Privacy Policy

This policy explains what the MIBL Radio website and the MIBL Tanin app collect, why, and your choices. We keep collection to the minimum needed to run the service and we do not sell your data.

What we collect

• Account — the username/email and password you register with, so you can sign in.
• Messages & calls — MIBL Tanin chats can be end-to-end encrypted; when they are, we cannot read their contents. Media you send is stored so it can be delivered. Voice/video calls are peer-to-peer (relayed via TURN only when a direct connection isn't possible); we don't record calls.
• Session cookie — a login token kept on your device to keep you signed in. In the MIBL Tanin app it lives only in the app's private storage and is excluded from device backups.
• Push token — a Firebase Cloud Messaging token so the app can wake for new messages and incoming calls. Our push payloads are content-free (no message text).
• Microphone & camera — used only during a call or when you record a voice message/photo, and only after you grant permission. Nothing is captured in the background.
• Basic technical logs — IP address and request logs, kept short-term for security and abuse prevention.
• Reading analytics (books) — when someone reads a published book we record a counter against the combination of book, chapter, day, two-letter country, and device type (mobile / tablet / desktop). We record no IP address, no cookie identifier, and no row per reader — the data is aggregated as it is written, so it can tell an author how many reads happened but can never reconstruct who read what, or follow one person through a book. Country comes from a header our CDN already attaches to every request; device type is read from your browser's user-agent string. Nothing here identifies you.
• Payments & wallet — your wallet balance, and a ledger of top-ups and purchases. Card details are entered on Stripe's own checkout page and never reach our servers.
• Paying as a guest — you can support an author or the platform without an account. Stripe collects your email at checkout and passes it to us so we can (a) create an account for you, so the content you paid for stays available, and (b) email you a one-time sign-in link. If you would prefer not to have an account created, do not use guest checkout — sign in first, or contact us to have the account removed.
• Guest stations — if you report a station, we store the reason, your note and a one-way hash of your IP address (used only to limit abuse). Your favourites and recently played stations stay in your own browser, not on our servers.

How we use it

• To operate the radio, the messenger, and calls.
• To deliver notifications you opted into.
• To keep the service secure (rate-limiting, anti-abuse).

Sharing

We share the minimum data necessary with a small number of service providers, only so specific features can work — never for sale or advertising:

• Stripe — processes wallet top-ups and subscription payments. We never see or store your full card number.
• Anthropic (Claude), Google (Gemini) and Groq — the AI services behind our translations, writing tools, the "Aria" assistant and support replies. Only what a feature needs is sent, and only for that job — for example Public Lobby messages being translated, song lyrics, track titles, video frames from Track Studio, a PDF you open in PDF AI, a bug report, a question to Aria or a support conversation. End-to-end encrypted private messages never reach any AI service: we do not hold their keys.
• Google Translate — live translation of page and message text when you select another language.
• AcoustID — audio fingerprinting for MIBL Tanin's Smart Copyright Shield when music is shared in chat.
• Google Firebase Cloud Messaging — delivers push notifications; payloads are content-free (see above).
• Replicate — runs our AI Pro tools (AI Image/Video Generation, AI Mastering, Vocal Separation, Upscale, and similar). Any prompt text, image, or audio file you submit to one of these tools is sent to Replicate to produce the result; we do not keep a permanent copy of your uploaded file once the job completes.
• Meta (Facebook, Instagram) and TikTok — we publish our own station's content to MIBL Radio's official pages: playlist summaries, artwork and station announcements. This is a one-way publication of material we created. No member's personal data, listening history, account details or messages are sent to these platforms, and we do not import anything from them. If you choose to follow or interact with us there, that interaction is governed by that platform's own privacy policy, not this one.
• Guest stations (third-party radio stations) — when you play one on the Guest stations page, your browser connects directly to that station's own server, which can see your IP address and that you are listening; the station's own privacy practices apply. We list stations using the Radio Browser community directory (radio-browser.info): our server downloads the station list from it and tells it when a station was played — the station only, nothing about you.

We do not sell your personal data or share it for advertising.

MIBL STUDIO and TikTok

MIBL STUDIO is the name under which MIBL Radio's apps are registered on TikTok for Developers. Its TikTok integration is operated only by MIBL Radio itself, to connect MIBL Radio's own official TikTok account (TikTok Login Kit) and to upload or publish MIBL Radio's own station content — artwork, playlist summaries and announcements — through TikTok's Content Posting API. MIBL STUDIO requests three permissions: user.info.basic (to show which TikTok account is connected), video.upload and video.publish (to upload and publish that content). We keep only the access token needed to post to that one connected account; we do not collect TikTok data about other TikTok users, and we do not sell or share it. You can revoke access at any time in TikTok (Settings and privacy → Security and permissions → Apps and services); on revocation the stored token stops working, and you can ask us at [email protected] to delete it.

MIBL Live Desk and your YouTube channel

Live Desk can, if you choose, connect to your YouTube channel through Google sign-in, as the app «MIBL Live Desk».

• What we access: one YouTube permission (youtube.force-ssl), used only to run your live broadcasts: every 11 hours we create the next broadcast on your channel with the same title, description, privacy setting and thumbnail, link it to your stream, and end the previous one so YouTube saves it as a video. We also read your channel’s name once, to show you which channel is connected.
• What we keep: one access token, encrypted on our server, and your channel’s name and ID. Nothing else from your account — videos, comments, analytics or personal details — is read, stored or shared.
• What we never do: sell this data, use it for advertising or to train AI, or give it to anyone.
• How to stop: press Disconnect on your Live Desk page — we revoke the access at Google and delete the token at once — or remove «MIBL Live Desk» on your Google Account permissions page (myaccount.google.com/permissions). Asking to delete your MIBL account removes the connection too.

MIBL Live Desk uses YouTube API Services. By connecting, you agree to the YouTube Terms of Service, and the Google Privacy Policy applies to what Google does with your data. MIBL’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What authors can see

If you read a published book, its author sees counts only — how many reads each chapter received, which countries readers came from, and the split between mobile, tablet and desktop. An author cannot see who you are, cannot see your IP address, cannot tell whether two reads came from the same person, and cannot follow an individual through their book. This is a deliberate limit in how the data is stored, not merely a restriction on what we display: the underlying records are aggregated counters, so the detail simply does not exist to be shown or leaked.

Your choices

• Sign out in the app's Settings clears your session on the device.
• Turn off notifications in your device settings at any time.
• To delete your account and associated data, see Account Deletion below.

Deleting Individual Messages or Chats

In the MIBL Tanin app or on the website, you can delete specific data yourself at any time, without deleting your whole MIBL Radio / MIBL Tanin account: long-press any message you sent and choose Delete to remove it, or open a conversation's menu and choose Delete Conversation to remove an entire chat thread and its media. These actions are immediate and permanent — no need to contact support.

Account Deletion

To delete your MIBL Radio / MIBL Tanin account, sign in and open Delete my account (also reachable from Settings in the MIBL Studio app), or email [email protected] from the address registered on your account with the subject line "Delete my account". We'll confirm the request and action it, normally within a few business days.

Deleted: your profile (username, email, display name), chat message history and media you sent, your uploaded Cloud Radio station content, and your session/push tokens.

Retained: any remaining AUD wallet balance is forfeited with no cash refund; some transaction/payment records may be kept for a period as required by tax, accounting, or other legal obligations. If instead you want your unspent deposit back, request account closure and a refund rather than deletion — see clause 1.4 of the Terms.

Children

The service is not directed to children under 13, and we don't knowingly collect their data.

Contact

Questions or deletion requests: [email protected].