Privacy Policy

Mynah for iPhone and iPad · Effective 12 October 2026

The short version. Mynah has no user accounts and no server of its own. It collects no personal information, contains no analytics, no crash reporting, no advertising identifier and no third-party SDKs. Mynah contacts the music server you point it at; Wikidata and YouTube when you open an artist’s page, to find that artist’s own accounts and newest videos; and Apple when you make a purchase.

Who is responsible

Mynah is made by Aditya Sreedhar, an independent developer. This policy covers the Mynah app for iOS and iPadOS and this website. Questions go to mynah@theadipost.com.

What Mynah stores, and where

Everything below is kept in Mynah’s own storage on your device. None of it is transmitted to the developer, because there is no developer-operated server to transmit it to.

• Your server addresses and username. The home address, and the away-from-home one if you give it, kept in the app’s settings so it can reconnect.
• Your password. Kept in the iOS keychain, in Mynah’s own keychain item. It is used only to sign requests to your server, using the Subsonic token scheme (a salted hash), so the password itself is not sent with each request.
• Covers, album lists and lyrics fetched from your server, cached so the library opens without waiting and shows what is downloaded when the server cannot be reached.
• Artists’ accounts and videos, as Wikidata and YouTube returned them, cached on the device: the accounts for up to a month, the list of videos for twelve hours.
• Downloaded albums, if you choose to download any, as audio files in the app’s Application Support folder, excluded from iCloud backup.
• Your settings. Vinyl style per album, speed, surface noise, the visual behind the record, streaming quality, and the one-time hint you have already seen.

What Mynah sends, and to whom

Your music server

Mynah sends requests to the Navidrome or Subsonic server you configure, at its home address or its away-from-home one, whichever answers, over the network you are on. Those requests carry your username, a per-request authentication token, and what you are asking for: the album list, a cover, a stream, the words to a song, a search, a star, a playlist change. If scrobbling is on, Mynah tells your server when a song starts and when it has played through, so your server can keep your listening history; that history stays on your server. Your server’s own privacy practices are its administrator’s, which is usually you.

Wikidata

When you open an artist’s page and that artist’s files carry a MusicBrainz ID, Mynah asks Wikidata (wikidata.org, run by the Wikimedia Foundation) which item has that ID, and then for that item’s name and accounts. The requests carry the MusicBrainz ID and the Wikidata item number, and name the app and its version; nothing else about you or your library goes with them. Wikimedia sees your IP address, under its own privacy policy.

YouTube

If Wikidata names the artist’s YouTube channel, Mynah reads that channel’s public feed from youtube.com and loads the stills of its newest videos from i.ytimg.com. Those requests carry the channel’s or the video’s ID, and Google sees your IP address, under its own privacy policy. A video or an account you tap opens in its own app or in Safari, under that service’s policy.

Apple

If you buy Mynah Lifetime, the purchase is handled by Apple through the App Store under Apple’s privacy policy. Mynah receives only the fact that the purchase is active. Mynah also hands the system what it needs for the lock screen, the Dynamic Island and AirPlay: the title, artist, album and cover of what is playing.

No one else

Mynah contains no analytics, no crash reporter, no advertising, no tracking, and no third-party code that talks to the network. It does not read your contacts, your photos, your location or your Apple Music library.

Local network

iOS asks for permission before an app can talk to devices on your local network. Mynah asks for it because your server is usually on your local network. Mynah uses that permission only to reach the server addresses you typed in; it does not scan the network or discover other devices.

Data retention and deletion

Everything Mynah stores is on your device and under your control. Remove All Downloads in Settings removes downloaded albums. Deleting the app removes everything. Nothing needs deleting on the developer’s side, because nothing was ever collected there.

Children

Mynah is not directed at children under 13 and collects no information from anyone.

Changes

If this policy changes, the revised version is posted here with a new effective date. A change that would have Mynah collect anything would come with a new version of the app and a note in its release notes.

Contact

mynah@theadipost.com