Privacy & Local-First Principles

App telemetry

Nothing. Decaud has no analytics or telemetry of any kind. We cannot see what you play, what you own, or how you use the app. The app works fully offline.

Website download records

When you request a Decaud DMG from this website, our CloudFront edge records the date and time, requested installer filename, IP address, browser or download client, approximate edge location, and any byte-range request used to resume a download. We use these records only to estimate download counts and client mix, understand rough geography, and diagnose abuse or delivery problems.

We do not log cookies, query strings, ordinary page views, or activity inside the app. Raw download-request records are automatically deleted after 90 days and are not linked to a name, email address, account, payment, or music library. Aggregate counts may be retained. We do not sell or use this information for advertising.

Where your library lives

Your music files stay in your folders, on your disks and network shares, unless you explicitly move them (the two ways audio can reach iCloud are listed below, and both are actions you take, never defaults). Decaud's library database (titles, tags, ratings, play counts, artwork) is a local file on your device. Folders added from an external drive are indexed and played in place; nothing is copied off the drive. Deleting the app's data deletes the database; nothing is retained anywhere else.

iCloud sync (optional, off by default)

Two different things can involve iCloud, and only the first ever happens by a setting:

• Library sync (the catalog). If you turn it on, Decaud stores your library metadata and cover thumbnails in your own iCloud account (via Apple's CloudKit) so your devices stay in step. No audio is involved. That data is between you and Apple; we have no access to it. Turning sync off, or using "Reset iCloud Library", removes the synced catalog.
• Audio files (explicit actions only). "Import to iCloud" and "Send to iPhone" copy the specific files you choose into your own iCloud Drive, where they are ordinary files under your control. "Reset iCloud Library" does not touch them; remove them like any other file in iCloud Drive. Importing to iCloud may free the local copy after upload, the way iCloud Drive manages any file.

Online metadata lookups (opt-in, per feature)

These features contact third-party services only when you use them, and only with text or an audio fingerprint, never your audio, never your identity:

• Discogs — album/artist text searches for tags, covers, artist photos, and discographies.
• MusicBrainz — text searches for tag matching, and CD identification by disc table-of-contents.
• AcoustID — "Identify by Sound" sends a compact acoustic fingerprint (not audio) to find a match.
• LRCLIB — synced lyrics looked up by title, artist, album, and length.

Results are cached on your device. Each service sees a normal web request (including your IP address, as any website does) governed by its own privacy policy.

Local network features

SMB/NAS streaming, DLNA browsing and casting, AirPlay, and the iPhone remote all talk directly between your devices on your own network. Nothing is routed through us. The remote requires you to approve each new device on the Mac first.

Purchases

The App Store edition offers optional tips through Apple's in-app purchase system; Apple processes those and shares no payment details with us. The direct edition contains no in-app purchases; support links (Buy Me a Coffee, Bitcoin) open in your browser and are governed by those services' policies.

What we would need to change to break these promises

This page is written from what the app actually does. If a future feature ever needs to send more than described here, it will be opt-in, documented on this page before release, and default-off. "Local-first" is the design, not a marketing phrase.

Contact

Questions about this policy: open the support contact form.