PPrivacy
P is a music player. It plays music from Apple Music, Spotify and NetEase Cloud Music using your own accounts. This page says what leaves your phone, where it goes, and what is kept.
No account with us
You don't sign up for P. To keep the service fair, P creates a random identifier for your phone and sends it with requests to our server, which uses it only to apply a daily allowance. It isn't linked to your name, email or music accounts.
Your music services
- Apple Music is played through Apple's MusicKit on your phone. Nothing about it goes to our server.
- Spotify: P signs in with Spotify and keeps its sign-in on your phone, in the iOS Keychain. P talks to Spotify directly and to the Spotify app on your phone.
- NetEase Cloud Music: your NetEase sign-in is kept on your phone, in the iOS Keychain. Requests to NetEase, carrying that sign-in, pass through our server on their way to NetEase. Our server does not store them.
- [untitled]: your [untitled] sign-in is kept on your phone, in the iOS Keychain. Requests for your library and your demos' audio, carrying that sign-in, pass through our server on their way to [untitled]. Our server does not store them. Your demos stay out of your listening diary, what assistants can read, and lyric lookups.
The AI features
Some features use Claude, an AI model by Anthropic: the clerk's picks, notes on your listening sessions and eras, notes on lyric lines you keep, sung translations of lyrics, and captions about parts of a song. For these, P sends what the feature needs to our server, which passes it to Anthropic: song titles and artists, lyrics, the times of your listening sessions, what you type to the clerk, and a photo if you choose to give the clerk one. Our server does not store this. Anthropic handles it under its privacy policy and does not use it to train its models.
Where and when
If you allow it, P remembers the city you listen in (only the city, from your phone's coarse location) so your Shelf and playlists can say "the last time you were in Tokyo". If you switch on "Look at my calendar", the clerk reads what's next today on your phone; the title and time of an upcoming event, and the city, may be sent to the AI to make a playlist for it or the morning line on the clock. A photo you hand the clerk is read on your phone for the date it was taken.
Your assistant
If you connect an assistant such as Claude or ChatGPT (Settings → Connect an assistant), P keeps a copy of your listening diary (songs, artists, times, and cities) on our server so your assistant can read it when you ask, and passes the songs your assistant chooses back to P. The copy is kept only while an assistant is connected; disconnecting deletes it. What your assistant does with what it reads is covered by its own privacy policy. Without a connection, the diary never leaves your phone.
Stations
If you invite a friend or accept an invite, you get a station. While you're on air with P open, the people on your station can see and hear what you're playing: the song, artist, album and how far in you are. Each of them plays it from their own music service; no audio passes through our server. A demo from [untitled] goes out with a link to its audio that works for about an hour, so people on your station can hear it from [untitled] without an account of their own. If you leave P while music is playing, your station can run on for up to 30 minutes from the songs that were next. Our server keeps the name you chose, who is connected to you, and the last song you played, which those people can see. What's playing right now, and what was next, is held only in memory. If you open a public radio, anyone with its link can do the same; you see how many are listening, not who. Go off air any time from Stations, or leave in Settings → Stations, which deletes all of this. If a song can't be found by its name on a listener's service, its title and artist may be sent to the AI to find what else it's called.
On your phone only
Your listening history, the lyric lines you keep, notes written about them, the photos you hand the clerk (kept with their records on your Shelf), and your settings are stored on your phone and are not sent anywhere except as described above. Deleting P deletes them.
P uses the camera only when you open it in Cover Flow to take a photo for the clerk.
Our server's records
Our server keeps a short operational log: the time, which feature was used, whether it worked, and the first eight characters of your phone's random identifier. It keeps no song lists, lyrics, photos, text you type, or sign-ins.
Children
P is not directed at children under 13.
Contact
Paradigm Study Inc. · [email protected]