Privacy Policy - Hype ID

Operated by Soundica. Effective 2026-10-14. Version 2.0.

These apps and soundica.app are operated by Soundica, an independent app publisher based in Singapore ("Soundica", "we"). Contact: admin@soundica.app.

Privacy contact and Data Protection Officer: admin@soundica.app

This policy explains what the Hype ID app (the "App") processes, why, and your choices. It applies to every version of the App, distributed through Google Play (phones and tablets), Google Play for cars (Android Automotive OS), and the Appning by FORVIA store in your vehicle. The general Soundica policy at soundica.app/privacy.html also applies; where the two differ, the more protective statement for you applies.

1. What we do not collect

• No account. You do not sign up, log in or give an email address.
• No advertising identifiers. The App does not read the Android Advertising ID.
• No analytics, crash-reporting or advertising SDKs.
• No sensitive permissions. No contacts, location, microphone, camera, SMS or call logs.

2. Data processed when you use the App

• News feeds. On the phone and Android Automotive versions, when the App refreshes, your device requests each publisher's public RSS feed directly. The publisher receives your IP address and the app's User-Agent and may log them under its own privacy policy. Examples of sources: Liputan6 Showbiz, Liputan6 Musik, Detik Hot, CNN Indonesia Hiburan, KapanLagi.com, Antara News Hiburan, Brilio Selebritis, and Google News query feeds. Social-media and user-generated-content sources are not used.
• Google News. On the phone and Android Automotive versions, the App also discovers headlines through Google News topic and region queries (public RSS feeds from news.google.com). Google receives the query, the app's User-Agent and your IP address, and handles them under its own privacy policy.
• Source list. On the phone and Android Automotive versions, at each refresh the App downloads its current list of news sources from soundica.app (hosted on Cloudflare). The request carries the app's User-Agent and, at the transport layer, your IP address, and nothing else.
• Head-unit feed. On Appning by FORVIA head units the App instead reads a pre-assembled feed from Soundica (Cloudflare R2 storage) and does not contact publishers directly. That request carries the file name, the app's User-Agent and your IP address.
• Preview images. When a story is shown, your device loads its preview image from the publisher's servers or CDN, which may log the request.
• Article image lookup (phone version). Many publisher feeds do not include a picture. To find one, the App sends the web addresses of the articles currently on screen to a Soundica image-lookup service (a Cloudflare Worker at img.soundica.app). The service fetches the article's public page, reads its standard preview-image tag and returns the picture's address; where a headline was discovered through Google News, the service first resolves the Google News link to the publisher's own address. The request contains only the article addresses, the app's User-Agent and, at the transport layer, your IP address. We do not attach any account, device identifier or reading history to the request. Resolved picture addresses are cached on the service for up to 30 days, keyed by the article address only; tracking parameters (utm, fbclid, gclid and similar) are stripped before caching. The image itself is downloaded by your device directly from the publisher; Soundica does not relay or store the picture. The Android Automotive and Appning by FORVIA versions do not use this service.
• Images and logos from the device. If Soundica's image service has no answer, your device fetches the article's public page or the publisher's site icon directly from the publisher. The App may ask Google (news.google.com) to resolve a Google News link to the publisher's address; Google receives that link and your IP address. Site icons may also be requested from Google's favicon service (t3.gstatic.com), which receives the publisher's web address and your IP address. Google handles these requests under its own privacy policy.
• Publisher logos. Most publisher logos are bundled inside the App. Where a logo is not bundled, the App may request it from a Soundica logo service (hype-id.soundica.app and img.soundica.app), which fetches the publisher's publicly available site icon, caches it on Soundica's edge network for up to 30 days and serves it to the App. The request contains the publisher's website address and, at the transport layer, your IP address. Logos are shown unmodified and only to identify the source of a headline.
• Opening a story. The App does not display publisher websites inside the App; tapping a story opens it in your browser, where the publisher's own privacy policy applies.
• Read-aloud (phone and Android Automotive). Speech is produced by the text-to-speech engine installed on your device. Soundica never receives the text or the audio, although the engine's vendor may synthesize on its own servers under its own privacy policy.
• Narration on Appning by FORVIA head units. These head units have no speech engine, so Soundica prepares narration in advance: a batch job sends the public headline and short excerpt (no user data) to Google's text-to-speech service and stores the audio on Cloudflare R2. The App streams these files like any other media; the request carries the file name, the app's User-Agent and your IP address. Narration uses computer-generated voices.
• Legal pages. The phone version shows the legal pages (this policy, the Terms and the licenses) from soundica.app in an in-app viewer when you open them. That page load passes your IP address to Cloudflare, which hosts the website.
• Sharing. The phone version lets you share a story's headline and link through Android's share sheet to an app you choose; nothing is sent to Soundica when you do.
• User-Agent. Requests carry an app User-Agent that identifies Soundica and contains no device identifier. Exceptions: when a publisher refuses an image request, the App retries it with a web browser's User-Agent, sending the article page as referrer; publisher logos and car artwork are requested with a generic browser User-Agent. None of these requests carries an identifier.

3. Soundica's server logs

When the App contacts one of Soundica's servers (img.soundica.app and hype-id.soundica.app), Cloudflare, our hosting provider, processes your device's IP address and the requested address (for image lookup, the web addresses of the articles on your screen). Soundica keeps these request logs for 3 days to find faults and prevent abuse; then they are deleted automatically. We do not combine them with other data or use them to identify you, and we do not attach any account, device identifier or reading history to a request.

4. Data stored on your device

The App keeps the following in its private storage on your device. It never leaves your device except as described in this policy:

• reading speed
• autoplay setting
• read-aloud (narration) toggle
• full-summary toggle
• language pool (id)
• per-category open counter (sorts category tiles most-read first)
• swipe hint flag
• Android Automotive settings copy (car versions only)
• feed cache per language
• article-image address cache (up to 3000 entries)
• source health and slow-feed lists
• publisher directory (outlet name to site)
• HTTP caches (RSS 12 MB, images)
• car logo tiles
• background-music temp file

When you move to a new phone, Android's device-to-device transfer may copy this data along with your other apps. Android shows the title and artwork of what is playing on the lock screen, in the notification and, in cars, in the media center. The operating system handles this; nothing is sent to Soundica.

5. Legal bases

• Content you request: delivering the content and playback you ask for in the App is necessary to perform our Terms (Art. 6(1)(b) GDPR).
• Running the service safely: hosting, security and fault logs, the image lookup, and the logo service rely on our legitimate interest in running a secure, working service and showing recognizable sources (Art. 6(1)(f) GDPR). We assessed the impact on you as minimal because no account or identifier is attached; request logs are deleted after 3 days.
• Email you send us: Art. 6(1)(f) GDPR, our interest in answering you.
• Right to object: you may object at any time to processing based on Art. 6(1)(f) by writing to admin@soundica.app.

6. Who receives data

These parties receive data when you use the App. Cloudflare acts for us; the others are independent and apply their own privacy policies.

7. International transfers

Soundica is based in Singapore. When your device contacts our servers, the request goes to Cloudflare's nearest data center, which may be outside your country. Cloudflare, Inc. processes it on our behalf under a data processing agreement that includes the EU Standard Contractual Clauses and the UK Addendum, and Cloudflare is certified under the EU-US Data Privacy Framework. Services your device contacts directly (listed above) receive the request wherever they operate, under their own policies. You can ask us for a copy of these safeguards at admin@soundica.app.

8. How long we keep data

• Soundica's server request logs: deleted automatically after 3 days.
• Cloudflare security logs: under Cloudflare's own retention policy.
• Image-lookup cache: up to 30 days, keyed by article address only (no personal data).
• Emails you send us: deleted 12 months after the conversation ends.
• Data on your device: until you uninstall the App or clear its storage in Android Settings.

9. Your rights

You may have rights to access, correct or delete your personal data and to object to some uses, depending on the law where you live. Outside the short-lived server logs described above, we hold no data linked to you, so most access and deletion requests are answered by that statement. Uninstalling the App deletes everything it stored on your device.

To exercise your rights, write to admin@soundica.app. We answer within one month. We do not make decisions about you based solely on automated processing, and we do not profile you.

California: in the last 12 months we collected identifiers (IP address) and internet activity (the content addresses your device requested) for the purposes above, from your device. We do not sell or share personal information, and we do not use or disclose sensitive personal information.

You may also complain to the data-protection authority where you live or work, for example: the ICO (UK); your national authority in the EU (list at edpb.europa.eu); the PDPC (Singapore); the Data Protection Board of India (after contacting us); the PIPC (Korea); the PPC (Japan); the OPC (Canada) or the CAI (Quebec); the ANPD (Brazil); the OAIC (Australia).

10. Children

Our apps are for a general audience. We do not knowingly collect personal data from children (under 13 in the US, under 14 in Korea, under 18 in India, under 18 in Indonesia, or the age set by local law). The apps have no accounts, ads, purchases or chat, and send no data about you to us beyond the technical requests described above. If you believe a child has sent us personal data (for example by email), contact us and we will delete it.

11. Regional information

• Indonesia. Our basis under Law No. 27 of 2022 on Personal Data Protection (UU PDP) is Art. 20(2)(b): performing the agreement you enter into by using the App. You can exercise your rights under that law by writing to admin@soundica.app.
• Brazil. Under the LGPD our bases are performance of a contract (Art. 7(V)) and legitimate interest (Art. 7(IX)). The privacy contact at the top of this page is our communication channel; you may also complain to the ANPD.

12. Security and permissions

Traffic to Soundica's servers is encrypted (HTTPS). Clear-text traffic is blocked at the OS level. Local data is kept in the App's private storage, isolated from other apps by Android.

Permissions by version:

• Phone: INTERNET (to load content from the internet); ACCESS_NETWORK_STATE (to detect whether you are offline or on a metered connection); FOREGROUND_SERVICE (to keep playback running as a foreground service); FOREGROUND_SERVICE_MEDIA_PLAYBACK (to show playback controls while audio plays); WAKE_LOCK (to keep playback running while the screen is off); POST_NOTIFICATIONS (to show playback controls in the notification shade, if you allow it).
• Android Automotive: INTERNET (to load content from the internet); ACCESS_NETWORK_STATE (to detect whether you are offline or on a metered connection); FOREGROUND_SERVICE (to keep playback running as a foreground service); FOREGROUND_SERVICE_MEDIA_PLAYBACK (to show playback controls while audio plays); WAKE_LOCK (to keep playback running while the screen is off); POST_NOTIFICATIONS (declared, but this version does not ask for it).
• Appning by FORVIA: INTERNET (to load content from the internet); FOREGROUND_SERVICE (to keep playback running as a foreground service); FOREGROUND_SERVICE_MEDIA_PLAYBACK (to show playback controls while audio plays).

13. Changes to this policy

If we change this policy, we will update the date and version above and keep a summary of changes at the end of this page. If a change materially affects how we process personal data, we will also announce it on soundica.app and, before it takes effect, in the App's release notes on Google Play.

14. Contact

Questions and requests: admin@soundica.app. Because our processing is occasional and low-risk, we have not appointed a representative in the EU or UK under Art. 27(2)(a) GDPR and the UK GDPR; contact us directly at admin@soundica.app. Related documents: Terms of Service, Licenses, soundica.app.

Version 2.0 (2026-10-14): New version: operator and privacy contact, server logs, every service contacted, recipients, transfers, retention periods, legal bases, rights and children.