Privacy Policy

Last updated 31 August 2026

Information we collect

None. There is no sign-up, no login, and no user account. No server of ours receives data about you, and the app contains no analytics, advertising, attribution or crash-reporting SDK of any kind.

We do run one server — the one serving this page — and the app can fetch a settings file from it. That request carries nothing about you, and it is described below rather than left out.

This is reflected in the app's privacy manifest, which declares no collected data types and no tracking. You can verify it on the App Store product page under App Privacy.

What is stored on your device

The app saves the following locally, on your iPhone only:

• Liked songs, playlists you create, followed artists, and recently played items
• The genres and artists you pick during setup, used to choose what appears on Home
• App preferences and a small cache of recent search terms and browse results

None of this is transmitted to us. It is removed when you delete the app.

The app uses Apple's UserDefaults to store these preferences. Apple classifies this as a required-reason API; our declared reason is CA92.1 — reading and writing user settings on the device itself.

Network requests

To find and play music, the app requests catalogue data, artwork and audio directly from third-party content servers. Those requests go from your device to those services; they do not pass through us, and we neither see nor log them.

As with any internet request, the operators of those services will see your IP address and what was requested, and handle it under their own privacy practices, which we do not control. Using a VPN or private relay affects what they see, and what our own host sees for the settings file below.

The settings file

BeatBytes can fetch a small configuration file from beatbytes.app when it starts. This is ordinary app plumbing: it holds the technical parameters the app uses to talk to the music services — the equivalent of a settings file — so that when one of those services changes something and playback breaks, we can fix it for everyone within minutes instead of asking you to wait for an App Store update.

It is the same file for every user and it contains nothing about you. The request sends no account, no identifier, no device ID and no information about what you are listening to. There is no body, no cookie and no login — it is a plain file download, the same as loading an image on a web page.

Because it is a normal HTTPS request, our host (Vercel) sees what any web server sees: the IP address the request came from, the time, and which file was asked for. We do not use those logs to build a profile, we do not link them to anything, and there is nothing in the request to link them to. Vercel retains them briefly for operational purposes under its own privacy policy.

Status: this fetch is not enabled in the current version — the app ships with the settings built in and makes no request to our server at all. This section describes it in advance so that switching it on is not a silent change. When it is enabled, this sentence will say so.

Tracking and advertising

The app does not track you across other apps or websites, does not request the App Tracking Transparency permission, and shows no advertising. There is no advertising identifier, no fingerprinting and no cross-app profile.

Data from the earlier version of BeatBytes

An earlier version of BeatBytes, removed from sale in early 2025, did have accounts and did store libraries on a server. We still hold that database, and it contains the email addresses of people who signed up for it. It is kept encrypted and offline, only so that anyone who asks can be told what their account held.

It is not connected to this app. This version never reads it, never writes to it, and cannot sign you in to it. Nothing in it is used for marketing, and it has never been sold or shared.

If you had one of those accounts and want your record deleted, email hello@beatbytes.app from the address you signed up with and we will delete it and confirm once it is done.

Children

BeatBytes is not directed at children under 13. This version collects nothing from anyone, of any age. The single exception to "we hold nothing" is the retired database described above, which you can have deleted on request.

Changes to this policy

If the app ever begins collecting data — for example if optional accounts are added in a future version — this policy will be updated before that version ships, and the change will be described here rather than made quietly.

Contact

Questions about this policy: hello@beatbytes.app.