Privacy

Effective October 12, 2026.

There is no analytics SDK in the app, no crash reporter, no account to make with me, and no server of mine for the app to talk to.

What stays on your device

Your library — track and album metadata, artwork, play counts and ratings that your own server reports, and what you were listening to when you last closed the app — is kept on the device, and in your device's backups if you make them. I receive no copy of it, and deleting the app deletes it from the device.

Usernames and passwords for the servers you connect are held in the iOS Keychain. Removing a server in Sillon removes them from the Keychain. Deleting the app does not, because iOS keeps an app's Keychain items after the app is deleted — remove your servers first if you want them gone.

You can carry your servers to another device by exporting a provider file. It holds their usernames and passwords unencrypted, and it is a file you create, hold, and pass on yourself.

What leaves your device, and where it goes

Sillon connects to the music servers you configure — an MPD server, an OpenSubsonic-compatible server like Navidrome, or a Kodi instance you gave it the address of — and otherwise only to Apple, as described below. What those servers log is between you and them.

If you use Apple Music, the app talks to Apple through MusicKit using the Apple Account already signed in on your device. That traffic is Apple's, under Apple's privacy policy; I neither see it nor receive anything from it.

Local Files reads the app's own music folder and any folders you explicitly add. It reads them; it does not send them anywhere.

The subscription

Sillon's subscription is bought through the App Store, and whether you have one is checked on your device against Apple's records. I do not receive your name, your email, or your payment details from Apple.

Tracking

None. Sillon does not track you across apps or websites, contains no advertising or attribution frameworks, and asks for no tracking permission. The app's privacy manifest declares no collected data types and no tracking domains.

Changes

If this policy ever changes it will be because the app changed, and the change will be described here rather than announced as a new version of a document.

Asking

Sillon is sold by trinque.dev LLC, and “I” and “me” on this page speak for it. Write to hello@trinque.dev. If something here is unclear, I would rather fix the wording than have you guess.