This Privacy Policy explains how Demus ("Demus", "the app", "we", "our", or "us") handles information when you use the Demus Android application. Please read it carefully. By installing or using Demus, you confirm that you have read and understood this Privacy Policy.
Demus is an independent application. It is not affiliated with, endorsed by, sponsored by, or connected to any third-party music streaming service, video platform, or media brand.
1. Summary — the short version
Demus does not require an account. You can use the app without signing up, signing in, or providing any personal identity information.
Almost all data Demus processes stays on your device — your music library, playlists, favourites, listening history, downloads, and settings are stored locally in the app's private storage.
Demus connects to the internet only to search for music, stream audio, download tracks you request, check for updates, and load ads.
Demus shows advertisements through AppLovin MAX. AppLovin collects certain device identifiers and usage information for ad delivery and measurement. See Section 5.
Optional integrations (Last.fm scrobbling, Discord Rich Presence) only run when you enable them and connect your own account.
Demus does not sell your personal information.
If you uninstall the app, all locally stored data is removed by Android.
2. Information Demus collects
2.1 Information you provide directly
Account credentials for optional integrations. If you choose to enable Last.fm scrobbling, you provide your Last.fm username and authentication token. If you enable Discord Rich Presence, the integration uses your existing Discord app. Demus never asks for or stores your Discord password.
Playlists, favourites, and settings you create in the app. These are stored locally on your device.
Search queries you type into the in-app search. Queries are sent to the streaming / search endpoints configured by the plugins you have installed (see Section 5).
Feedback and support messages you voluntarily send to {{CONTACT_EMAIL}}.
2.2 Information collected automatically by the app
Local library scan results. With your permission, Demus scans your device storage to index audio files (FLAC, MP3, ALAC, WAV, AIFF, AAC, OGG, and similar). File paths and audio metadata (title, artist, album, track number, duration, artwork) are stored locally on your device only.
Listening history and play counts. Stored locally to power the "recently played", "most played", and history views. Never transmitted off your device.
Downloaded content. Files you download are stored on your device in the location you choose.
Diagnostic logs. Basic error and diagnostic logs may be written to the app's private log storage on your device to help debug issues. These logs stay on your device unless you explicitly attach them to a support email.
2.3 Information collected by third-party services
The following data is collected by third-party services embedded in Demus. See Section 5 for details and links.
Advertising identifiers (Android Advertising ID / AAID) and coarse device information (device model, OS version, language, network type, general location derived from IP address) are collected by AppLovin MAX for ad delivery, frequency capping, and measurement. You can reset or opt out of the Advertising ID from your Android system settings.
IP address is inherently visible to any network endpoint the app connects to (search endpoints, streaming CDNs, ad servers, update servers).
2.4 Information Demus does NOT collect
Demus does not collect your name, email address, phone number, precise location (GPS), contacts, calendar, photos, or SMS.
Demus does not use analytics SDKs to profile you (no Firebase Analytics, no Google Analytics, no Facebook SDK, no Mixpanel, no Amplitude).
Demus does not record microphone or camera input.
Demus does not collect biometric data.
Demus does not require sign-in and does not build a personal profile linked to your identity.
3. Android permissions and why they are requested
Permission
Why the app requests it
INTERNET
Required to search for music, stream audio, download content, load ads, and check for updates.
READ_MEDIA_AUDIO / READ_EXTERNAL_STORAGE
Required to scan and play the audio files stored on your device.
POST_NOTIFICATIONS
Required to display media playback controls in your notification shade and on your lock screen.
WAKE_LOCK
Required to keep audio playing while your screen is off.
FOREGROUND_SERVICE / FOREGROUND_SERVICE_MEDIA_PLAYBACK
Required to run the audio player in the background so playback continues when the app is not in the foreground.
AD_ID
Required by AppLovin MAX to serve advertising and cap ad frequency. You can reset or opt out of this identifier in your Android system settings.
Demus does not request location, contacts, calendar, camera, microphone, phone, or SMS permissions.
4. How Demus uses information
Information is used strictly to:
Play, index, download, and organise your music library.
Power search, discovery, playlists, favourites, history, and lyrics features.
Provide media notification and lock-screen playback controls.
Enable optional integrations you turn on (Last.fm scrobbling, Discord Rich Presence).
Display advertisements and measure basic ad delivery, through AppLovin MAX.
Diagnose and fix crashes and bugs, using logs stored on your device.
Demus does not use your information for profiling, credit decisions, employment decisions, or any automated decision-making that produces legal effects on you.
5. Third-party services
Demus integrates with the following third parties. Each service processes data under its own privacy policy — please review them.
5.1 AppLovin MAX (advertising)
Purpose: displaying banner, interstitial, rewarded, and app-open advertisements.
Data processed: Advertising ID (AAID), IP address, device model, OS version, language, network type, coarse geographic location derived from IP, ad interaction events.
Privacy policy: https://www.applovin.com/privacy/
Opt out of personalised ads: reset your Advertising ID or enable "Opt out of Ads Personalisation" in Android system settings.
5.2 Last.fm (optional scrobbling)
Only active if you enable it and provide your Last.fm credentials.
Data processed: your Last.fm username, session token, and the metadata of songs you play (title, artist, album, timestamp).
Privacy policy: https://www.last.fm/legal/privacy
5.3 Discord Rich Presence (optional)
Only active if you enable it and the Discord app is installed.
Data processed: the title and artist of the song currently playing, forwarded to the local Discord client for display on your Discord profile.
Privacy policy: https://discord.com/privacy
5.4 Streaming and search endpoints (via plugins)
The Demus plugin system connects to third-party music search and streaming endpoints selected by the plugins you install.
Data processed: search queries, playback requests, IP address.
Different plugins connect to different providers, each with its own privacy policy.
5.5 Media Kit (audio playback library)
Local audio decoding and playback library. Runs entirely on-device. No data leaves your device through this component.
5.6 Google Play Services
When installed through the Google Play Store, standard Play Services processes may run alongside the app (integrity checks, licence verification, update delivery). Governed by Google's privacy policy: https://policies.google.com/privacy
6. Data sharing
Demus does not sell, rent, or trade personal information.
Demus shares information only in the following cases:
With third-party services listed in Section 5, only as needed for their integrated function.
With law enforcement or regulators when required by a valid legal order in a jurisdiction where {{PUBLISHER_NAME}} operates.
With a successor entity in the event of a corporate reorganisation, merger, or acquisition. You will be notified of any such change.
7. Data retention
Local data (library index, playlists, favourites, history, downloads, cache) is retained until you delete it from within the app or uninstall the app.
Log data on your device is capped in size and automatically pruned.
Third-party services retain data under their own retention policies (see Section 5).
8. Your privacy rights
8.1 All users
Access, modify, or delete the data Demus holds on your device by using the in-app controls for playlists, favourites, history, and downloads, and by clearing app storage or uninstalling the app in Android system settings.
Opt out of personalised ads by resetting or opting out of the Advertising ID in Android system settings.
Turn off optional integrations (Last.fm, Discord Rich Presence) at any time from the Demus settings.
8.2 Users in the European Economic Area, United Kingdom, or Switzerland (GDPR)
You have the right to:
access the personal data we process about you;
request correction of inaccurate data;
request erasure of your personal data;
restrict or object to processing;
data portability;
lodge a complaint with your local supervisory authority.
Because Demus does not collect personal identifiers server-side, most of these rights are satisfied by managing data on your device. For requests concerning third parties (e.g. AppLovin), please contact them directly using the links in Section 5. For requests concerning {{PUBLISHER_NAME}}, contact {{CONTACT_EMAIL}}.
The legal bases we rely on are: (a) your consent, for optional integrations and personalised advertising; (b) legitimate interest, for core app functionality and non-personalised advertising; (c) contract, to provide the service you requested by installing the app.
8.3 Users in California (CCPA / CPRA)
You have the right to:
know what personal information is collected;
delete personal information;
opt out of the sale or sharing of personal information;
non-discrimination for exercising these rights.
Demus does not sell personal information for money. Advertising through AppLovin may qualify as "sharing" under CPRA. You can opt out by disabling the Advertising ID in Android system settings and by contacting AppLovin directly.
8.4 Users in Brazil (LGPD)
You have rights substantially similar to those in Section 8.2. Contact {{CONTACT_EMAIL}} to exercise them.
9. Children's privacy
Demus is intended for a general audience and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). Demus does not knowingly collect personal information from children.
If you believe a child has provided personal information to Demus through an optional integration, please contact us at {{CONTACT_EMAIL}} and we will take steps to delete it.
Parents and guardians in the EU, UK, and jurisdictions with stricter minimum ages (e.g. 16 in some EU member states) should ensure the app is only used with appropriate consent.
10. Security
Demus uses standard Android storage and secure network connections (HTTPS where supported by the endpoint) to protect data in transit. Because most data stays on your device, physical security of your device is the primary control.
No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.
11. International data transfers
Some third-party services listed in Section 5 (AppLovin, Discord, Last.fm) process data on servers located outside your country of residence, including in the United States. Where such transfers involve personal data of users in the EEA, UK, or Switzerland, those third parties are responsible for maintaining appropriate safeguards (Standard Contractual Clauses or equivalent). Please refer to their privacy policies.
12. Content responsibility
Demus is a general-purpose media player. You are solely responsible for ensuring that the content you play, download, or share through the app is content you own or that is legally free to enjoy in your jurisdiction. {{PUBLISHER_NAME}} does not host, upload, or provide the third-party content that the app can access.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, provide reasonable notice through the app store listing or in-app notice.
Continued use of Demus after the effective date of an update constitutes acceptance of the updated policy.