Sonevia Privacy Policy
Effective 30 October 2026
Sonevia is a music player for music you own. It has no accounts, no advertising, no analytics and no tracking. This page explains what stays on your device, what Sonevia sends and where, and what the developer receives.
What stays on your device
- Your music files and your library. Your playlists, favourites, ratings, play history, equalizer settings and other settings too, unless iCloud Sync is on (below).
- Sign-in details for your own music servers, kept in the device's Keychain, or in iCloud Keychain while iCloud Sync is on. For Jellyfin and Plex that is the sign-in token the server gives, never your password.
- A log of how the app behaves, kept for up to 30 days and 64 MB (never passwords, tokens or server addresses). It leaves your device only in a problem report or test-build feedback you choose to send (below).
The developer never receives your music or your library.
What Sonevia sends, and only to these places
- Your own music servers (Navidrome or other OpenSubsonic servers, Jellyfin, or Plex Media Server), if you sign in to them: to browse and play your music there, and to tell that server what you played. Jellyfin and Plex also receive a random identifier for this installation of Sonevia, so they can tell your devices apart. A server whose address starts with http:// gets this traffic unencrypted; Sonevia warns you before you sign in to one.
- Plex (plex.tv), only if you sign in with Plex: you sign in on Plex's own page, and Sonevia receives a sign-in token and the list of Plex servers you can use, under Plex's privacy policy. Sonevia never sees your Plex password.
- Apple Music, if you connect it: catalog searches and lookups, animated album covers, and which songs are your Favourites there (Sonevia reads them, and sets one when you like a song), through Apple's MusicKit and the Apple Music API (api.music.apple.com), under Apple's privacy policy.
- LRCLIB (lrclib.net): a song's title, artist, album and length, to find its lyrics.
- Wikipedia, Wikidata and Wikimedia Commons: artist and album names or catalog IDs, to show information and photos.
- ListenBrainz, only if you add your own ListenBrainz token: the songs you listen to, to your ListenBrainz account.
- AudioMuse-AI, only if you connect your own: your server's ids for songs (or a song's title and artist), to find songs that sound alike. Its API token stays in the device's Keychain.
- The developer's server (api.manasvinyadav.com), when you open Find Your Headphones in the Equalizer: a request for the list of headphone corrections, then a check for a newer list at most once a week. The whole list is downloaded and searched on your device, so the server never learns which headphones you have. Nothing else is sent, and the server keeps no IP addresses.
- The developer's feedback server, only when you report a problem or send feedback from a test build (below).
iCloud Sync
iCloud Sync keeps your playlists made in Sonevia, favourites, ratings, play history, resume points, equalizer profiles and settings the same on the iPhone, iPad and Mac signed in to your Apple Account. It is on unless you turn it off in Settings → iCloud Sync. They are stored in your own private iCloud database, in encrypted fields, under Apple's privacy policy. Only your devices can read them; the developer has no access to them. Sign-ins for your music servers and your ListenBrainz token go through iCloud Keychain instead. Your music files and downloads are never uploaded.
Purchases
Sonevia Pro (monthly, yearly or Lifetime) and its free 7-day trial are bought through the App Store, under Apple's privacy policy. Sonevia never sees your payment details or your Apple Account. Apple tells the app only which purchases this Apple Account has, and the app checks that on your device. When a trial started is kept in the device's Keychain. The developer receives no information about you from a purchase beyond Apple's own sales reports, which contain no names or contact details. Manage Subscription opens Apple's own subscriptions page (apps.apple.com).
Problem reports and feedback you send
Settings → Report a Problem (also offered when you shake your iPhone, which you can turn off there) sends your description of the problem to the developer's feedback server. Test builds of Sonevia (TestFlight) also have Settings → Send Feedback, which sends your answers there. With either go the app's version and build, the iOS or macOS version and the device model (for example "iPhone15,2", never your device's name). An email address is sent only if you type one, and is used only to reply to you.
Diagnostic information is attached only if you leave it on, and you can read all of it before sending. It describes playback, audio settings and recent errors. Passwords, tokens, keys, server addresses, email addresses and file paths are removed before it leaves your device, and again on the server.
Reports and feedback are stored on the developer's own server and read only by the developer, to fix and improve Sonevia. They are never sold or shared. Network traffic to the server passes through Cloudflare. The server keeps no IP addresses: to limit how often reports can be sent, it counts them in memory under a scrambled form of the address, which is gone when the server restarts. A report that can't be sent is kept on your device and sent the next time Sonevia opens.
Your choices
- Every service above is optional except your own music, which never leaves your device.
- To stop syncing, turn off iCloud Sync in Settings → iCloud Sync. Remove from iCloud, on the same page, deletes Sonevia's data from your iCloud; what is on each device stays there.
- To delete the log on your device, use Clear History in Settings → Report a Problem.
- To have a report or feedback you sent deleted, email the developer with its Report ID or Feedback ID (shown after sending), or the email address you gave. It is deleted for good.
Children
Sonevia is not directed at children and does not knowingly collect information from them.
Changes
If this policy changes, this page will show the new version and its date.