Privacy Policy

1. Overview & Identity of the Controller (VitoCV™)

This Privacy Policy governs both the Liquid Music iOS application and the official Liquid Music web platform. Liquid Music is developed and published by the VitoCV™ team.

Liquid Music is an offline player for your own music. Within the iOS app, we do not collect, store on servers, sell, or share any data about you. The app has no accounts, no ads, no analytics, and no third-party SDKs.

2. Data That Stays on Your iPhone (iOS Application)

This data lives only in the app's protected sandbox container on your iPhone and is deleted together with the app. If you back up your iPhone to iCloud or a computer, it is included in your backup under Apple's rules.

• Library: file names, tags, artwork, and audio format details (FLAC, ALAC, WAV, AIFF, MP3, AAC, Dolby Atmos E-AC-3 JOC).
• Lyrics: found in your files (.lrc and embedded tags), imported by you, or recognized directly on the device.
• Listening history for 'For You' mixes: play and skip counts, time of day. You can turn it off and clear it in one tap in Settings.
• App preferences stored in local `UserDefaults` (Apple Required Reason API `CA92.1`).

3. iOS Permissions & Zero Network Activity

• Speech Recognition (`NSSpeechRecognitionUsageDescription`) — used solely to display synced lyrics. Apple's built-in SpeechAnalyzer model processes the audio on the device (Neural Engine); nothing is sent anywhere. Language models are downloaded and updated by iOS itself.
• Media Library (`NSAppleMusicUsageDescription`) — accessed only if you tap 'Add songs from Music'. The app reads DRM-free songs purchased from the iTunes Store or synced from a computer; files are not copied or modified.
• Network: The Liquid Music iOS app makes no network requests and works in Airplane Mode. Its `PrivacyInfo.xcprivacy` manifest declares `NSPrivacyTracking = false` and `NSPrivacyCollectedDataTypes = []`.

4. Web Platform Data Processing (Waitlist & Wishes Board)

When you voluntarily interact with our web platform to join the release waitlist or vote on feature requests:

• Release Waitlist (Double Opt-In): If you submit your email address, we store your email, chosen language (`locale`), and confirmation status on the basis of your explicit consent (Art. 6(1)(a) GDPR). Every email includes a one-click `/unsubscribe` link and `List-Unsubscribe` header.
• Privacy-Preserving Voting & Rate Limiting: We do NOT store raw IP addresses in our database. To prevent duplicate voting and spam, the server computes a one-way cryptographic `HMAC/SHA-256` hash using a secret server salt (`HASH_SALT`) that cannot be reversed to identify you.
• Subprocessors & Encryption: Web database records are stored in Neon Serverless PostgreSQL (encrypted in transit via TLS 1.3 and at rest via AES-256). Confirmation emails are dispatched via Resend. We use zero advertising pixels or cross-site tracking cookies.

5. Children's Privacy (4+ / COPPA)

The app is suitable for all ages (rated 4+ on the App Store) and collects no personal data from children under 13 or any other age group, in full compliance with the U.S. Children's Online Privacy Protection Act (COPPA) and Art. 8 GDPR.

6. Your Global Privacy Rights (GDPR, UK GDPR, CCPA/CPRA, LGPD, PIPL, PDPL, 152-FZ)

Because the developer receives none of your data from the iOS app, there is nothing on our servers to access, correct, or export — delete everything by deleting the app, or clear listening history in Settings.

For waitlist subscribers on the web platform, you have the right to access, rectify, port, or erase your email record at any time via the instant unsubscribe link or by contacting us. Under the California Consumer Privacy Act (CCPA / CPRA), VitoCV™ never sells or shares personal information ('Do Not Sell or Share My Personal Information').

7. Changes & Contact Information

If this policy changes, the new version will appear in the app and on this page with a new effective date.

Controller: VitoCV™ Team · Privacy & DPO Contact: vitalikzelenkoplay@gmail.com