Privacy Policy

Last Updated: April 13, 2026

Effective Date: January 28, 2026

---

Introduction

Song Sweeper ("we," "our," or "the app") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use our iOS application.

In short: Song Sweeper is designed with privacy in mind. Your music library is processed entirely on your device. We collect usage analytics and crash/error diagnostics linked to a pseudonymous install identifier to improve the app, we do not ask for direct identifiers like name or email, and we do not track you across apps.

---

Information We Access

Apple Music Library

Song Sweeper requests access to your Apple Music library to provide its core functionality:

• What we access: Song metadata (titles, artists, albums, play counts, date added, duration) and playlist metadata needed for app features (playlist names and song membership, including the Song Sweeper deletion queue playlist)
• Why we need it: To identify duplicate songs and help you manage your music collection
• How it's used: All analysis happens locally on your device
• What we don't access: We do not access Apple ID credentials, your payment card details, or data outside your music library and in-app preferences

Apple ID

Song Sweeper uses your Apple ID through Apple's MusicKit framework to:

• Authenticate your Apple Music subscription
• Enable access to your music library
• Process in-app subscriptions through Apple's secure payment system

Important: We never see, collect, or store your Apple ID credentials. Authentication is handled entirely by Apple.

---

Information We Collect

Information Stored Locally on Your Device

The following data is stored locally on your device and never transmitted to our servers:

• Favorites: Songs you mark as favorites within Song Sweeper
• App Preferences: Your settings and preferences for duplicate detection, sorting, and filtering
• Cache Data: Temporary data to improve app performance (e.g., artist artwork, search results)

Analytics Data

We collect usage analytics and diagnostic data through PostHog to understand how the app is used, diagnose errors, and improve the experience. This data is linked to a pseudonymous install identifier (described below), not to your Apple ID account. Analytics and diagnostic data includes:

• Screen views: Which screens you visit within the app
• Feature interactions: Actions such as resolving duplicates, consolidating albums, refreshing your library, and adjusting filters
• Subscription events: Purchase outcomes (completed, cancelled, pending, failed), product identifier, and billing period
• Feedback text: If you choose to submit feedback through the in-app survey
• Crash and error data: Crash logs and handled exceptions are captured automatically and manually through the PostHog SDK. This includes exception type, error domain, error code, stack traces, and contextual metadata such as which operation failed (e.g., "library_scan", "favorite_sync_add"). Crash data is persisted to disk and sent on the next app launch. These reports do not contain your music library contents or personal identifiers.
• App lifecycle events: App installs, opens, and updates (captured automatically by the PostHog SDK)
• Device context: Device model, OS version, app version, locale, timezone, and screen size (attached automatically by the PostHog SDK to each event, including crash and error reports)
• User profile properties: Subscription tier (Apprentice or Maestro), first app open date, and internal build flag — stored as persistent properties on your PostHog profile
• Anonymous identifier: A randomly generated ID created by PostHog to distinguish unique app installs. This is not your Apple device ID or Apple ID, and cannot be used to identify you personally. However, it is a persistent identifier that links your analytics data across sessions.

This data is not used to track you across apps or websites. We do not intentionally include direct identifiers (name, email, Apple ID) in analytics events. If you choose to submit feedback text, please avoid including sensitive or personal information.

Information We Do NOT Collect

We do not collect, transmit, or store:

• Direct personal identifiers (name, email, phone number, address) as dedicated required fields
• Music listening history or behavior
• Device identifiers for cross-app tracking
• Location data
• Photos, contacts, or other device data

---

How We Use Information

Information accessed or stored by Song Sweeper is used exclusively to:

1. Identify duplicate songs in your Apple Music library based on metadata matching
2. Consolidate split albums by matching library songs to Apple Music catalog albums and coordinating additions and removals in your library
3. Display your music collection with relevant information (artwork, titles, artists)
4. Save your preferences for how you want duplicates to be detected and displayed
5. Manage your favorites to help you keep track of songs you want to preserve
6. Process subscription purchases through Apple's StoreKit framework
7. Diagnose and fix errors using crash logs and exception reports to identify and resolve bugs
8. Improve the app through pseudonymous analytics to understand feature usage, subscription trends, and user experience

---

Data Sharing and Third Parties

PostHog (Analytics)

We use PostHog as our analytics and error-tracking provider. PostHog receives the pseudonymous usage and diagnostic data described in the "Analytics Data" section above. This includes a persistent install identifier, usage events, and crash/exception reports, but not your music library contents or Apple ID credentials. Data is sent to PostHog's US-hosted cloud infrastructure. For details on how PostHog handles data, see PostHog's Privacy Policy.

Song Sweeper does not:

• Sell your information to advertisers or data brokers
• Use third-party advertising or tracking SDKs
• Share your music library data with any third party

Apple Services

Song Sweeper integrates with Apple's first-party frameworks:

• MusicKit: For accessing your Apple Music library (governed by Apple's Privacy Policy)
• StoreKit: For processing in-app subscription purchases (governed by Apple's Privacy Policy)
• Apple Music API: For retrieving song ratings and catalog information (governed by Apple's Privacy Policy)

These services are provided directly by Apple and are subject to Apple's Privacy Policy.

---

In-App Purchases and Subscriptions

Song Sweeper offers optional subscription plans (Maestro Monthly and Maestro Annual) to unlock premium features.

Payment Processing

• All payments are processed by Apple through the App Store
• We do not collect or store your payment information
• Subscription management is handled through your Apple ID account settings
• Subscriptions automatically renew unless cancelled at least 24 hours before the end of the current period

Subscription Data

• Your subscription entitlement is verified locally through Apple's StoreKit framework
• We send limited pseudonymous subscription analytics to PostHog (for example: purchase outcome, product identifier, billing period, and current tier property) to understand product usage and improve the app
• We do not collect or store payment card or bank details
• Family Sharing is supported, allowing family members to share subscriptions

For subscription management and billing questions, please refer to your App Store account settings or Apple's support resources.

---

Data Storage and Security

Local Storage Only

Your music library data, favorites, preferences, and cache data are stored on your device using:

• iOS secure storage mechanisms (UserDefaults, local cache)
• Sandboxed app storage that is isolated from other apps
• Encryption provided by iOS device security features

Security Measures

We implement security best practices:

• App Sandbox enabled to isolate data from other apps
• Hardened Runtime to prevent code injection
• No network transmission of music library data or Apple ID credentials (analytics data is transmitted to PostHog; see "Data Sharing and Third Parties")
• Compliance with Apple's security guidelines

Data Retention

• Local data (preferences, favorites, cache) remains on your device for as long as the app is installed. Deleting the app removes all locally stored data.
• Analytics data is retained on PostHog's US-hosted servers according to their data retention policies. You may request deletion of your analytics data by contacting us (see Contact Information below).

---

Your Privacy Rights and Choices

Access and Control

You have complete control over your data:

• Revoke Music Access: You can revoke Song Sweeper's access to your Apple Music library at any time through iOS Settings → Privacy & Security → Media & Apple Music
• Delete Local Data: Uninstalling Song Sweeper permanently deletes all local app data
• Manage Subscriptions: Cancel or modify subscriptions through App Store account settings

Data Deletion

To delete all Song Sweeper data:

1. Local data: Delete the Song Sweeper app from your device. All local preferences, favorites, and cache data will be permanently removed.
2. Analytics data: To request deletion of your analytics data stored on PostHog's servers, contact us at help@songsweeper.com. We will process deletion requests within 30 days.

---

Children's Privacy

Song Sweeper is not directed to children under 13. We do not knowingly collect direct personal identifiers from children. Like all users, children may generate pseudonymous analytics events if they use the app. The app:

• Does not require account creation
• Does not request direct personal identifiers as required fields
• Does not include public social features; optional private feedback text can be submitted to us
• Does not contain third-party advertising

Parents and guardians should be aware that the app requires an Apple Music subscription, which has its own age requirements set by Apple.

---

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to app features or functionality
• Updates to legal or regulatory requirements
• Improvements to privacy practices

When we make changes:

• The "Last Updated" date at the top of this policy will be revised
• If changes are material, we will notify you through the app or App Store update notes
• Continued use of the app after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

---

Compliance with Laws

Song Sweeper is designed around Apple's App Store privacy requirements and key US privacy obligations, including:

• California Consumer Privacy Act (CCPA)
• Children's Online Privacy Protection Act (COPPA)
• Apple App Store Review Guidelines

For CCPA Users: We do not sell personal information. Pseudonymous analytics data is collected for product improvement purposes as described in this policy.

---

California Privacy Rights

If you are a California resident, you have the right to:

• Know what personal information is collected
• Request deletion of personal information
• Opt-out of the sale of personal information

Our Response: Song Sweeper does not collect direct personal identifiers as required fields. We collect pseudonymous analytics data as described in this policy and do not sell any information.

---

International Users

Song Sweeper is available worldwide through the Apple App Store. Regardless of your location:

• Music library data is processed locally on your device and is never transmitted externally
• Pseudonymous analytics data is transmitted to PostHog's US-hosted cloud infrastructure (see "Data Sharing and Third Parties" above)
• Your locally stored data remains subject to the privacy protections of your device's iOS operating system

---

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your privacy while using Song Sweeper, please contact us:

Developer: Grady Gaugler Email: help@songsweeper.com App Store: Song Sweeper

We will respond to privacy inquiries within 30 days.

---

Transparency Commitment

We believe in complete transparency about data practices:

• No cross-app tracking: We do not track you across apps or websites
• No profiling: We do not build profiles of your music preferences for advertising
• No data mining: We do not analyze your library for commercial purposes
• No data sales: Your data is never sold to third parties
• Pseudonymous analytics only: Usage analytics are linked to an install identifier (not your real-world identity) and used solely to improve the app

Song Sweeper is a privacy-first application designed to give you control over your music library without compromising your personal information.

---

Technical Implementation

For technically-minded users who want to understand our privacy implementation:

Data Flow

1. Authentication: Handled by Apple's MusicKit (no credentials stored by Song Sweeper)
2. Library Access: Read and write access to your music library via iOS MediaPlayer framework — used to read song metadata, and to create/manage the deletion queue playlist and add or remove songs during album consolidation
3. Ratings Sync: Optional feature using Apple Music API with user-specific tokens managed by MusicKit
4. Local Processing: Duplicate detection algorithms run entirely on-device
5. Analytics and Diagnostics: Pseudonymous usage events and crash/exception reports are sent to PostHog for product improvement and error resolution; direct identifiers are not required

Frameworks Used

• MusicKit: Apple's framework for music library access
• MediaPlayer: Apple's framework for local music library
• StoreKit 2: Apple's framework for in-app purchases
• SwiftUI: Apple's UI framework (no tracking)
• PostHog: Third-party analytics and error-tracking SDK for pseudonymous usage analytics and crash/exception diagnostics

All Apple frameworks are first-party and respect iOS privacy protections. PostHog is the only third-party SDK; it collects pseudonymous analytics and diagnostic data as described in this policy.

---

Summary

What Song Sweeper Does:

• Accesses your Apple Music library locally to find duplicates
• Stores your preferences and favorites on your device
• Processes subscriptions through Apple's secure system
• Collects pseudonymous usage analytics and crash/error diagnostics through PostHog to improve the app

What Song Sweeper Does NOT Do:

• Collect direct account identifiers (name, email, Apple ID credentials) as required fields
• Track you across apps or websites
• Sell or share your data with advertisers
• Store your music library data on external servers
• Display advertisements

Your privacy is our priority. Enjoy organizing your music library with confidence.

---

Version: 3.3 Policy ID: SS-PP-2026-01

© 2026 Song Sweeper. All rights reserved.