Privacy
Last updated: November 7, 2026. This covers bVault, bBounce, bKey and this website.
The short version
- No ads, no tracking, no analytics.
- Your music goes only where you send it: the services you connect, or the link hosts you choose.
- bKey, the optional account, keeps what you sync in the EU, and you can delete it at any time.
On your device
Your profiles, settings, playlists, contacts and offline copies are stored on your device. The services you connect (Samply, Google Drive, Dropbox, OneDrive, SoundCloud, your own server) are reached directly from your device with the access you grant them; their own privacy policies apply to what you store there.
Links you send
A Quick Link uploads the file you choose to the link host you pick (for example Catbox, Litterbox or Gofile), as a public link. Anyone with the link can download it until it expires. The player page this site shows for a bVault QR code reads the track's details from the part of the address after “#”, which browsers never send to a server.
bKey (optional)
If you create a bKey, we keep your email address (and your name and picture if you sign in with Google), and what you choose to sync: your library's organisation, playlists, contacts, statuses and, unless you turn it off, your connections to services, encrypted. It's stored with Supabase in the EU (Frankfurt). Deleting your bKey deletes all of it. We never sell or share it.
Feedback
If you send feedback from the app, it opens a GitHub issue with what you wrote and, only if you tick it, a diagnostics report with server addresses hidden.
Contact
Questions about your data: open an issue.