Privacy Policy

Last updated: April 18, 2026

NaviBeat is a client application for Navidrome and OpenSubsonic-compatible music servers. This policy explains what data the app stores and what, if anything, leaves your device.

What data NaviBeat stores on your device

• Server URL: stored in SwiftData (local device storage) to reconnect automatically at launch.
• Username: stored in SwiftData alongside the server URL.
• Password: stored in the iOS/tvOS Keychain with the kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly protection class. It never leaves the device in plaintext.
• Playback history: a local log of which tracks you have played and when, stored in SwiftData. Used to power discovery shelves (Recently Played, On This Day, etc.). Not transmitted to any third party.
• Recent searches: the last 10 search queries, stored in UserDefaults. Cleared when you delete the app.
• Settings: playback preferences (scrobble toggle, gapless prefetch, bit rate, audio format), stored in UserDefaults.

What leaves your device

• Requests to your Navidrome server only. NaviBeat sends API requests (search, browse, stream) exclusively to the server URL you configure. Your server is under your control.
• Scrobbling (optional). If you enable the “Submit play history” setting, NaviBeat calls your Navidrome server’s scrobble endpoint after each track. NaviBeat itself never scrobbles directly to any external service: if your Navidrome server forwards scrobbles to Last.fm or ListenBrainz, that’s a server-side configuration entirely under your control.
• Last.fm integration (optional, opt-in). If you connect your Last.fm account in Settings → Last.fm, NaviBeat reads from the Last.fm API on your behalf to surface listener counts, similar artists, your listening stats, year-in-review, and other taste-intelligence features. NaviBeat never writes scrobbles directly to Last.fm. Connecting Last.fm is fully optional: the app works completely without it. See the Last.fm page for the full feature list.
• Nothing else. NaviBeat contains no analytics SDK, no crash reporter, no advertising framework, and no telemetry. Zero data is sent to the developer. The only services NaviBeat ever talks to are the ones you sign in to.

Data retention

All data NaviBeat stores lives on your device. Deleting the app deletes all NaviBeat data, including credentials, playback history, and settings. NaviBeat does not store anything server-side.

Children

NaviBeat does not knowingly collect data from children. The app has a 4+ age rating on the App Store.

Changes to this policy

If this policy changes, the updated version will be posted at this URL with a revised “Last updated” date.

Contact

Privacy questions: support@navibeat.app