Privacy
No data collection##
Unplayed has no servers and no accounts. The developer never receives your library, your listening habits, your searches, or any personal information about you.
There is no analytics software, crash reporting service, advertising, or user tracking. To keep third-party music links working, the app periodically downloads static parsing rules from a distribution network. These requests carry no personal information, search queries, or library data. Unplayed operates no servers that receive or store your data.
This policy describes the Unplayed app for iOS.
Where your data lives##
Everything you add to Unplayed (releases, artwork, your Library, and your Played list) is stored in a database file on your device.
If you have Pro and turn on iCloud sync, that data is also stored in your own iCloud account, in what Apple calls a private CloudKit database. The Apple platform does not give app developers access to a user’s private database: your synced library is as reachable to the developer as your iCloud Photos are.
Delete the app and the local database goes with it. Turn off iCloud sync, or remove the app’s data in your iCloud settings, and the synced copy goes too.
What leaves your device##
Unplayed is not a sealed box. To do its job it talks to other services, directly from your device. The developer never sees those requests, but the services on the other end do.
Music platforms. When you add a release, search for music, or open a release’s details, Unplayed contacts the relevant platform’s public interface: Apple Music, Spotify, TIDAL, Deezer, YouTube Music, NetEase Cloud Music, Odesli (song.link), and Douban. Those requests carry your IP address along with the search terms or links involved. Each platform handles that under its own privacy policy, not Unplayed’s.
Cover artwork. Album art is downloaded from the platforms’ image servers. Fetching an image exposes your IP address to that server, the same way loading any image on the web does.
Apple. Three parts of the app go through Apple:
- Apple Music search queries the Apple catalog directly via public REST endpoints. It does not require or request permission to access your personal music library, listening history, or playlists.
- Purchases are handled entirely by Apple. Apple processes the payment; the developer receives no card number, no billing address, and no name, only an anonymous confirmation that a purchase is valid.
- CloudKit is used for two purposes: fetching public app configuration (such as Apple Music catalog credentials, with no personal data involved), and private iCloud sync (for Pro users, stored in your personal account as described above).
Handling of all three is governed by the Apple privacy policy.
Your rights##
Because the developer holds no personal information about you, there is nothing to show you, correct, export, or delete. Your data is on your device and in your iCloud account, both under your control.
This holds equally under Hong Kong’s Personal Data (Privacy) Ordinance, the EU and UK GDPR, and the California Consumer Privacy Act. Unplayed does not sell or share personal information, because none is collected or held. If you believe otherwise, write to the developer to look into it.
Children##
Unplayed is not directed at children, and it does not knowingly collect anything from anyone of any age.
Changes##
If this policy changes, the date at the top changes with it. There is no separate notification, because Unplayed has no way to contact you.
Contact##
Unplayed is made by an individual developer based in Hong Kong SAR.
Questions about this policy: i@heyshigeru.com