App Store. We never receive or store card details or any other payment method data.
2.3 What you post
- The public name you choose for commenting and reviewing.
- Comments on episodes and reviews of series (rating and text).
- Likes on comments, reports you file and the list of authors you blocked.
Your public name, comments and reviews are public: anyone using the app can see them. Do not post personal information about yourself or others. Your reports and your block list are not shown to other users.
2.4 App usage (measurement)
We record usage events: screens opened, series and episodes you open and play (start, progress milestones and completion), terms typed into search, locked episodes you reach, interactions with the subscription and coin screens, completed purchases, account creation, sign-in and password reset requests (only the method and whether it worked — never the email), the fact that a comment or review was posted (not its text), interactions with notifications (whether the app asked for permission and what the answer was, changes to the notification options and taps on reminders) and technical configuration errors.
These events come with technical information about the device: model, operating system, app version, language, country and approximate region (estimated from the IP address — the app does not use GPS and does not ask for location permission).
This measurement is tied to an app installation identifier generated by the analytics service. We do not send your account identifier to the analytics service.
2.5 Connection and security data
- IP address and the device and app information that accompanies any internet connection (for example, when the app requests an episode or checks your balance).
- An integrity check of the app and device, performed by Google (Play Integrity) or Apple (App Attest) services and used to protect our servers from abuse.
2.6 Notifications
To be able to send notifications, the app records, for each installation and linked to your account:
- the notification delivery token that Google's Firebase Cloud Messaging generates for this installation of the app;
- the device platform (Android or iOS), the app language and the narration language;
- your choices under Profile › Settings › Notifications: "Episode reminders" and "News and campaigns", on or off;
- the date this record was last updated, which the app rewrites when it opens.
The app also subscribes the installation to delivery groups by language in Firebase Cloud Messaging: one for alerts about episodes and series, while "Episode reminders" is on, and another for offers, promotions and news, only if you turn on "News and campaigns" — an option that starts off. Anyone with an active subscription is removed from the offers group.
Episode reminders — "episode unlocked for free", when the 12-hour wait ends, and "continue listening", 24 hours after you last listened to a series you have not finished — are scheduled on the device itself and do not go through our servers. They are not shown between 10 p.m. and 9 a.m. (device time) and there are at most 2 a day.
The system notification permission is only requested in context — for example, when you start a free wait, or if you tap "Turn on notifications" in Settings — and never the first time the app opens.
2.7 What stays on your device only
Listening progress, saved series, downloads and preferences (app language, narration language, notification choices) are stored on the device and are not sent to our servers — except for the languages and notification choices that go with the notification record described in 2.6.
The history of your choices about offers by notification also stays on the device only: each time you turn "News and campaigns" on or off, the app notes what was chosen, when, the version of the text shown on screen and the installation identifier. This history is the record of your consent and is kept even if you delete your account.
2.8 When you contact us
If you email us, we receive your email address and the content of your message, and use them to reply.
3. What we do not collect
- Real name, phone number, address, ID documents or date of birth. Your email is only asked for to create the account required to make purchases (2.1) — never to listen.
- Precise location, contacts, photos, files, camera or microphone — the app requests none of these permissions.
- Card details or other payment method data.
- Advertising data: the app has no ads and no ad network SDKs.
4. Why we use the data, and on what legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Keeping your account, balance, unlocks and subscription, and delivering audio | Guest account; purchases, coins and subscription; connection data | Performance of our contract with you (LGPD art. 7 V; GDPR art. 6(1)(b)) |
| Creating and maintaining the email account required to make purchases: signing in, resetting the password, confirming the email, restoring what you bought on another device and answering requests about the account | Email, password (encrypted, in Firebase Authentication) and account information | Performance of our contract with you (LGPD art. 7 V; GDPR art. 6(1)(b)) |
| Publishing and moderating comments and reviews | What you post; reports and blocks | Performance of contract, and our legitimate interest in keeping the community safe (LGPD art. 7 IX; GDPR art. 6(1)(f)) |
| Alerting you about episodes and series by notification (episode unlocked for free, continue listening, new episode or series) | Notification record (delivery token, languages, choices) | Performance of contract, and our legitimate interest in keeping you informed about what you already listen to (LGPD art. 7 V and IX; GDPR art. 6(1)(b) and (f)). You can turn it off anytime under Profile › Settings › Notifications |
| Sending offers, promotions and news by notification | Delivery token, app language and the "News and campaigns" choice | Your consent (LGPD art. 7 I; GDPR art. 6(1)(a)): only with the option turned on by you — it starts off — and revocable at any time under Profile › Settings › Notifications |
| Measuring usage and improving the app | App usage and technical device information | Legitimate interest (LGPD art. 7 IX). On devices whose region is set to a country in the European Economic Area, the United Kingdom or Switzerland: your consent (GDPR art. 6(1)(a)) — measurement stays off until you allow it |
| Protecting the service against fraud and abuse | Connection data, integrity check, purchase records | Legitimate interest (LGPD art. 7 IX; GDPR art. 6(1)(f)) |
| Meeting tax and legal obligations | Purchase records | Legal obligation (LGPD art. 7 II; GDPR art. 6(1)(c)) |
We do not use your data for automated decisions that produce legal effects on you, nor to build advertising profiles.
5. Who receives your data
We use service providers that process data on our behalf, for the purposes described above:
| Provider | What for | Data |
|---|---|---|
| Google (Firebase and Google Cloud) | Account (including the email and the encrypted password, in Firebase Authentication) and sending the confirmation and password reset emails, database, servers, remote configuration, integrity check, usage measurement, notification delivery (Firebase Cloud Messaging) and image hosting | Everything described in section 2, except what stays on the device only |
| RevenueCat | Validating purchases and tracking subscription status | Account identifier (not the email), purchase records, technical app and device information |
| Cloudflare | Delivering the audio files | IP address and technical connection information. Audio addresses do not carry your account identifier |
| Google Play and the App Store (Apple) | Processing payments, subscriptions and refunds | Your store account data, handled by the store itself under its own policy |
These providers' policies: Google, RevenueCat, Cloudflare, Apple.
In addition:
- Your public name, comments and reviews are visible to other users of the app.
- We may provide data to authorities when the law or a court order requires it.
- We do not sell your data and do not share it for advertising.
6. International transfers
The database holding your balance, your unlocks and what you post is hosted in Brazil (Google Cloud's São Paulo region). The other services — the account (including the email), usage measurement, notification delivery, RevenueCat and Cloudflare's delivery network — may process data in other countries, including the United States. These transfers rely on those providers' contractual data protection clauses.
7. How long we keep data
| Data | Period |
|---|---|
| Account, balance, coin history, unlocks and subscription status | For as long as the account exists. Deleted when you delete the account. |
| Email, encrypted password and account information | Until you delete the account: the Firebase Authentication user is deleted with it, and the email is no longer linked to any of our data. Signing out deletes nothing — the data stays in the account for when you sign in again. The guest account is deleted as soon as the move to the account you signed in to is complete (2.1). |
| Public name, comments, reviews, likes, reports you filed and blocks | Until you delete the item or delete the account. |
| Notification record (delivery token, languages and notification choices) | For as long as the installation and the account exist; it is rewritten when the app opens, and a new delivery token replaces the old one. Deleted when you delete the account — the app also leaves the delivery groups and invalidates the token. A token that stops being valid (for example, after you uninstall the app) stops receiving messages. |
| History of your choices about offers by notification | Stays on the device only (the last 100 changes), as the record of your consent, even after the account is deleted. It is not sent to our servers. |
| Usage measurement | Up to 14 months in the analytics service. It is not tied to the account identifier. |
| Server technical logs (which include IP addresses) | Normally up to 30 days. |
| Purchase records at the store and at RevenueCat | Kept even after the account is deleted, tied to a random identifier, for up to 5 years, to meet tax obligations and prevent fraud. Records held by Google and Apple follow their own policies. |
| The record that stops a purchase from being credited twice | Kept, but without the account identifier once the account is deleted. |
8. Your rights
Depending on where you live, data protection law gives you rights over your personal data. Under Brazil's LGPD, the EU/UK GDPR and similar laws these include the rights to: know whether we process your data; access it; correct it; have it erased; restrict or object to processing; receive it in a portable format; know who we share it with; and complain to a data protection authority (in Brazil, the ANPD; in the EU or UK, the authority of your country).
How to exercise them
- Delete account and data: in the app, under Profile › Settings › Privacy › Delete account and data. If the account has an email, the app asks for your password before deleting; the email and password are deleted with it. Details at Delete account and data.
- See the account email, reset your password or sign out: the email is shown under Profile, which is also where "Sign out" is; to change your password, use "Forgot your password?" on the sign-in screen. To change the account email — the app cannot do this on its own yet — write to desenvolvedor@ddmp.com.br from your current email.
- Delete one of your comments: on the comment itself, inside the app.
- Notifications: in the app, under Profile › Settings › Notifications, you turn "Episode reminders" and "News and campaigns" (offers and promotions) on or off. Turning "News and campaigns" off withdraws your consent immediately. You can also block all Empire FM notifications in your device's system settings.
- Other requests (access, correction, portability, objection): write to desenvolvedor@ddmp.com.br. We reply within 15 days.
To act on a request sent by email we need to locate the account safely. If it has an email, write from the account's email address. If you only use the app as a guest, we have no name or email linked to the account: send something that lets us locate it — for example, your public name and the series where you commented, or the order number of a purchase made in the app.
You can turn off usage measurement at any time in the app, under Profile › Settings › Privacy › Usage measurement. While it is off, the app stops sending usage events; your listening, your purchases and your account keep working normally.
On devices whose region is set to a country in the European Economic Area, the United Kingdom or Switzerland, usage measurement starts turned off: the app asks first, and only measures if you allow it. Your answer lives in the same place and you can change it whenever you like.
California residents
In the terms used by California law (CCPA/CPRA), we collect these categories of personal information: identifiers (the account identifier, the email address of accounts created to make purchases, installation and device identifiers, the notification delivery token, IP address), commercial information (purchases, coins and subscription), internet or app activity (usage measurement and search terms), approximate location derived from the IP address, and the content you post. We use them for the purposes listed in section 4. We do not sell personal information and do not share it for cross-context behavioral advertising. You have the right to know, delete and correct your personal information, and we will not treat you differently for exercising these rights. Use the channels above.
9. Children and teenagers
Empire FM is not directed to children. The catalog is fiction for adult audiences, with mature themes, and the app is intended for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has used the app, write to desenvolvedor@ddmp.com.br.
10. Security
All communication between the app and the servers is encrypted in transit (HTTPS/TLS). The account password is stored by Firebase Authentication only in encrypted form and never passes through our servers. Each account can only read its own balance and subscription data, and balance, unlocks and subscription are only changed by our servers, never directly by the app. No system is infallible; if we become aware of an incident that may pose a relevant risk to you, we will notify you as the law requires.
11. Changes to this policy
We update this policy when the app changes — as on October 9, 2026, when the policy started describing notifications (sections 2.6, 4, 5, 7 and 8) and the email and password account required to buy coins or subscribe (sections 2.1, 2.4, 3, 4, 5, 6, 7, 8 and 10). The version in force is always on this page, with its date at the top.
12. Contact
DIGITAL DREAM NEGOCIOS DIGITAIS LTDA · CNPJ 24.378.761/0001-40 · Rua Alberto Cintra, 161, Sala 900, União, Belo Horizonte – MG, CEP 31160-370, Brasil
Email: desenvolvedor@ddmp.com.br