Auralis
GitHub
Back to Home

Privacy Policy

Effective Date: November 10, 2026

1. Introduction

Auralis ("we", "our", or "the app") is a free, open-source music player for Android that streams from YouTube Music. This policy explains what data the app handles, where it goes, and how you can delete it.

In short: Auralis has no advertising or analytics SDK. Most library data stays on your phone. Signing in is optional. Streaming, lyrics, update notifications and optional integrations still involve network services, as described below.

2. Data That Stays on Your Phone

Your library, playlists, liked songs, play history, listening stats, settings, song cache, downloads and saved lyrics are stored on your device. Without sign-in, your library and stats are not backed up to your account. Searches, playback, lyrics lookups, update notifications and optional features still contact external services. Listen Together uses Firebase even if you have not signed in with Google or email.

3. If You Sign In (Optional)

You can sign in with Google, or with an email and password, through Firebase Authentication (a Google service). When you're signed in, the following is stored in Google Firebase so you can restore it on a new phone:

  • Your account details: email address, name and profile photo from your sign-in.
  • Your playlists, liked songs and saved artists.
  • Your listening stats: which songs you played, when, and for how long.

We use this account data for sign-in, backup and restoration, and do not sell it or use it for advertising. Google Firebase processes it to provide those features. Listen Together room data is described separately below.

4. Listen Together

When you create or join a Listen Together room, your display name, the room code, the song playing, playback position, the room's queue, recommendations and votes are stored in Firebase and visible to everyone in the room. The rebuilt 1.1.1 app attempts to remove a listener's membership and votes when they leave, and to delete room data when the host closes the room; it retries some failed cleanup. If the app is force-stopped or a network failure prevents cleanup, room data may remain until a maintainer removes it.

5. Services the App Connects To

To play music and provide its features, Auralis sends some information to these services. Each has its own privacy policy.

  • YouTube and YouTube Music: your searches and the songs you play, to find and stream music. See the YouTube Terms of Service and the Google Privacy Policy.
  • JioSaavn (High Quality audio): when High Quality is on, the song's title and artist are sent to JioSaavn to look for a 320kbps copy of the same recording. If there is one, the audio streams from JioSaavn; otherwise it streams from YouTube Music.
  • Lyrics services (such as LRCLIB, Musixmatch, NetEase, KuGou, Genius and JioSaavn): the song's title, artist, album and length, to find lyrics.
  • Apple iTunes Search: the song's title and artist, to find its album.
  • Wikipedia: an artist's name, to find an artist photo.
  • Song recognition (optional): when you use it, a short acoustic fingerprint of what the microphone hears (not the recording itself) is sent to Shazam to identify the song.
  • Voice search (optional): speech is handled by the Android speech recognition service selected on your device. Depending on the device and service, recognition may happen on-device or through that provider's servers.
  • Discord (optional): if you connect Discord, the song you're playing is shown on your Discord profile. Discord sign-in is handled by Discord's official SDK.
  • AI lyrics translation (optional): the song's lyrics and your API key are sent to the provider you choose (for example OpenAI, Anthropic, Google Gemini or DeepL) when you request translation. The app saves the key on your device and does not include it in your Auralis account backup.
  • Playlist import (optional): the Spotify or YouTube playlist links you paste are read from those services. For your own YouTube playlists, the app uses the Google access you grant, which you can revoke on your Google Account permissions page.
  • Device sync (optional): when you turn on device sync from the device picker while signed in, the app keeps a live connection to Auralis's own sync server, which runs on Cloudflare Workers. It sends your Firebase sign-in token so the server knows which account you're using, a random ID for this install, the device's name (its model, or a name you set), whether it's a phone or tablet, and the app version. While sync is on, it also sends the song playing, the playback position and state, and the queue, so your other devices can show and control playback. The server stores the latest playback session, queue and device list for your account. See Cloudflare's Privacy Policy.
  • Updates: the app checks GitHub for new versions. Firebase Cloud Messaging registers an app/device token and subscribes to update and announcement topics, including before you sign in. Google processes the token to deliver notifications.

6. Device Permissions

  • Internet: to stream music and fetch lyrics.
  • Background playback (foreground service, wake lock): to keep music playing with the screen off.
  • Notifications: for playback controls, download progress and update notices.
  • Microphone: when you use song recognition or voice search.
  • Install apps: only to install an update you choose to download in the app.
  • Run after restart: used by Android's background-task system to resume scheduled work after your phone restarts.

7. Ads, Analytics and Service Data

Auralis contains no advertising, analytics or crash-reporting SDK. Firebase, Discord and other external services process the information needed for the features described above under their own policies. This is why we do not describe all network activity as zero telemetry.

This website: the main page of this website uses Vercel Web Analytics to count visits and page views. For each page view it may record the time, the page URL, the referring site, your approximate location, and your browser, operating system and device type. It uses no third-party cookies. Vercel identifies visitors with a hash of the incoming request, discards it after 24 hours, and gives us aggregated statistics only. See Vercel's analytics privacy documentation. This applies to the website only, not the Android app.

8. Deleting Your Data

Account backups remain in Firebase until you delete the account or request deletion. Rooms that are not closed properly may remain until a maintainer removes them.

  • On your phone: clear your song cache and downloads in Settings › Storage, or remove everything by clearing the app's data or uninstalling it.
  • Listening stats: "Clear stats" in the Stats screen deletes your stats from your phone and, if you're signed in, from your account.
  • Your account and backed-up library: signing out does not delete data stored in Firebase. In the rebuilt 1.1.1 app, tap Delete account in your Profile to delete your account and associated cloud data, including backed-up playlists, liked songs, saved artists, listening stats and Listen Together references. You'll confirm it's you first. If deletion fails or you need help, contact us privately at the email below.
  • Device sync: the sync server keeps only your account's latest playback session, queue and device list. Each update replaces the last, so it holds no listening history. Turning sync off or deleting your account in the app doesn't clear it, so email auralis018@gmail.com and we'll delete it.
  • On older versions: email auralis018@gmail.com to request deletion. We will arrange a private way to verify the request.

9. Children's Privacy

Auralis is not directed at children under 13, and we do not knowingly collect personal information from children.

10. Open Source

All of Auralis's own code is open source under the GPL-3.0 license and can be read on our GitHub repository. The Firebase and Discord SDKs mentioned above are closed source.

11. Changes to This Policy

If this policy changes, we'll update the date at the top and mention significant changes in the release notes.

12. Contact

For privacy questions, access or deletion requests, email the Auralis maintainers at auralis018@gmail.com. You can also open a general issue on our GitHub Issues page, but do not post account details or other personal data there.