Privacy Policy

Effective date: October 21, 2026 · Last updated: October 21, 2026

This Privacy Policy explains how the WaveCrate mobile application (the “App”) handles information. The App is published by [[DEVELOPER NAME]] (“we”, “us”, or “our”). By installing or using the App you agree to this policy. If you do not agree, please do not use the App.

The short version

WaveCrate is a music player and remote for a music server that you (or someone you trust) run. It has no WaveCrate account and no WaveCrate cloud service.
We do not collect, receive, store, sell, or share your personal information. The App sends nothing to us.
The App contains no advertising, no analytics, and no tracking software.
What you do in the App goes to the server address you enter, and to the media hosts that server points to. The server’s operator controls that data.
All connections use encrypted HTTPS. Plain, unencrypted connections are blocked.

1. About WaveCrate

WaveCrate is an independent client app for Aurral, self-hosted software for discovering and playing music. To use WaveCrate you sign in to an Aurral server by entering its web address, a username, and a password. That server is run by you or by another person or organization (“Server Operator”). It is not run by us unless we tell you otherwise, for example on a demo server provided for app review (see Section 16).

Because the App talks directly to your server, the Server Operator, not us, determines how the data on that server is collected, stored, and used. For privacy questions about your server, contact its operator.

2. Information we collect

We do not collect any personal information through the App. The App has no connection to servers we operate. It does not send us your name, email address, contacts, location, device identifiers, listening activity, usage statistics, crash reports, or any other information.

If you contact us directly (for example by email), we receive the information you choose to send, such as your email address and your message. We use it only to respond to you (see Section 19).

3. Information stored on your device

To work, the App saves a small amount of information in its private storage on your device. Android’s app sandbox keeps this storage separate from other apps.

Information	Why it is stored
Server address and username	To reconnect to your server and prefill the sign-in screen.
Session token issued by your server	To keep you signed in. Your password is never stored; it is sent once to your server when you sign in.
App preferences (theme, shuffle and repeat settings)	To remember how you like the App to behave.
Optional ZIP or postal code for nearby concerts	Only if you enter one, to show concerts near that location.
Temporary image and media cache	To display artwork and play audio smoothly. It is managed by Android and cleared as needed.

This information never leaves your device except as described in Section 4. The App turns off Android cloud backup of its data, so it is not copied to your Google account backup.

4. Information sent to your server

When you use the App, it communicates over HTTPS with the server address you entered. Depending on the features you use, the App sends that server:

Your sign-in credentials (username and password) when you sign in, and your session token with later requests.
Searches you make, and artists, albums, playlists, and tracks you open, play, favorite, request, block, or give feedback on.
Playback requests for audio and artwork. The server may record what you play, for example as listening history.
An optional ZIP or postal code, if you choose to see nearby concerts. If you don’t enter one, your server may estimate an approximate location from its own network information.
Standard technical details that every internet request includes, such as your IP address and the request time. Your server, and any hosting or network provider in front of it, may log these.

We do not receive, see, or control any of this. Its handling is governed by the Server Operator and any privacy policy they provide.

5. Third-party services and content

Media and artwork hosts

Some artwork, artist images, and short track previews load directly from addresses your server provides, such as music-metadata, cover-art, or preview services. When the App loads such an item, your device connects to that host, and the host receives the information that every web request includes (for example your IP address and the time of the request). The App sends no other personal information to these hosts. Their own privacy policies govern how they handle it.

Links that open in your browser

Some content, such as news articles or concert listings, opens in your web browser or another app. Once you leave WaveCrate, the destination’s privacy policy applies.

Google Play and Android

If you download the App from Google Play, Google processes information under its own privacy policy, for example to handle the download, updates, and app reviews. If you have chosen in your Android settings to share usage and diagnostics data with Google, Android may send Google technical data such as crash reports. Google may share aggregated, de-identified statistics about crashes and performance with app developers. We do not receive personal information from this, and we do not add any crash-reporting or analytics tools of our own.

Open-source components

The App is built with open-source software libraries (listed in the App under Profile › Open-source licenses). These libraries run only on your device and do not send information to their authors.

6. Device permissions

Permission	Purpose
Internet access	To connect to your server and load artwork and audio.
Notifications	To show playback controls in the notification area and on the lock screen. You can deny or revoke this in Android settings; playback still works.
Foreground service (media playback)	To keep music playing when the App is in the background or the screen is off.
Wake lock	To keep audio streaming without interruption while music is playing.

The App does not request access to your contacts, camera, microphone, photos, files, precise location, phone, SMS, or accounts.

7. How information is used

Information handled by the App is used only to provide its features: signing you in to your server, browsing and playing your music, showing recommendations and concerts from your server, remembering your preferences, and keeping you signed in. It is not used for advertising, profiling, or any purpose unrelated to the App’s features.

Where data-protection laws such as the GDPR apply, any processing on your device happens because it is needed to provide the service you requested (performance of a contract), or in our legitimate interest in providing a working app, and only to the extent described here.

8. Sharing, selling, and advertising

We do not sell your personal information.
We do not share your personal information for targeted or cross-context behavioral advertising.
The App contains no ads and no third-party analytics or tracking software.
We do not disclose personal information to third parties, because we do not collect any. Information goes only to the server and media hosts you use, as described in Sections 4 and 5.

If we are ever legally required to respond to a lawful request, we can only provide what we hold, which, apart from any emails you sent us, is nothing.

9. Retention and deletion

On your device: stored information remains until you sign out (which removes your session) or uninstall the App (which removes all of its data). You can also clear it at any time in Android Settings › Apps › WaveCrate › Storage › Clear storage.
On your server: retention and deletion are controlled by the Server Operator. Contact them to access or delete data held on the server.
With us: we keep no App data. Emails you send us are kept only as long as needed to respond and for reasonable record-keeping, then deleted.

10. Security

The App connects only over HTTPS (TLS encryption). Unencrypted http:// connections are blocked by the App’s network security settings, and plain-HTTP server addresses are rejected at sign-in.
Your password is not stored on the device.
Stored information is kept in the App’s private storage, which other apps cannot access under Android’s security model, and is excluded from cloud backup.

No method of transmission or storage is completely secure. Protect your device with a screen lock, keep it updated, and use a strong, unique password for your server account.

11. Children’s privacy

The App is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect personal information from children. Because we collect no personal information through the App, we hold none about children. If you believe a child has sent us personal information directly, for example by email, contact us and we will delete it.

12. International users

We do not transfer App data across borders because we do not receive it. Information you send to your server and to media hosts may be processed in whatever country those services are located. That is determined by the Server Operator and those hosts.

13. Your privacy rights

Depending on where you live, you may have rights over your personal information, including the rights to access, correct, delete, or port it, to restrict or object to its processing, to withdraw consent, and to complain to a data-protection authority. These rights exist under laws such as:

the EU and UK General Data Protection Regulation (GDPR / UK GDPR);
the California Consumer Privacy Act as amended by the CPRA, and comparable laws in other U.S. states (for example Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others);
Canada’s PIPEDA, Brazil’s LGPD, and Australia’s Privacy Act.

Because we hold no personal information from the App, most requests are fulfilled simply: there is nothing for us to access, correct, or delete. To exercise these rights over data on your device, sign out, clear the App’s storage, or uninstall it. For data on your server, contact the Server Operator. You may still contact us with any request or question (see Section 19). We will respond within the time required by applicable law, and we will not discriminate against you for exercising your rights.

14. California and other U.S. state disclosures

In the preceding 12 months we have not collected any category of personal information from consumers through the App, and we have not sold or shared personal information, including that of consumers under 16. We do not use or disclose sensitive personal information. California residents may contact us under the CCPA/CPRA using the details in Section 19, and may use an authorized agent where the law allows.

15. Do Not Track and Global Privacy Control

The App does not track you across apps or websites, so there is no tracking for Do Not Track or Global Privacy Control signals to switch off. We do not sell or share personal information whether or not such signals are present.

16. App review and demo access

To let app-store reviewers test the App, we may operate a demonstration server with a test account. Any activity on that demo server (for example searches, plays, and requests made while testing) is processed by that server only for app review and demonstration, is not linked to any real person, and may be reset or deleted at any time. The demo server contains only music we are permitted to share.

17. Independence from other services

WaveCrate is an independent app. It is not made by, affiliated with, or endorsed by the Aurral project, Lidarr, Google, or any music, metadata, preview, or concert-listing service. Names are used only to describe compatibility. Those services have their own privacy policies.

18. Changes to this policy

We may update this policy as the App changes or as laws change. We will post the updated version at this address and change the “Last updated” date at the top. If a change materially affects how information is handled, for example if the App ever begins collecting data, we will also give notice in the App or on its store listing before the change takes effect, and obtain your consent where the law requires it.

19. Contact us

For questions, requests, or complaints about this policy or your privacy:

Zonix Solutions
Email: [email protected]
Web: https://zonix-solutions.com

If you are in the EU or UK and are not satisfied with our response, you may lodge a complaint with your local data-protection authority.