Privacy Policy
R&B Player Musics
This policy explains how this application handles information and how to contact us about privacy.
Information we process
R&B Player Musics stores capsule titles, memory and creation dates, moods, notes, manually entered voice transcripts, voice recordings, selected cover photographs, mix settings, albums and unfinished drafts locally on your device. Language and reminder preferences are also local. The app does not upload your diary. If you manually check for or download music packs, it creates a random installation secret in the iOS Keychain and sends it over HTTPS. The backend stores only a SHA-256 hash of that secret and its registration time, alongside public music-pack metadata. Requests to the service or this policy also expose ordinary network information, including IP address, request timing and HTTP information, to Railway hosting infrastructure. Our application logs record request identifiers, time, fixed route, method and status, without tokens, request bodies or IP addresses. A short-lived in-memory IP rate limiter is used for abuse prevention.
How we use information
Local diary data is used to create, edit, play, organize, export and restore your sound capsules. Microphone access records an optional voice track. Selected photos supply capsule or album covers. Local notification permission is used only for a reminder you enable. Installation hashes authorize music-pack requests and allow deletion of that installation registration; they are not user accounts. Technical request data supports service delivery, security and troubleshooting. There are no advertising, analytics, social sign-in or outbound email SDKs in the app.
Service providers and sharing
Diary content remains on your device unless you explicitly export it through the iOS share or save interface. A project backup includes editable media and can contain notes and dates; individual export options let you choose whether to include dates, notes and transcripts. Voice and the selected cover are part of the exported composition. The destination you choose receives exported files under its own practices. Railway hosts the API, public pages and installation-hash database and processes associated infrastructure request data and logs. Apple provides the operating-system photo picker, microphone permissions, Keychain and local notifications. No diary content is sent to our backend, and we do not sell it or send it to an analytics provider. If you contact the public privacy email, the email services involved process your message.
Data retention
Local capsules and albums remain until you delete them, erase all studio data or remove the app. Drafts persist until saved, replaced or erased. Local media not referenced by saved projects or a draft is cleaned during deletion operations. Temporary audio and video export files can remain in the app temporary directory until cleared by the operating system or Delete all data. The app excludes its diary Application Support folder from automatic device backup; explicit exported backups remain wherever you save them. The active Keychain secret can outlast app removal under iOS behavior. Server installation hashes are retained until a valid deletion request is received. We do not specify a fixed retention period for Railway infrastructure logs or provider-managed backups because no product-specific duration has been established.
Deleting your information
Delete capsule removes the local project and its album references; Delete album keeps the original capsules. Delete all data removes capsules, recordings, photos, albums, drafts, downloaded packs, cached lists, app temporary exports and scheduled reminders, and resets the active installation secret. If there is a server registration, its old secret is retained only in a Keychain deletion queue until the server confirms removal. Deletion retries when the app next opens or before a later music-pack request. Offline local deletion does not require a server response. Server deletion removes the matching hash from the active database. Database journals, hosting logs or provider-managed backups may retain residual data under their own lifecycle; we do not promise immediate physical erasure of those copies. Copies you exported must be removed separately at their destinations. Losing a secret can prevent us from identifying its registration, and there is no account-based recovery.
Permissions and your choices
Microphone permission is requested only after you choose to record; you can skip voice. The system photo picker provides only photos you select, without full photo-library access. The app does not request location, contacts or tracking access. Notifications are optional, local and disabled from app Settings at any time. You may withdraw microphone or notification access in iOS Settings. Withdrawing permission does not automatically delete prior recordings or exported copies. iOS accessibility settings control text size, VoiceOver and Reduce Motion. Files are exported using system interfaces rather than direct access to your photo library.
Your privacy rights
You can inspect and edit local diary records, export a project backup and delete records or all studio data in Settings. Depending on your location, you may also have rights to access, correct, erase, restrict or object to processing, obtain portability, or complain to a data protection authority. Contact Barnaby1Cavendish@icloud.com for privacy questions or requests. Do not send your installation secret, voice recordings or other sensitive diary content by email. We may need enough non-sensitive information to understand a request, but do not have your local diary and cannot recover it from our servers.
Security
The app uses the iOS application sandbox and Keychain for its installation secret. The public service uses HTTPS; the server stores a hash rather than the raw secret and requires the presented installation secret for pack access and registration deletion. Input sizes, request concurrency, registration rate and archive contents are bounded. There are no shared embedded installation credentials or public diary endpoints. Local projects are not separately password-encrypted by this app, so protect your device and exported backups. No system can guarantee absolute security. We do not claim security certifications or a fixed backup-erasure schedule.
Children’s privacy
This sound diary is intended for adults, including the described audience aged 18–35, and is not directed to children. It has no accounts, public profiles or social publishing. We do not intentionally request children’s personal information. If you believe a child has provided information to our service, contact Barnaby1Cavendish@icloud.com so we can review the request using the limited server information available.
Changes to this policy
We may update this policy when the app, hosting or processing practices change. The effective date on this page identifies the current policy. The current version remains accessible from the application Settings and this public HTTPS page. Review it when using new features; material changes will be described in the updated policy. Privacy correspondence may be sent to Barnaby1Cavendish@icloud.com.