About this policy
Aro is a development-stage Android music app. This policy describes the app’s current behavior and this website’s preferences. It is based on the project’s data and privacy record; it is not a store privacy certification.
This website
This website does not include account registration, contact forms, or an analytics integration. Choosing a light or dark theme saves that preference in your browser’s local storage under aro-theme. Clearing this site’s browser data removes it.
App screenshots and font files are served with the website. Links to GitHub and other sites take you to services with their own privacy policies.
Data on your device
The app stores music metadata, playlists, favorites, listening history, settings, artwork caches, and connected-account session information on your device. This website does not read your app library or connected-account sessions.
Android permissions
Audio and media permissions let Aro discover songs stored on your phone. Notification and foreground-service permissions support playback controls and background playback. Optional device and provider features may use other permissions. You can manage granted permissions in Android’s app settings.
Connected services
YouTube and YouTube Music receive catalog and playback requests. Spotify receives sign-in, catalog, and playlist requests. Aro stores a Spotify session cookie and matches Spotify metadata to YouTube for audio playback; it does not stream Spotify audio.
Optional server, cloud, and AI features send requests to the service or provider you configure. Those services operate under their own terms and privacy policies. Aro is not affiliated with them.
Backups and exports
Android backup is enabled. The app’s rules exclude named provider preference stores, Spotify session DataStore, and settings DataStore because they can contain credentials.
A complete account-storage audit remains a release task. Do not assume every cache or third-party WebView or TDLib file is excluded. Exported backups and logs can contain personal library information.
Managing your data
Use disconnect or logout controls where available. Android’s app settings can clear Aro’s data or uninstall it. Clearing app data removes local app state and requires accounts to be reconnected. Exported copies and information held by external services are managed separately with those services.
Questions and security
For general questions, use GitHub Issues. Remove credentials, account identifiers, private playlist details, and sensitive filenames before posting. For security concerns, follow the project’s security reporting guide.