Privacy Policy

1. At a glance

• No account and no sign-in. We do not run a server for the app and do not receive your data.
• STMP connects only to the SMB servers you add and to the stream addresses found in your own playlist files. Nothing else leaves your device.
• Share passwords are kept in the system keychain on your device.
• Your library, cover art, playlists, settings and offline copies stay on your device.
• No analytics, no advertising, no advertising identifier (IDFA), no tracking across apps or websites.

2. Your music sources

You choose where STMP finds music. A source is either an SMB share on your network (a NAS, a router with a USB drive, another computer) or, on iPhone, iPad and Mac, a folder you pick on your device. STMP only reads from a source: it lists folders, reads the tags and cover art of your music files, and plays them. It never writes, renames or deletes anything in a source.

For a local folder, the app keeps the system's permission to read the folder you picked, so it is still available after a restart. It cannot read other folders. A small demo library of original music is built into the app, so it needs nothing from the internet to start playing.

To find and reach shares on your network, the system asks you for Local Network access. You can change it at any time in Settings → Privacy & Security → Local Network → STMP (on the Mac: System Settings → Privacy & Security → Local Network).

3. Network connections

STMP makes only these connections, and only because of something you set up:

• SMB servers you add. The app connects to the server, share and username you entered, with your password, to list folders and read and play your files. These servers are yours or chosen by you; we receive nothing from them.
• Streams in your playlists. When a playlist file in your library, or one you add, contains internet addresses (for example internet radio), the app connects to those addresses to play them. While a stream plays, it also asks the same station for the current song title about every 15 seconds, trying the secure https version of the address first. The station sees your IP address and standard request information, as with any internet radio player; its own privacy policy applies.

The app has no server of ours to talk to, and it sends no data about you or your music anywhere else. It does not look up cover art, lyrics or tags online: everything it shows comes from your own files.

Apple provides the App Store and TestFlight, downloads and updates. If you have chosen to share analytics with app developers in your device's privacy settings, Apple may share anonymous crash reports and performance data with us. If you test STMP through TestFlight, feedback and crash reports you choose to send reach us through Apple together with the details TestFlight attaches. We use them only to fix problems.

4. Passwords

The password for an SMB share is stored in the system keychain on your device, one entry per source, and is used only to sign in to that share. It is never sent anywhere else, never written into the app's files or into playlists you save, and never sent to us. A source with an empty username connects as a guest and needs no password.

5. What the app stores

Everything below is kept in the app's own storage on your device, protected by the system's app sandbox, and is never sent to us:

• Source connections: each source's name, server, share, folder and username, or the folder you picked on your device.
• Library cache: the folders and tags of your music files, so the library opens quickly and only changed files are read again.
• Cover art cache: downscaled copies of album covers from your files, and covers of files you added to the playlist directly.
• Settings: the current source, the playlist modes, the tags chosen for filtering and, on the Mac, the equalizer and amplifier settings.
• Offline copies (iPhone and iPad): when you choose Download for Offline, the files of that folder are copied into the app's own Documents storage on your device, never into your source.

On Apple TV, the system gives apps no permanent file storage: source connections and settings are kept in the app's settings storage, the library and cover art caches in the system cache, which Apple TV may clear (the library is then scanned again), and passwords in the Apple TV keychain.

STMP does not ask for your name, email address, phone number, location, contacts, photos or Apple Music library.

6. Widgets and Now Playing

On iPhone and iPad, the Lock Screen and Home Screen widgets show what is playing: title, artist, album, folder, the playing state, the position in the playlist, the format and the cover. The app shares this with its widget through an app group, a storage area on your device that only STMP and its widget can read.

On every platform, STMP tells the system what is playing so it appears on the Lock Screen, in Control Center and on connected headphones and remotes, and so their play, pause and skip buttons work. This is handled by the system on your device.

7. Files you add and save

You can add audio and playlist files to the playlist from the Files app (iPhone and iPad) or from the Finder and an open dialog (Mac). STMP only reads the files you choose.

When you save a playlist (iPhone, iPad and Mac), STMP writes an M3U8 file where you choose. It lists the titles and lengths and the location of each entry: a file path for a local folder, an smb://server/share/path address for a share, or the stream address. It contains no passwords. Where that file goes next is up to you.

8. Analytics and tracking

• No analytics, advertising or crash-reporting SDKs are included in the app.
• The app shows no ads, does not use the advertising identifier (IDFA) and does not show an App Tracking Transparency prompt.
• We do not sell or share personal data, because we do not collect any.

9. Deleting your data

Deleting a source in the app removes its connection, its password from the keychain and its library and cover art caches. Offline copies are removed in Downloads, one folder at a time with Remove Download or all at once with Delete All Downloads. Deleting the app removes everything it keeps in its storage on that device. The system may keep keychain entries after an app is deleted, so delete your sources in the app first if you want the passwords gone at once.

We hold no copy of anything, so there is nothing for us to delete on our side. Your music in your sources is never touched, and playlists you saved stay wherever you saved them.

10. Children

STMP does not collect personal data from anyone, including children. It has no chat, no sharing with other users and no public profiles.

11. Changes to this policy

If a future version of STMP adds a feature that sends data over the internet or uses a third-party service, for example looking up cover art online, we will update this policy before that version is released and describe exactly what is sent, why, and to whom. The "Last updated" date above moves forward whenever this policy changes. The current version is always at stmp.anapps.store/privacy.

12. Contact

STMP is made by A&N Apps. Questions about this Privacy Policy:

anapps.team@gmail.com