This Privacy Policy describes how Melody ("we", "us", "our", or "the App"), collects, uses, and shares information about you when you use our mobile application Melody (the "Service").
By installing or using Melody Music, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the App.
---
## 1. Information We Collect
### 1.1 Information You Provide Directly
We do not require account registration. However, you may optionally provide:
- **Last.fm credentials** — only if you choose to enable Last.fm scrobbling. The authentication is performed through Last.fm's own browser-based login. We store only the resulting session token on your device — we never see or store your Last.fm password.
- **Search queries** — stored locally on your device to power search history and suggestions.
### 1.2 Information Stored Locally on Your Device
The following information is stored **only on your device** and never transmitted to our servers:
-Your music library scan results (file paths, metadata such as title, artist, album, duration)
- Playlists you create, including "Liked" songs
- Listening history (which tracks you played and when)
- Search history
- Songs you've saved for offline playback
- App preferences (theme, equalizer settings, crossfade duration, language, etc.)
You can clear all locally stored data at any time by clearing the app's data through Android Settings.
### 1.3 Information Automatically Collected by Third-Party Services
When you use Melody Music, the following information may be collected by integrated third-party services (see Section 4 for details):
- **Advertising ID (Android AAID)** — used by ad networks for ad personalization and fraud prevention.
- **IP address** — used to approximate your country and serve relevant ads.
- **Device information** — device model, OS version, language, screen size, mobile carrier, network type.
- **App interaction events** — which ads you viewed, clicked, or dismissed.
- **Approximate country** — derived from your IP via third-party country-lookup services (ip-api.com, ipwho.is, ipapi.co, api.country.is) to set a default content region.
We do not collect your precise location, contacts, calendar, photos, microphone audio, or any other sensitive personal information.
---
## 2. How We Use the Information
We use the information described above to:
- Play, organize, and manage music on your device
- Display playback notifications and media controls
- Provide search, recommendations, and "related songs" suggestions
- Save your playback and download history locally
- Serve ads through our ad partners (free version)
- Diagnose crashes and improve app stability
- Comply with legal obligations
---
## 3. Permissions We Request
| Permission | Purpose |
|---|---|
| Read media audio / storage | Scan and play your local music library |
| Internet | Stream music, download tracks, serve ads |
| Notifications | Show now-playing playback controls |
| Foreground service / media playback | Keep music playing in the background |
| Wake lock | Prevent the device from sleeping during playback |
| Advertising ID (AD_ID) | Required for ad serving and frequency capping |
You can revoke any permission at any time through your Android Settings. Note that revoking storage or audio permissions may prevent the App from functioning correctly.
---
## 4. Third-Party Services
Melody uses the following third-party services. Each has its own privacy policy that governs how it handles your data.
### 4.1 Advertising Partners
| Service | Purpose | Privacy Policy |
|---|---|---|
| AppLovin MAX | Ad serving and mediation | https://www.applovin.com/privacy/ |
| Meta Audience Network (Facebook) | Ad mediation network | https://www.facebook.com/about/privacy |
These ad partners may collect your Advertising ID, IP address, device information, and ad-interaction events to serve and measure ads.
### 4.2 Optional Integrations
| Service | Triggered When | Privacy Policy |
|---|---|---|
| Last.fm | You enable Last.fm scrobbling | https://www.last.fm/legal/privacy |
### 4.3 Country Detection
To set a sensible default region for music recommendations, the App makes a single API call on first launch to one of the following services. No personal data is sent — only your IP-derived country code is returned:
- ipwho.is — https://ipwho.is/
- api.country.is — https://api.country.is/
- ipapi.co — https://ipapi.co/privacy/
- ip-api.com — https://ip-api.com/docs/legal
### 4.4 User-Installed Plugins
Melody includes a plugin system that lets you connect to third-party online music catalogs. These plugins are **not provided by us** — they are installed by you from URLs you choose. When you use a plugin, your device communicates directly with that plugin's hosted servers. We do not control, store, or have visibility into the data exchanged between your device and these third-party services.
You are responsible for reviewing the privacy practices of any plugin you install.
---
## 5. Sharing of Information
We do not sell your personal data. We share information only as described below:
- **With advertising partners** — to display and measure ads
- **With analytics partners** — only those listed above and only for the purposes stated
- **When required by law** — to comply with legal obligations, court orders, or government requests
- **In the event of business transfer** — if our app is acquired or merged, your data may transfer subject to this Privacy Policy
We do **not** share your local listening history, playlists, or library with anyone.
---
## 6. Data Retention
- **Local data** (playlists, history, downloads) — retained on your device until you delete it or uninstall the App.
- **Ad-network data** — retained according to each ad partner's policies (typically 12–24 months).
- **Country detection** — only the country code is stored on your device; no record is kept by us.
---
## 7. Your Rights and Choices
### 7.1 Universal Rights
You can at any time:
- Clear the App's data through Android Settings → Apps → Melody → Storage → Clear Data
- Reset your Advertising ID through Android Settings → Privacy → Ads
- Opt out of ad personalization through Android Settings → Privacy → Ads
- Uninstall the App to remove all locally stored data
### 7.2 GDPR Rights (European Economic Area, United Kingdom, Switzerland)
If you reside in the EU, UK, or Switzerland, you have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict our processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with your local Data Protection Authority
To exercise these rights, contact us using the details in Section 12.
### 7.3 CCPA Rights (California Residents)
If you are a California resident, you have the right to:
- Know what personal information is collected, used, and shared
- Request deletion of your personal information
- Opt out of the "sale" of personal information (note: we do not sell personal information in the traditional sense, but ad-network sharing may be classified as such under CCPA)
- Non-discrimination for exercising your rights
To exercise these rights, contact us using the details in Section 12.
### 7.4 Withdrawing Ad Consent
If you previously accepted ad personalization, you can withdraw consent by:
- Resetting your Advertising ID in Android Settings → Privacy → Ads → "Reset advertising ID"
- Toggling "Opt out of Ads Personalization" in Android Settings
---
## 8. Children's Privacy (COPPA)
Melody is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.
---
## 9. Data Security
We use industry-standard security measures to protect your information:
- All network requests use HTTPS encryption
- Your local data is stored in app-private storage and is not accessible to other apps
- Advertising-related data is encrypted in transit
- We do not store passwords (Last.fm uses an OAuth-style token flow)
No method of internet transmission or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
---
## 10. International Data Transfers
Some of our ad partners and third-party services are based outside your country (e.g., AppLovin and Meta are based in the United States). By using Melody Music, you consent to your data being transferred to and processed in those countries, subject to appropriate safeguards.
---
## 11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will:
- Update the "Last Updated" date at the top
- Notify you through the App if changes are material
Continued use of Melody after changes constitutes acceptance of the updated policy.
---
## 12. Acknowledgment
By using Melody Music, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.