Privacy Policy for Cloud Songs

Last updated: September 8, 2026

The Short Version

Cloud Songs does not collect your personal data. There is no account to create,
no analytics SDK, and no advertising. Your music library, listening history and
AI-generated recommendations stay on your device.

We know every privacy policy says something like this. The difference here is
that it is structurally true: Cloud Songs has no backend server of its own.
There is nowhere for your data to be sent.

1. Information We Do Not Collect

Cloud Songs contains no analytics, tracking, attribution or crash-reporting
SDK. Specifically, we do not collect:

• Your name, email address, phone number or any account identifier
• Your listening history, play counts or favourites
• Your device identifiers (IDFA/IDFV), advertising ID or location
• Crash logs, usage sessions, screen views or feature-usage events
• The contents, filenames or folder structure of your music library

We do not create a user account, because the app does not have a server that
could hold one. We do not ask for the App Tracking Transparency permission,
because we do not track you across apps or websites.

2. Information Stored On Your Device

The following stays in the app's private container on your iPhone or iPad. It
is never transmitted to us:

All of this is removed when you delete the app. You can also clear it from
within the app at any time via Settings → Storage → Clear All Data.

Cloud credentials

Access tokens for your cloud drives are stored in the iOS Keychain using
kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly. That flag matters: it means
the tokens are not synchronised to iCloud Keychain and therefore never leave
the individual device they were created on. We never see these tokens.

3. On-Device AI

Cloud Songs generates mood tags, smart playlists and personalized
recommendations using Apple's on-device Natural Language framework
(NLEmbedding).

This processing happens entirely on your device. No song titles, artist names,
listening habits or derived recommendations are sent to us or to any third
party for analysis. There is no server-side model and no inference API.

4. Network Connections

Cloud Songs connects to the internet only for the purposes below. In every case
the connection is between your device and that third party directly — it
does not pass through any server operated by us.

4.1 Your cloud storage providers

When you connect a drive, the app talks to that provider's official API to list
folders and stream or download your files. Depending on which services you
choose to connect, this may include:

Dropbox, Google Drive, Microsoft OneDrive, Box, Yandex Disk, Aliyun Drive
(阿里云盘), Baidu Netdisk (百度网盘), Quark Drive (夸克网盘), 115, and any
OpenList/Alist or WebDAV server you configure yourself.

Authentication uses OAuth where the provider supports it, so your password is
entered on the provider's own page and is never visible to the app. Your use of
these services is governed by their respective privacy policies.

4.2 Music metadata (optional, Pro)

If you use the automatic metadata feature, the app sends the song title,
artist and album name to look up matching information:

• MusicBrainz (musicbrainz.org) — open music database, CC0 licensed
• Cover Art Archive (coverartarchive.org) — album artwork

4.3 Lyrics (optional, Pro)

If you use the online lyrics feature, the app sends the song title, artist,
album name and track duration to LRCLIB (lrclib.net), a public-domain
lyrics database that requires no API key or account.

4.4 Subscription processing

Purchases are handled by Apple and by RevenueCat, our subscription
infrastructure provider. RevenueCat receives a randomly generated anonymous
user ID together with your purchase receipt in order to validate your
subscription. It does not receive your name, email address or anything about
your music. See https://www.revenuecat.com/privacy.

4.5 Local network

To find AirPlay speakers and to receive files over Wi-Fi transfer, the app
browses your local network using Bonjour and can run a temporary local HTTP
server. This traffic never leaves your local network. iOS will ask for your
permission the first time.

What we deliberately do not send

Requests to the metadata and lyrics services above contain only the text fields
listed. They do not include a device identifier, an account ID, your IP-linked
profile, your library contents, or which songs you actually played. Those
services cannot build a profile of you from what we send, because we send one
song's text at a time with no stable identifier attached.

5. What Leaves Your Device — Complete Summary

That table is the whole list. Nothing else is transmitted.

6. Children's Privacy

Cloud Songs is rated 4+ and does not knowingly collect personal information
from anyone, including children under 13. Since we collect no personal data at
all, there is nothing for us to delete on request — but see Section 8 if you
want to clear the data held on your own device.

7. Data Retention

We retain nothing, because we receive nothing. Data stored on your device is
retained until you delete it or uninstall the app.

RevenueCat retains purchase records for as long as needed to service your
subscription, per their own policy.

8. Your Rights and Controls

Because we hold no personal data about you, there is no data-access or
data-deletion request to make of us. You remain in full control of what is on
your device:

• Clear everything: Settings → Storage → Clear All Data
• Disconnect a cloud drive: Sources → select the drive → Disconnect
  (removes its Keychain token immediately)
• Stop all metadata/lyrics lookups: disable them in Settings
• Revoke cloud access entirely: use the security settings of the provider
  in question (e.g. Google Account → Third-party apps)
• Remove everything at once: delete the app

If you are in the EEA, UK, California or another region with statutory data
rights, those rights are satisfied by the above — we are not a data controller
for any personal data, because none is transmitted to us.

9. Changes to This Policy

If this policy changes materially we will update the "Last updated" date and
note the change in the app's release notes. Continued use after an update
constitutes acceptance.

10. Contact

Questions about this policy:

Email: cmtiger2018@gmail.com

Appendix: App Store Privacy "Nutrition Label"

For App Store Connect → App Privacy, the correct answer is:

Data Not Collected — We do not collect any data from this app.

This applies as long as no analytics SDK is added. Note that RevenueCat's
purchase validation does not constitute collection by the developer under
Apple's definition, since the anonymous ID is not linked to a user identity.

If you ever add analytics, this answer must change. Filing "Data Not
Collected" while shipping a tracking SDK is grounds for removal from the App
Store.