This Privacy Policy explains how Spotiflac ("Spotiflac", "the app", "we", "our", or "us") handles information when you use the Spotiflac Android application. Please read it carefully. By installing or using Spotiflac, you confirm that you have read and understood this Privacy Policy.
Spotiflac is an independent application. It is not affiliated with, endorsed by, sponsored by, or connected to any third-party music streaming service, video platform, or media brand.
Spotiflac does not require an account. You can use the app without signing up, signing in, or providing any personal identity information.
Almost all data Spotiflac processes stays on your device — your music library, playlists, favourites, listening history, downloads, and settings are stored locally in the app's private storage.
Spotiflac connects to the internet only to search for music, stream audio, download tracks you request, check for updates, and load ads.
Spotiflac shows advertisements through AppLovin MAX. AppLovin collects certain device identifiers and usage information for ad delivery and measurement. See Section 5.
Optional integrations (Last.fm scrobbling, Discord Rich Presence) only run when you enable them and connect your own account.
Spotiflac does not sell your personal information.
If you uninstall the app, all locally stored data is removed by Android.
Account credentials for optional integrations. If you choose to enable Last.fm scrobbling, you provide your Last.fm username and authentication token. If you enable Discord Rich Presence, the integration uses your existing Discord app. Spotiflac never asks for or stores your Discord password.
Playlists, favourites, and settings you create in the app. These are stored locally on your device.
Search queries you type into the in-app search. Queries are sent to the streaming / search endpoints configured by the plugins you have installed (see Section 5).
Feedback and support messages you voluntarily send to {{CONTACT_EMAIL}}.
Local library scan results. With your permission, Spotiflac scans your device storage to index audio files (FLAC, MP3, ALAC, WAV, AIFF, AAC, OGG, and similar). File paths and audio metadata (title, artist, album, track number, duration, artwork) are stored locally on your device only.
Listening history and play counts. Stored locally to power the "recently played", "most played", and history views. Never transmitted off your device.
Downloaded content. Files you download are stored on your device in the location you choose.
Diagnostic logs. Basic error and diagnostic logs may be written to the app's private log storage on your device to help debug issues. These logs stay on your device unless you explicitly attach them to a support email.
The following data is collected by third-party services embedded in Spotiflac. See Section 5 for details and links.
Advertising identifiers (Android Advertising ID / AAID) and coarse device information (device model, OS version, language, network type, general location derived from IP address) are collected by AppLovin MAX for ad delivery, frequency capping, and measurement. You can reset or opt out of the Advertising ID from your Android system settings.
IP address is inherently visible to any network endpoint the app connects to (search endpoints, streaming CDNs, ad servers, update servers).
Spotiflac does not collect your name, email address, phone number, precise location (GPS), contacts, calendar, photos, or SMS.
Spotiflac does not use analytics SDKs to profile you (no Firebase Analytics, no Google Analytics, no Facebook SDK, no Mixpanel, no Amplitude).
Spotiflac does not record microphone or camera input.
Spotiflac does not collect biometric data.
Spotiflac does not require sign-in and does not build a personal profile linked to your identity.
Permission
Why the app requests it
INTERNET
Required to search for music, stream audio, download content, load ads, and check for updates.
READ_MEDIA_AUDIO / READ_EXTERNAL_STORAGE
Required to scan and play the audio files stored on your device.
POST_NOTIFICATIONS
Required to display media playback controls in your notification shade and on your lock screen.
WAKE_LOCK
Required to keep audio playing while your screen is off.
FOREGROUND_SERVICE / FOREGROUND_SERVICE_MEDIA_PLAYBACK
Required to run the audio player in the background so playback continues when the app is not in the foreground.
AD_ID
Required by AppLovin MAX to serve advertising and cap ad frequency. You can reset or opt out of this identifier in your Android system settings.
Spotiflac does not request location, contacts, calendar, camera, microphone, phone, or SMS permissions.
Information is used strictly to:
Play, index, download, and organise your music library.
Power search, discovery, playlists, favourites, history, and lyrics features.
Provide media notification and lock-screen playback controls.
Enable optional integrations you turn on (Last.fm scrobbling, Discord Rich Presence).
Display advertisements and measure basic ad delivery, through AppLovin MAX.
Diagnose and fix crashes and bugs, using logs stored on your device.
Spotiflac does not use your information for profiling, credit decisions, employment decisions, or any automated decision-making that produces legal effects on you.
Spotiflac integrates with the following third parties. Each service processes data under its own privacy policy — please review them.
Purpose: displaying banner, interstitial, rewarded, and app-open advertisements.
Data processed: Advertising ID (AAID), IP address, device model, OS version, language, network type, coarse geographic location derived from IP, ad interaction events.
Privacy policy: https://www.applovin.com/privacy/
Opt out of personalised ads: reset your Advertising ID or enable "Opt out of Ads Personalisation" in Android system settings.
Only active if you enable it and provide your Last.fm credentials.
Data processed: your Last.fm username, session token, and the metadata of songs you play (title, artist, album, timestamp).
Privacy policy: https://www.last.fm/legal/privacy
Only active if you enable it and the Discord app is installed.
Data processed: the title and artist of the song currently playing, forwarded to the local Discord client for display on your Discord profile.
Privacy policy: https://discord.com/privacy
The Spotiflac plugin system connects to third-party music search and streaming endpoints selected by the plugins you install.
Data processed: search queries, playback requests, IP address.
Different plugins connect to different providers, each with its own privacy policy.
Local audio decoding and playback library. Runs entirely on-device. No data leaves your device through this component.
When installed through the Google Play Store, standard Play Services processes may run alongside the app (integrity checks, licence verification, update delivery). Governed by Google's privacy policy: https://policies.google.com/privacy
Spotiflac does not sell, rent, or trade personal information.
Spotiflac shares information only in the following cases:
With third-party services listed in Section 5, only as needed for their integrated function.
With law enforcement or regulators when required by a valid legal order in a jurisdiction where {{PUBLISHER_NAME}} operates.
With a successor entity in the event of a corporate reorganisation, merger, or acquisition. You will be notified of any such change.
Local data (library index, playlists, favourites, history, downloads, cache) is retained until you delete it from within the app or uninstall the app.
Log data on your device is capped in size and automatically pruned.
Third-party services retain data under their own retention policies (see Section 5).
Access, modify, or delete the data Spotiflac holds on your device by using the in-app controls for playlists, favourites, history, and downloads, and by clearing app storage or uninstalling the app in Android system settings.
Opt out of personalised ads by resetting or opting out of the Advertising ID in Android system settings.
Turn off optional integrations (Last.fm, Discord Rich Presence) at any time from the Spotiflac settings.
You have the right to:
access the personal data we process about you;
request correction of inaccurate data;
request erasure of your personal data;
restrict or object to processing;
data portability;
lodge a complaint with your local supervisory authority.
Because Spotiflac does not collect personal identifiers server-side, most of these rights are satisfied by managing data on your device. For requests concerning third parties (e.g. AppLovin), please contact them directly using the links in Section 5. For requests concerning {{PUBLISHER_NAME}}, contact {{CONTACT_EMAIL}}.
The legal bases we rely on are: (a) your consent, for optional integrations and personalised advertising; (b) legitimate interest, for core app functionality and non-personalised advertising; (c) contract, to provide the service you requested by installing the app.
You have the right to:
know what personal information is collected;
delete personal information;
opt out of the sale or sharing of personal information;
non-discrimination for exercising these rights.
Spotiflac does not sell personal information for money. Advertising through AppLovin may qualify as "sharing" under CPRA. You can opt out by disabling the Advertising ID in Android system settings and by contacting AppLovin directly.
You have rights substantially similar to those in Section 8.2. Contact {{CONTACT_EMAIL}} to exercise them.
Spotiflac is intended for a general audience and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). Spotiflac does not knowingly collect personal information from children.
If you believe a child has provided personal information to Spotiflac through an optional integration, please contact us at {{CONTACT_EMAIL}} and we will take steps to delete it.
Parents and guardians in the EU, UK, and jurisdictions with stricter minimum ages (e.g. 16 in some EU member states) should ensure the app is only used with appropriate consent.
Spotiflac uses standard Android storage and secure network connections (HTTPS where supported by the endpoint) to protect data in transit. Because most data stays on your device, physical security of your device is the primary control.
No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.
Some third-party services listed in Section 5 (AppLovin, Discord, Last.fm) process data on servers located outside your country of residence, including in the United States. Where such transfers involve personal data of users in the EEA, UK, or Switzerland, those third parties are responsible for maintaining appropriate safeguards (Standard Contractual Clauses or equivalent). Please refer to their privacy policies.
Spotiflac is a general-purpose media player. You are solely responsible for ensuring that the content you play, download, or share through the app is content you own or that is legally free to enjoy in your jurisdiction. {{PUBLISHER_NAME}} does not host, upload, or provide the third-party content that the app can access.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, provide reasonable notice through the app store listing or in-app notice.
Continued use of Spotiflac after the effective date of an update constitutes acceptance of the updated policy.