Privacy Policy
Last updated: 13 October 2026
Daily Cast is operated by QUERY LLC, a Delaware limited liability company at 800 SE 4th Avenue, Suite 704, Hallandale Beach, FL 33009, United States. This policy explains what we collect, why we collect it, who else sees it, and what you can ask us to do about it.
For anything in this policy, including a request to delete your data, email [email protected].
What we collect
- Your email address, to sign you in and to send your sign-in links.
- The feeds you add — the RSS address, the name, and the category you assign to each.
- Your preferences: how long you want your briefing to be, and which voice reads it.
- Your first name (optional), if you give it during setup or in settings, so your Daily Cast Pro briefing can greet you. Free briefings don't greet you by name. Clear it any time.
- Your chosen briefing language, used to write and narrate your episodes in that language.
- Your chosen country (optional), used to pick the regional Spanish your episodes are written and narrated in and to suggest local outlets.
- An optional description of yourself and your interests, if you choose to fill it in so we can recommend feeds.
- Payment identifiers from Stripe: a customer ID and a subscription ID. When you start a checkout we also keep the Stripe Checkout Session ID for it, and a checkout reservation — an ID and a timestamp — that stops a second tab from starting a second subscription; we keep both until your next checkout replaces them, a subscription starts from that checkout, or you delete your account.
- When your episode audio was last accessed, used to pause generating new episodes for accounts that have gone inactive, and to resume automatically once you come back.
- The outlet names you search for when adding a source by name, kept without any link to your account after it's deleted.
- Where your account came from, if you arrived through a link that said so: two campaign labels — a source such as
ivooxorfriends, and a medium such aspodcastorreferral— each chosen from a fixed list we maintain, recorded once when you first sign in and never updated afterwards. Anything we do not recognise is stored asother, and anything malformed is not stored at all. Neither label is a cookie, and together they are the only thing your account stores about how you found us. A campaign tag, or the code in a personal invite link, can appear in the web address you followed, so it can appear in the ordinary access logs our hosting providers keep for every request (see the list of providers below); those logs are kept and deleted according to each provider's own operational retention policy, and we never use them to build a record of the pages you visit. - Usage events: that you requested or completed a sign-in, reached a setup step, added a feed, had an episode published, fetched an episode's audio, started a checkout, or started or ended a subscription, together with a few plain details: whether the account was new, which setup step you reached, whether you listened in a podcast app or on the web, monthly or yearly, whether you used a friends-and-family offer, whether a trial was involved, and, on the sign-in event, the two campaign labels above (
signup_sourceandsignup_medium, orunattributedwhen there are none). They are linked to an internal account ID — never your email, name, feeds, or searches — and we use them, on the basis of our legitimate interest in knowing whether Daily Cast works, only to count and compare these steps. Email [email protected] to opt out. - Cookieless visit counts on this website: the page viewed, the site that referred you, campaign tags in the link, and technical details of your browser: its type and version, the full user-agent string, device type, operating system, language, time zone, and screen size. To count unique visitors without storing anything on your device, our analytics provider computes a daily-changing code from your IP address and browser details on its servers; your IP address is not kept, and no location is derived from it. Because this code changes daily and is never tied to your account, we cannot single out your visits, so they cannot be excluded individually. When you tap a sign-up or sign-in button that leads to the app, we also count that tap (
cta_clicked) with the same details as a page view, plus two fixed values: which button it was (placement, a label such asheroorfooter-signin) and the page language (page_language,enores). We never record the link's own address or text. We compare the number of taps with the number of sign-ups overall; a tap is not tied to any individual's later sign-up. - Whether you started a friends-and-family trial (so we can cap how many invites are used) and, from Stripe, your subscription status and renewal date.
What we don't collect
- No passwords. Daily Cast signs you in with a link sent to your email. There is no password to store, and none to leak.
- No card details. Payments run through Stripe's hosted checkout. Your card number never reaches our servers.
- No advertising or cross-site tracking. No ad pixels, no tracking cookies, and nothing stored on your device to measure you.
What we generate
To build your briefing we fetch the articles published by the feeds you added, write a spoken script from them, and produce an audio file. We keep the script and the audio so past episodes stay playable in your feed.
Cookies
Three cookies, all strictly necessary and all HttpOnly,
Secure, and SameSite=Lax: session
keeps you signed in, lang remembers the language you
picked on the sign-in page before you have an account, and
friends remembers a friends-and-family invite link you
opened, for up to 30 days.
There are no analytics or advertising cookies. That is also why you will never see a cookie banner here — there is nothing to consent to.
Who we share it with
We use a small number of service providers to run Daily Cast. Each one receives only what it needs to do its job.
| Provider | What it does |
|---|---|
| Anthropic | Writes your briefing script |
| OpenAI | Writes your briefing script and ranks feed recommendations (and may read it aloud as a backup) |
| Fish Audio | Reads your briefing aloud |
| Supabase | Hosts the database holding your account, feeds, and episodes |
| Cloudflare | Stores your audio files and serves this website |
| Fly.io | Runs the application itself |
| Resend | Sends your sign-in emails |
| Stripe | Processes payments and holds your card details |
| PostHog | Counts website visits and in-app usage events (hosted in the EU) |
About AI processing
To write your briefing we send the text of the articles from your feeds to Anthropic or OpenAI, which write the script, together with your first name if you have given us one and you're on Daily Cast Pro, so the script can greet you. On the Free plan your name is not sent. Anthropic or OpenAI produces the script. Your description of yourself is not part of this. Once your script is written, we send its text to Fish Audio, which reads it aloud. On Daily Cast Pro it may include your first name, because it greets you.
If you filled in the optional description of yourself and your interests, we send it to OpenAI in a separate request, together with the names, topics, and descriptions of the feeds we might suggest, so the suggestions come back in the order most likely to suit you. Recommending feeds is the only thing it is used for.
When you search for a source by name instead of pasting its feed URL, the text you type is sent to OpenAI in its own request to help identify the outlet's website, along with your chosen briefing language and country when you've set one.
We never send your email address to Anthropic, OpenAI or Fish Audio. Apart from the first name you may have chosen to give us, none of these requests identifies you: Anthropic and OpenAI receive the text being worked on and nothing else that says whose it is.
We have turned off OpenAI's data-sharing setting for our account. Your content is not used to train or improve OpenAI's models. OpenAI keeps API inputs and outputs for up to 30 days to monitor for abuse, longer where the law requires it or where it is needed to protect against harm, and otherwise uses them only to return a result to us.
Anthropic does not train its models on what we send it. Anthropic's commercial terms for its API do not allow it to train models on our content. Anthropic keeps API inputs and outputs for a limited period, which its published policy puts at up to 30 days, longer where needed to enforce its usage policy or to comply with the law, and otherwise uses them only to return a result to us.
How we protect it
- Your audio is never public. Episodes are served through links that expire after 15 minutes.
- Your feed link is private and revocable. Rotating it in settings immediately cuts off access to every past episode through the old link — an audio link handed out just before you rotated still plays until it expires, within 15 minutes.
- Sessions expire after 30 days without use, and you can sign out of every device at once from settings.
How long we keep it
We keep your account, your feeds, your episodes, and their audio for as long as your account exists.
To delete your account, use the delete button in settings. Deletion is immediate and permanent: your account, your sources, your episodes, and their audio files are all removed, and any paid subscription is cancelled. You can also email [email protected] and we will do it for you within 30 days.
After deletion we keep one record of the deletion with no direct identifiers: the month the account was created, the month it was deleted, how many sources and episodes it had, whether it was a paid account, whether it had used a friends-and-family trial, and the two campaign labels describing where the account came from. It contains no name, email, feed link, or anything from your feeds or episodes.
Deleting your account also asks our analytics provider, PostHog, to delete your usage events. PostHog removes them in its own periodic deletion runs, which can take a few weeks.
Your rights
If you are in the United Kingdom or the European Economic Area, the GDPR gives you the right to see the personal data we hold about you, correct it, delete it, take a copy of it elsewhere, or object to how we use it. Email [email protected] and we will respond within one month.
We handle your account, your feeds, and your episodes because we have to in order to run the service you signed up for. The optional description of yourself and your interests is different: we use it only because you chose to give it to us, and you can take that back at any time by clearing it or by emailing us to have it removed. Usage events and website visit counts are different again: we process them on the basis of our legitimate interest in knowing whether Daily Cast works, and you can object to usage events at any time by emailing us.
All the providers listed above are based in the United States. Except for PostHog, which keeps our analytics data in the European Union, they store your data there, so if you are in the United Kingdom or the European Economic Area your personal data is transferred out of it and stored in the United States. If you think we have handled your data badly, you can also complain to the data protection authority in your country.
If you are in California: the CCPA applies to businesses above revenue and volume thresholds we do not currently meet, so we are not subject to it. Either way — we have never sold or shared personal information, and we have no plans to.
Children
Daily Cast is not intended for anyone under 16.
Changes
If we change this policy in a way that affects you, we will email you before it takes effect.