Privacy policy

At a glance

• Muliber works without an account. We don't know who you are and don't store your library, favorites, playlists, or listening history: they stay on your device.
• The app has no ads, analytics, trackers, or third-party SDKs for data collection.
• To find music information, lyrics, and radio stations, the app contacts online services. The services and the data they receive are listed below.

What stays on your device

Your library, connected storage details, favorites, playlists, history, queue, settings, saved lyrics, music and artwork cache, and the history of downloads from links are stored only on your device. Storage passwords and access tokens are encrypted with a key held in the Android system keystore.

Android backup: the cloud backup includes only the app settings. A transfer to a new phone also moves your library, favorites, playlists, history, and artwork. Storage passwords and tokens and internal service keys are never included in either, so after a restore you sign in to your storage again.

Permissions

Access to audio files lets the app build your library from the music on your device. Notifications show the player and download progress. For folders you choose in the system window, the app gets access to those folders only. You can revoke any permission in Android settings.

Your storage and music servers

When you connect your storage (a folder on your device; a home server or NAS: SMB, DLNA, WebDAV, Nextcloud, Subsonic, Navidrome, Jellyfin, Emby; or cloud storage: Dropbox, Yandex Disk, OneDrive, Cloud Mail.ru), the app contacts that service directly to show and play your music. Muliber doesn't receive your passwords, tokens, or files: data travels between your device and the service you choose. Sign-in to Dropbox, Yandex, and OneDrive happens on the service's own page and is subject to its policies.

To find servers on your home network, the app sends standard discovery requests on the local network. These requests don't go out to the internet.

If you turn on listening history sharing in the connection settings, the app tells your music server what you listen to. This is off by default.

Online services

• MusicBrainz and Cover Art Archive. When: identifying your library and downloading artwork; you can turn this off in Settings → Recognition. They receive artist, album, and track names and catalog identifiers.
• MusicBrainz, artist search for photos. When: you search for an artist photo manually and the artist has no catalog identifier. It receives the artist name from your library or the one you type. Album recognition doesn't need to be on for this.
• Fanart.tv. When: only if you choose Search on Fanart.tv in Change photo. It receives the MusicBrainz identifier of the artist or of the members of a combined credit, and requests for previews and the image you pick.
• LRCLIB. When: only when you tap Lyrics. It receives the track title, artist, album, and duration.
• Muliber service (api.muliber.com). When: radio station catalog and chart, backup access to lyrics, backup source of music information. It receives station catalog requests; for lyrics, the same data LRCLIB receives; for recognition, artist, album, and track names, year, and catalog identifiers.
• Radio Browser, Icecast, laut.fm. When: backup radio catalogs. They receive the search query and filters.
• Radio stations. When: you listen to a station. They receive a standard request for the audio stream and logo.
• Internet Archive. When: finding and adding open music. It receives the search query and file requests.
• The site your link points to. When: only if you download music from a link or choose artwork from a link. It receives a standard request for the file at that link. The request goes directly, not through the Muliber service; the link and the downloaded files stay on your device.
• BitTorrent peers. When: only if you add a magnet link or a torrent file yourself. They receive the torrent identifier; your IP address is visible to other peers. The app doesn't upload anything.

Like any server on the internet, each of these services sees your device's IP address. Your audio files, file paths, and storage addresses and passwords are not sent to any of them.

When handling recognition requests, the Muliber service doesn't keep IP addresses or music queries in its logs. Anonymous error codes are deleted within 7 days; per-IP rate limit counters exist only in memory.

The Muliber service

• No account or persistent device identifier is used. To access the radio catalog, the app gets a temporary technical token that isn't linked to you.
• A vote for a station and, if you turn on Report station starts, a station start are counted in the overall chart as a count per station and day, without being linked to a device.
• Web server logs contain the time, page path without the search query, response code, and IP address with the last part removed. Lyrics requests aren't logged. Logs are deleted after 14 days.
• We don't sell or share this data with third parties.

Your choices

• MusicBrainz recognition, radio start reporting, history sharing with your own server, individual sources, and integrations can be turned on and off in settings.
• You can remove a connection in Sources; removing the last connection to an account or folder also removes its passwords and tokens. You can also revoke the app's access in your cloud service's own settings.
• Uninstalling the app or clearing its data removes everything stored on your device. Music you saved or downloaded to a folder you chose stays there as regular files.
• The Muliber service doesn't store data that can be linked to you; logs are deleted automatically. For questions, email privacy@muliber.com.

Children

Muliber isn't specifically intended for children and doesn't knowingly collect children's data.

Changes

We announce changes to this policy on this page and update the date at the top. Significant changes to the data the app sends come with an app update.