Rev Music privacy policy

What the app does with data

Your Jellyfin servers

Rev Music connects only to the Jellyfin servers you add, by picking one found on your Wi-Fi or by typing its address. Those servers are run by you or by someone you trust. We have no access to them.

With a server, the app:

• signs in with the user name and password you type, or with Quick Connect, and receives an access token;
• reads your library (tracks, albums, artists, genres, playlists, covers and lyrics) to show it and to build a local index on your phone;
• streams the music you play;
• saves the changes you make: playlists you create, edit or delete, and tracks you add to Favorites;
• tells the server what is playing (start, progress, stop), as every Jellyfin app does, so the server can show it and keep your play history;
• sends the app's name and version, your phone's device name (the name set in Android, or its model) and a device ID the Jellyfin SDK derives from Android's per-app ID. Jellyfin shows these in its list of devices and uses them to keep your sessions apart.

Your password is sent only to your server when you sign in, over the address you chose, and is never stored on the phone. The app refuses to send a password or token from an encrypted (https) address to an unencrypted one, and warns you before it uses an unencrypted address outside your home network.

To find servers on your Wi-Fi, the app sends Jellyfin's standard discovery message on your local network. It does not leave your network.

Music on your phone

If you choose device folders, Rev Music asks for the Music and audio permission (Files and media on Android 12 and lower). It uses it only to read the audio files, and their tags such as title, artist, album and cover art, in the folders you choose.

It does not read photos, videos or documents, and it never uploads or copies your files anywhere. Lyrics for a device track are read from an .lrc file next to the audio file, where Android allows it.

What stays on your phone

Stored in the app's private storage on your phone:

• the servers you added (name, addresses, user names), your settings and your phone playlists;
• a local index of your library, so lists and search are fast;
• cached cover images;
• the queue you were listening to, so it is still there after Android closes the app;
• sign-ins, kept as access tokens encrypted with a key that never leaves your phone (Android Keystore);
• a short error log: the time, the part of the app and the type of each recent error. It never holds the error message, an address or anything from your library.

If Android backup is on for your phone, Android may include the app's settings, server list and phone playlists in your own backup. Sign-in tokens are always left out of backups and device transfers.

Signing out, or removing a server, deletes its tokens from the phone and also ends the session on the server, at once or as soon as the server answers. Uninstalling the app deletes everything it stored.

Report a problem

About > Report a problem opens an email in your own email app. It contains the app and Android version and the recent error types from the log above. You see the whole message and can change it before you send it. Nothing is sent unless you send it yourself, and it contains only what you choose to send.

What the app does not do

• It does not collect, sell or share personal data with us or anyone else.
• It contains no advertising, analytics, crash reporting or tracking libraries.
• It does not record audio or use the microphone or camera. (Take photo for a playlist cover opens your camera app, which gives the photo back to Rev Music. The app itself has no camera permission.)
• It does not download music for offline use.
• It shows no notifications other than the media player controls.

Children

Rev Music is a general audience music player and is not directed at children.

Changes

If this policy changes, the new version is published at this address, and the app's What's new mentions it in the version that brings the change.

Contact

Questions about this policy: ganysigit1@gmail.com.