Tunode Privacy Policy

Tunode is operated by Polyphasic Developers ("we," "us," or "our"), based in the United Kingdom. This Privacy Policy explains how Tunode handles information when you use the Tunode app for iPhone, iPad, Apple Watch and CarPlay.

For the product overview, visit the Tunode landing page.

Tunode connects to a music server that you choose and control. It also uses Google AdMob to display ads, Google's User Messaging Platform where Google says a consent form is legally required, Apple's App Tracking Transparency permission in the circumstances described below, and Apple StoreKit for the one-time Remove Ads purchase.

Summary

• Tunode sends requests directly to the Navidrome or compatible OpenSubsonic server you configure. Polyphasic Developers does not operate an account system or a Tunode backend for your music library.
• Tunode can send track title, artist, album and duration to LRCLIB when it looks up lyrics that your server does not provide.
• The free app displays ads supplied by Google AdMob. Advertising data is handled according to the consent and tracking choices available to you.
• A one-time Remove Ads purchase is processed by Apple and turns off banner and full-screen ads.
• Server details, preferences, downloaded music, artwork and caches are stored on your device. The server password is stored in the Keychain.

Your Music Server

Tunode is a client for a Navidrome or compatible OpenSubsonic server that you choose and control. It sends requests directly to that server to sign in, browse and search your library, stream or download audio and artwork, fetch lyrics, update favourites and ratings, and submit now-playing information and play scrobbles.

Requests include your username and a salted authentication token. If you explicitly enable legacy authentication, requests send the raw server password instead. Tunode permits a server address that uses HTTP, so traffic to a server configured that way may be unencrypted.

Information sent to your server is governed by the server operator's configuration and privacy practices. Polyphasic Developers does not receive your server credentials or music library through a Tunode backend.

Lyrics and LRCLIB

Tunode first checks your music server for lyrics. When a track has no lyrics there, Tunode may request lyrics from LRCLIB.

The LRCLIB request includes the track title, artist name, album name and duration. LRCLIB also receives ordinary connection data such as your IP address. Its handling of that information is governed by its own service and privacy practices. Polyphasic Developers does not operate LRCLIB.

Information We Collect

Permissions the app asks for

Tunode asks for the following only when you use the feature that needs it, and each request is shown by iOS with the app's own explanation.

• Tracking permission: For users without Remove Ads, Tunode may ask for tracking permission after Google's consent process permits ad requests and only while the permission is undetermined. If you decline, ads remain but Apple's advertising identifier is not made available to Google AdMob.
• Local network: Tunode requests local network access so it can connect to a music server on your local network.

App data stored on your device

Tunode stores your server address and username, app and playback preferences, download records and advertising consent state in app storage. Your server password is stored in the Keychain. Downloaded audio, artwork and caches remain in the app container. The iPhone can pass server details and the password to a paired Apple Watch through WatchConnectivity, after which the Watch stores the password in its own Keychain. StoreKit supplies the Remove Ads entitlement. Deleting the app removes its local app data, subject to Apple's backup and purchase systems.

Advertising and device data collected by Google AdMob

Tunode displays advertising supplied by Google AdMob, a service provided by Google LLC and, for users in the UK, EEA and Switzerland, Google Ireland Limited. To select, deliver, measure and report on ads, the Google Mobile Ads SDK and Google's advertising partners may collect and process information from your device, including:

• Advertising and device identifiers made available to the SDK, including Apple's Identifier for Advertisers (IDFA) if you allow tracking when asked
• Device information such as device model, operating system version, language, and country or coarse location derived from your IP address
• IP address and network information
• Ad interaction data such as ad impressions, clicks and view time
• App information such as the app identifier and app version
• Diagnostic and performance data relating to ad delivery, including crash and error data generated by the ads SDK

This information is collected by Google directly through its SDK. We do not receive the underlying identifiers or profiles. We receive only aggregated, non-identifying reporting from Google, such as total impressions, revenue and country-level breakdowns.

Advertising, Consent and Tracking Permission

Tunode is free to use and is funded by advertising. A one-time Remove Ads purchase is available, described below.

Where Google says a consent form is legally required, Tunode uses Google's User Messaging Platform to present it. You can use the choices offered in that form. The Google Mobile Ads SDK is started only after Google's consent system says ads may be requested.

For users without Remove Ads, Tunode requests Apple's App Tracking Transparency permission only after ads may be requested and only while the permission is undetermined. If you allow tracking, Apple's Identifier for Advertisers may become available to Google AdMob and ads may be personalised across apps. If you decline, the identifier is not made available through that permission. You can review the setting in iOS under Settings, Privacy & Security, Tracking.

Google AdMob and User Messaging Platform may process device identifiers, coarse location, product interaction, advertising data, performance data, crash data and other diagnostic data. The exact processing depends on your device, region, consent choices and tracking permission.

Google's handling of this data is governed by its own policies: Google Privacy Policy, how Google uses information from apps that use its services, and information about AdMob and user data.

Remove Ads Purchase

Tunode offers one non-consumable, one-time purchase that removes banner and full-screen advertising. The purchase is processed by Apple through the App Store. Polyphasic Developers does not receive your payment details.

Tunode asks StoreKit for product details, processes the purchase through StoreKit, checks the current entitlement and provides a restore option. The purchase does not unlock music features, content or capacity.

How Information Is Used

Tunode uses information to connect to the music server you configure, provide browsing and playback features, store your preferences and downloads, fetch fallback lyrics from LRCLIB, process the Remove Ads entitlement through StoreKit, and display and measure advertising through Google AdMob when ads are enabled.

Tunode has no separate analytics or crash-reporting SDK. Google AdMob's bundled software may process product interaction, performance, crash and diagnostic data as part of its advertising service.

How Data Is Shared

Tunode sends data to the music server you configure for the music functions you request. It sends track metadata to LRCLIB only when it requests fallback lyrics.

Google AdMob and Google's advertising partners process data to select, deliver, measure and report on ads. Apple processes App Store purchases, entitlement checks and restores through StoreKit, as well as standard distribution and crash-reporting features you may have enabled on your device.

Tunode does not use a Polyphasic Developers account system, CloudKit or iCloud for app data. Polyphasic Developers does not receive your server credentials or music library through a Tunode backend.

Legal Bases for Processing (UK and EU users)

Where UK GDPR or EU GDPR applies, processing needed to provide the app functions you request is based on performance of a contract. Processing needed to prevent fraud, measure aggregate ad performance and maintain security and reliability is based on legitimate interests where applicable. Advertising processing that requires consent is based on the choices collected through Google's consent system and Apple's tracking permission.

Data Retention

Data stored by Tunode on your device is retained until you delete it, delete the app, or overwrite it through normal use.

Advertising data collected by Google is retained according to Google's own retention schedules, described in the Google Privacy Policy linked above. We do not hold copies of that data.

Your Rights and Choices

You can:

• Restrict app tracking in Settings, Privacy & Security, Tracking
• Limit ad personalisation on your Google account through Google Ads Settings
• Change your advertising consent choice at any time from the app's privacy settings (UK, EEA and Switzerland)
• Manage or restore your purchase through the App Store and the app's Restore Purchases option
• Delete the app, which removes the app data stored on your device

Depending on where you live, you may also have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to lodge a complaint with a supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk). Because we do not hold identifiers that let us link advertising data to you, requests about that data are usually best directed to Google; contact us and we will help where we can.

If you are a California resident, we do not sell or share your personal information as those terms are defined under the CCPA/CPRA. Requests relating to data collected by Google's advertising services should be directed to Google.

Children

Tunode is not directed to children under 13, and we do not knowingly collect personal information from children. The app is not designated as a child-directed app for advertising purposes. If you believe a child has provided personal information through the app, contact us and we will review the request.

Security

We use reasonable measures appropriate to the app's design to protect the information Tunode handles. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

International Transfers

Google and Apple operate globally and may process data outside your home country, including in the United States. Where personal data is transferred out of the UK or EEA by those providers, they are responsible for using an approved transfer mechanism such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses. Details are set out in their respective privacy policies.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, provide additional notice in the app or on this page.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact [email protected].

Polyphasic Developers, Lincoln, United Kingdom.