Podcode
Sign in

Podcode - Privacy Policy

Last updated: August 21, 2026

This Privacy Policy explains how Elledyne Labs, Inc., a Delaware corporation doing business as Podcode ("Elledyne Labs," "we," "us"), collects, uses, and shares personal information when you use our application, websites, and services (the "Service"). Elledyne Labs owns and operates Podcode and is responsible for the personal information described in this Policy. This Policy is incorporated into our Terms of Service.

For the purposes of the EU and UK General Data Protection Regulation ("GDPR"/"UK GDPR"), Elledyne Labs is the controller of the personal information described here. Our contact details are in Section 12.

1. A Note on How Podcode Is Designed

Podcode is built to keep your most sensitive material on your own systems:

  • Podcode's servers do not receive or store your source code, file contents, or prompts.
  • For model providers you connect with your own keys, your prompts and code are transmitted from your device directly to the provider you selected and directed - Podcode does not relay them through its own servers.
  • We do not use your code, file contents, or prompts to train any model.
  • Your third-party provider API keys are stored locally on your device and are not transmitted to or stored by Podcode's servers. (Keys are currently stored in a local configuration file on your device; migration to your operating-system keychain is planned.)

When you use GPU compute that you provision through the Service (for example, a RunPod pod), data may transit infrastructure operated by that provider under your account and its policies. The personal information that Elledyne Labs processes is described below.

2. Information We Collect

a. Account information. When you register, we collect your name, email address, and authentication credentials, processed through Google Firebase Authentication. If you sign in with Google, we receive basic profile information from Google.

b. Billing information. The Service is currently free and we do not currently collect payment information. If we introduce paid plans, payments will be processed by our payment processor, Stripe, which will collect your payment details directly; we do not expect to store full payment-card numbers.

c. Usage data. Other than the account information above and the analytics described in Section 2(d)/Section 9, we do not collect usage or session metadata on our servers. Any in-app metrics you see (such as token counts or spend) are computed and shown locally on your device and are not sent to Elledyne Labs.

d. Analytics. We use Google Firebase Analytics to understand general, aggregated usage of the Service. Firebase Analytics collects standard analytics data (such as app/page events, approximate location, and device and identifier information) but not the contents of your files, code, or prompts. See Section 9 regarding cookies and your choices.

e. Diagnostic and crash data. We do not currently collect crash reports or diagnostic logs automatically. If we later offer a way to submit logs to help us debug an issue, it will be voluntary and opt-in - logs will be sent only when you choose to send them, and we will disclose what they include at that time.

f. Communications and support. If you contact us (e.g., via the contact form or email), we collect your name, email, and the contents of your message.

We do not knowingly collect special-category data, and you should not submit it through the Service.

3. How We Use Information

We use personal information to: provide, operate, secure, and maintain the Service; authenticate accounts; understand aggregate usage and improve the Service; provide support and respond to inquiries; detect and prevent fraud, abuse, and security incidents; and comply with legal obligations and enforce our Terms. (If we introduce paid plans, we will also use information to process payments and manage subscriptions.)

4. Legal Bases (GDPR / UK GDPR)

Where GDPR or UK GDPR applies, we rely on these legal bases:

  • Performance of a contract - to provide the Service you request and manage your account.
  • Legitimate interests - to secure, maintain, and improve the Service and prevent abuse, balanced against your rights.
  • Consent - where required, e.g., for analytics cookies (you may withdraw consent at any time).
  • Legal obligation - to comply with applicable law.

5. How We Share Information

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as that term is defined under the CCPA/CPRA. We share personal information only as follows:

  • Service providers (processors) who act on our behalf and under contract - namely Google (Firebase Authentication and Firebase Analytics) and our hosting provider, and, if we introduce paid plans, Stripe (payments).
  • Third-party providers you connect - when you connect a model or compute provider, your interactions with that provider are governed by their privacy policy; they are independent controllers of that data.
  • Legal and safety - to comply with law, respond to lawful requests, or protect the rights, safety, and property of Elledyne Labs, our users, or others.
  • Business transfers - in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

6. International Data Transfers

We are based in the United States and process information there. If you access the Service from the EU, UK, or elsewhere, your information may be transferred to and processed in the United States and other countries that may have different data-protection laws. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), including those incorporated into Google's and Stripe's data-processing terms.

7. Data Retention

We retain your account information for as long as your account is active and until you delete your account or request deletion, after which we delete or anonymize it within a reasonable period (subject to legal retention requirements). Firebase Analytics data is retained according to the retention period configured in our Firebase settings. Support communications are retained as needed to handle your request and for our records.

8. Your Privacy Rights

a. EU/UK (GDPR / UK GDPR). Subject to conditions and exceptions, you have the right to access, rectify, erase, restrict, and port your personal data; to object to processing based on legitimate interests; to withdraw consent; and to lodge a complaint with your local supervisory authority (in the UK, the ICO).

b. California (CCPA/CPRA). California residents have the right to know/access, delete, and correct personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising your rights.

c. Other U.S. states. Residents of certain other states may have similar rights; we honor applicable state privacy laws.

d. Automated decision-making. Elledyne Labs does not use your personal information to make decisions based solely on automated processing that produce legal or similarly significant effects concerning you (GDPR Art. 22). Agents act on materials, and within scopes, that you direct and approve.

To exercise any right, contact us at service@podcode.io. We will verify your request as required by law and respond within the timeframes the law requires - generally within one month under the GDPR/UK GDPR (extendable by two further months for complex requests) and within 45 days under the CCPA/CPRA (extendable by a further 45 days). You may use an authorized agent where the law permits.

9. Cookies, Tracking, and Your Analytics Choices

Our website uses browser storage for two purposes:

a. Essential authentication. Signing in stores your session in your browser (via Firebase Authentication). This is strictly necessary to provide the Service, does not require consent, and is unaffected by your analytics choice below.

b. First-visit record (no consent required; legitimate interest). The first time a browser loads our site, our server records a one-time note that a new visitor arrived — your IP address and the approximate location derived from it (city/region), your landing page, referrer, browser, language, and timezone. This is a single server-side record (similar to an ordinary server log), used only so we know when new visitors find the site; it is not used for advertising and contains no persistent tracking identifier unless you have approved analytics. A small flag is stored in your browser so we do not record the same browser twice.

c. Analytics — only with your consent. When you first visit, we ask before enabling analytics, and no analytics runs or is stored until you approve. If you approve, we enable Google Firebase Analytics (which sets analytics cookies such as _ga) and store a random analytics identifier in your browser. If you decline, none of this happens, and anything stored under a previous approval is deleted from your browser.

Withdrawing consent is as easy as granting it: use the "Manage analytics consent" control at the bottom of this page at any time. Turning analytics off stops collection immediately and deletes the analytics identifier and cookies from your browser. You can also control cookies through your browser settings.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including the local key-storage design described in Section 1. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials. (We do not claim any formal security certification, such as SOC 2, that has not been completed.)

11. Children's Privacy

The Service is not directed to anyone under 18, and you must be at least 18 to use it (see Terms of Service §1). We do not knowingly collect personal information from anyone under 18, and in no event from children under 13 (or the minimum age of digital consent in your jurisdiction). If you believe someone under 18 has provided us personal information, contact us and we will delete it.

12. Contact Us, and EU/UK Representative

Elledyne Labs, Inc. Privacy requests: service@podcode.io

EU/UK Representative. We have not appointed an EU or UK Representative under GDPR/UK GDPR Art. 27. If we begin to actively offer the Service to individuals in the EU or UK such that a Representative is required, we will appoint one and update this Section.

13. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice where required. Your continued use of the Service after changes take effect constitutes acceptance.

Manage analytics consent
You have not made a choice yet in this browser.

Turning analytics off stops all collection immediately and deletes the analytics identifier and cookies from this browser. Signing in and using your account are unaffected either way.