隐私政策
本文的法律约束版本为土耳其语和英语版本；以下显示英语版本。
Version: 2026-11-10
In short
- Your music files, library, playlists and play history stay on your phone; they are never uploaded to any server.
- The app is free and supported by Google AdMob ads. Personalized ads are shown only if you consent; otherwise you see non-personalized ads. You can change your choice at any time in Settings → Privacy → Ad preferences.
- The freeRASP (Talsec) security component and Firebase App Check are used to verify that the app is genuine and running safely. They process the security state of the device and app, not your identity.
- An account is optional (sign in with Google or Apple). If you create one, only your profile and (if you choose) your settings are backed up to your own account. Playlists are not sent to the cloud. Your device name and birth date are stored encrypted.
- We do not sell data. No separate analytics or tracking tool is used.
Data that stays on your phone
Music library, playlists and their covers, play history and counters, equalizer and other settings, downloaded lyrics, known DLNA/Bluetooth devices and resume position stay on your phone. App data is excluded from automatic phone backups (Google Drive/iCloud); use Settings → Back up to move it.
Data that leaves your phone
Ads (Google AdMob, even without signing in): to show ads, cap their frequency and prevent fraud, device and app information, approximate location derived from your IP address and ad interactions are sent to Google. The advertising ID (Android advertising ID / iOS IDFA) is used only with your permission; on iOS this permission is requested through Apple's App Tracking Transparency prompt. How Google uses this data: policies.google.com/technologies/partner-sites
Security (freeRASP by Talsec, even without signing in): security information such as whether the app was repackaged, whether the device is rooted/jailbroken, or whether a debugger or hooking tool is present; an anonymous app/device instance ID; approximate location (country, region, city) and network operator derived from your IP address. This data is anonymous and is not linked to your identity.
App verification (Firebase App Check): when account features are used, an attestation token produced by Apple App Attest / Google Play Integrity is sent to Firebase to prove the request comes from the genuine app.
Account (only if you sign in, Firebase): name, email, profile photo URL, user ID, encrypted birth date, consent records, (if you choose) your settings, encrypted device name, app version and last sign-in time.
Local network and nearby devices: with Cast, DLNA and AirPlay the song is sent directly to your device on the local Wi-Fi. Listening in sync connects to nearby phones without the internet.
Lyrics: only if you tap "Find online", the song's title, artist, album and duration are sent to LRCLIB (lrclib.net); found lyrics are saved only on your phone.
Website
Visitors to musicapp.karapplication.store are not tracked; no advertising or analytics cookies are used. If you fill in the contact form, your name, email and message are kept only to answer you and are deleted within 12 months at the latest. To prevent abuse, an irreversible hash of your IP address is kept; the IP address itself is not stored.
Permissions
Permissions to read music files, notifications, Bluetooth/nearby devices, local network and (on iOS) the Apple Music library are used only for the related feature. The advertising ID permission is requested only for personalized ads.
Children
The app is not designed for children under 13; you must be at least 13 to create an account.
Deletion and your rights
Settings → Account → "Delete account" permanently deletes all account data in the cloud. You can withdraw your ad consent in Settings → Privacy. Details and how to make a request: KVKK Notice.
Contact: ahmetkar.1258@gmail.com