AxoPlayer Privacy Policy
Last updated: 20 October 2026
This policy explains how the iPhone app AxoPlayer (the "App") processes users' personal data, in accordance with EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003. AxoPlayer is a music player built on Apple Music: it keeps a collection of albums in their original edition and offers streams of songs ("flow").
Account shared with AxoBeat. AxoPlayer and AxoBeat use the same account: signing in to either with the same credentials makes you the same user in both, and there is a single subscription. Data processed by AxoBeat is covered by its own policy.
1. Data controller
Gabor Adorni (sole proprietorship)
Address: Via Caduti di Via Fani 9, 40060 Dozza (BO), Italy
Tax code: DRNGBR90A10L826I
VAT number: IT04109601205
Email: info@axobeat.com
2. Data we process
2.1 Account
You can search and listen without an account; signing in is needed to save things (collection, flow, subscription). When you sign in we process:
- Email address (including Apple's "Hide My Email" relay address)
- Name, if provided by Google or Apple
- A unique user identifier (Firebase UID)
Sign-in methods: email and password (the password is handled by Firebase Authentication and never seen by us), Sign in with Google, Sign in with Apple.
2.2 Collection
- The albums you add (Apple Music catalog identifiers), the edition you choose for each, and the date and way they were added (search or import)
- The reports you send about an album ("Report a problem"): the reasons you pick, the optional note you write and the Apple Music storefront. We read them to fix the album for everyone
Album information (titles, tracks, covers, editions) is a catalog shared by all users and is not about you.
2.3 Flow
- When you ask for a flow we send our server the controls you chose (popularity, energy, mood, genres) and the songs and artists recently played in the flow, so they are not repeated. They are only used to build the response and are not stored
- The number of flow blocks requested each day, for the free plan limits
2.4 Apple Music
With your permission, the App uses Apple Music (MusicKit) to search the catalog, play songs from your subscription and, if you ask, read the albums in your library to import them. Your library is read on the device: our server only receives the catalog identifiers of the albums you choose to import. Your Apple Music token stays on the device and we never receive it. Your Apple Music subscription is between you and Apple.
2.5 Subscription
For the Pro subscription (shared with AxoBeat Premium), our provider RevenueCat processes the customer identifier (your UID), the purchased product, the subscription status and events, technical device information and approximate country. Payment happens on the App Store: card details stay with Apple.
2.6 Technical and security data
- IP address and technical request data, logged by Firebase and Google Cloud servers for security and operation
- App integrity attestation (Firebase App Check with Apple App Attest), to reject requests that do not come from the App
2.7 Content loaded by the device
To show covers and information, the App connects directly to: Apple (Apple Music catalog and artwork), Wikipedia and Wikidata of the Wikimedia Foundation (album history and personnel), and the Internet Archive's Cover Art Archive (original covers). These requests only contain the album identifier, but like any network request they reveal the device's IP address to those services. No account data is sent.
2.8 What we do not process
- No usage analytics, no advertising identifiers, no cross-app tracking, no ads
- No location, contacts, photos, microphone or health data
- We do not record your listening history
3. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Account and sign-in | Email, name, UID | Performance of a contract (Art. 6.1.b GDPR) |
| Collection, import and flow | Albums, choices, flow controls, daily count | Performance of a contract |
| Subscription and free plan limits | Customer identifier, product, subscription status and events | Performance of a contract and legal obligations |
| Security and abuse prevention | IP, technical data, App attestation | Legitimate interest (Art. 6.1.f GDPR) |
4. Minimum age
The App is for people aged 14 or over (Art. 2-quinquies of the Italian Privacy Code). If we learn that a child under 14 created an account without parental consent, the account will be deleted.
5. Retention and deletion
Data is kept while the account exists. You can delete it from the App (Account → Delete account). The account is the same as AxoBeat's: deleting it also deletes your AxoBeat profile. On deletion:
- Collection, choices and flow counts: removed from active systems, usually within a few hours
- Album reports: kept to fix the catalog, but no longer linked to your account. If you wrote personal data in a note, you can ask us to delete it (section 10)
- Provider backups: removed within 30 days according to the providers' schedules
- Technical logs: kept for up to 90 days, then deleted
- RevenueCat data: the deletion request is forwarded to the provider, except for what must be kept by law. An active subscription is not cancelled by deleting the account: manage it in iOS Settings
6. Providers
We use providers that process data as processors or, where applicable, as independent controllers:
- Google Ireland Limited: Firebase Authentication, Firebase Data Connect (Cloud SQL), Cloud Functions, App Check, Remote Config, Hosting. Main servers in the europe-west1 region (Belgium). Firebase privacy
- Google LLC: Sign in with Google. Google privacy
- Apple Distribution International Limited: Apple Music and MusicKit, Sign in with Apple, App Store, TestFlight. Apple privacy
- RevenueCat, Inc.: subscription management. RevenueCat privacy
- Wikimedia Foundation, Inc. and Internet Archive: public content loaded by the device (section 2.7), with no account data
For artist information our server also uses MusicBrainz, ListenBrainz and Last.fm: we do not send them any user data.
7. Transfers outside the EU
Some providers (in particular RevenueCat, and Apple, Google, Wikimedia and the Internet Archive for direct requests) may process data in the United States or other countries outside the European Economic Area, on the basis of the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, where the recipient participates.
8. Your rights
Under Articles 15-22 GDPR you can request access, rectification, erasure (also directly from the App), restriction and portability of your data, and object to processing based on legitimate interest. You can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the authority of your country. To exercise your rights write to info@axobeat.com: we reply within 30 days.
9. Changes
Updates are published on this page with the date of the last change. Material changes are announced in the App or by email.
10. Contact
Email: info@axobeat.com