Privacy Policy

Introduction

This Privacy Policy explains how Cloudist Development ("we", "us", "our") collects, uses and protects your information when you use Cloud Music Player: Cloudist — the application published on Google Play under the package name com.mree.cloudist.play and shown on your device as "Cloudist Play".

The same policy covers the iOS, macOS and web versions of the application and the website at play.fromcloud.ist. It applies to every version of the app and to every country in which the app is distributed.

Cloudist is a player for music you already own: it connects to your own cloud storage accounts and to the audio files on your device. We do not host, sell or stream a music catalogue of our own.

Information We Collect

The app is built to collect as little as possible. Depending on the features you choose to use, the following may be processed:

• Account information — If you sign in, we process the e-mail address and account identifier provided by Firebase Authentication (e-mail link, Google Sign-In or Sign in with Apple). Signing in is optional; the app is fully usable without an account.
• Cloud storage credentials — When you connect Google Drive, OneDrive, Dropbox, Box, Yandex Disk, a WebDAV server or S3-compatible object storage, authorisation is handled by that provider (OAuth 2.0, or credentials you enter yourself). Access tokens, refresh tokens and storage passwords are held only in the app's local storage on your own device and are never transmitted to or stored on our servers.
• Music library metadata — Track titles, artists, albums, folder names, playlists, play counts and last-played timestamps. This is kept locally on your device. It is uploaded to Google Firebase Firestore only when you start a backup yourself; there is no automatic library sync.
• App preferences — Theme, language and equalizer settings, synchronised to your account when you are signed in.
• Diagnostics and usage data — Firebase Analytics and Firebase Crashlytics collect anonymous usage statistics, crash reports, device model, operating system version and app version so that we can find and fix defects.
• Purchase data — RevenueCat and the app store handle your subscription status. We never receive or store payment card details.
• Advertising identifiers — Google AdMob may process an advertising identifier in order to serve ads. This does not happen if you hold an ad-free subscription.
• Sign-in history — Device type and timestamp of sign-ins, recorded against your account for security purposes.
• On-device audio files — With your permission, the app reads audio files stored on your device so that it can play them. Their contents are never uploaded.

We do not collect your precise location, contacts, calendar, messages, photos, health data, or the contents of your audio files.

How We Use Your Information

• To give you access to, and play, the music files held in your own cloud accounts and on your device.
• To build and display your library, playlists, lyrics and playback history.
• To keep your preferences — and, when you ask for it, your library backup — available across your devices.
• To operate subscriptions and to remove advertising for subscribers.
• To diagnose crashes and improve the stability and performance of the app.
• To answer the support requests you send us.

We do not sell your personal data, and we do not use it for any purpose unrelated to running the app.

Sharing and Third-Party Services

We do not sell or rent personal data. Data is shared only with the service providers below, and only as far as the feature you are using requires:

• Google Firebase (Authentication, Firestore, Analytics, Crashlytics) — accounts, optional backup, diagnostics.
• Google AdMob — advertising in the free version.
• Google Drive API, Microsoft Graph API (OneDrive), Dropbox API, Box API, Yandex Disk API, and any WebDAV or S3-compatible endpoint you configure yourself — access to your own files.
• RevenueCat — subscription and in-app purchase management.
• Google Cast — playback to Chromecast devices on your local network.
• LRCLIB — optional lyrics lookup by track title and artist, when no lyrics are embedded in the file.

Each provider processes data under its own privacy policy. We may also disclose data where the law requires it.

Data Storage and Security

• Your audio files stay in your own cloud accounts or on your device. We never copy them to our servers.
• Files downloaded for offline playback are stored only on your device.
• Data in transit is protected with HTTPS/TLS. Data held in Firebase is protected by security rules that restrict every record to the account that owns it.
• Cloud storage access tokens, refresh tokens and passwords never leave your device.
• Data processed by Google Firebase may be stored on servers outside your country. Google applies appropriate safeguards for such transfers.

Data Retention and Deletion

We keep data only for as long as your account exists. You can delete it at any time:

• In the app — Settings → Delete my account. You confirm by typing your e-mail address, and your account together with all synced accounts, tracks, playlists and sign-in history is removed.
• By e-mail — write to support.play@fromcloud.ist from your registered address. Requests are completed within 30 days.
• Local data — uninstalling the app removes everything stored on the device.

Anonymous, aggregated diagnostic data that can no longer be linked to you may be retained for statistical purposes.

Permissions the App Requests

• Internet and network state — to reach your cloud storage accounts.
• Read audio media — optional; only so that the app can play music stored on your device.
• Foreground service (media playback) and wake lock — to keep playing while the app is in the background or the screen is off.
• Advertising ID — used by Google AdMob to serve ads when you do not hold an ad-free subscription.

You can withdraw any of these permissions at any time in your device settings.

Advertising

The free version of the app shows banner, interstitial and rewarded ads through Google AdMob. Rewarded ads are only ever shown after you have explicitly chosen to watch one.

Google may use an advertising identifier to personalise ads. You can turn off ad personalisation in your device settings, or remove advertising entirely with an ad-free subscription. Google's advertising practices are described at https://policies.google.com/technologies/ads.

Children's Privacy

The app is not directed at children under 13 years of age, or under the higher minimum age that applies in your country. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Your Rights

Depending on where you live — for example under the GDPR in the European Economic Area and the United Kingdom, the KVKK in Türkiye, or the CCPA in California — you may have the right to access, correct, delete, export or restrict the processing of your personal data, to object to processing, and to withdraw consent.

To exercise these rights, write to support.play@fromcloud.ist. In addition, you may at any time:

• disconnect any cloud account from the Accounts screen in the app;
• revoke the app's access from your cloud provider's own security settings;
• use the app without signing in at all, in which case nothing is synced and all data stays on your device.

You also have the right to lodge a complaint with your local data protection authority.

Changes to This Policy

We may update this policy from time to time. The current version is always published at https://play.fromcloud.ist/privacy, and the date at the top of this page shows when it last changed. Material changes will also be announced inside the app.

Contact Us

If you have any question about this policy or about how your data is handled:

• Developer: Cloudist Development
• E-mail: support.play@fromcloud.ist (also support@fromcloud.ist)
• Website: https://www.fromcloud.ist