Privacy Policy

Effective date: 14.07.2026

This policy is grounded in what the app's code actually does. Review it before publishing (especially the placeholders below) — Apple requires a live privacy policy URL in App Store Connect regardless of what the app collects.

Summary

AlbumTodoList has no backend server of its own. It does not collect, store, or transmit your personal data to the developer or to any third party. Everything the app reads or writes is either:

requested directly from Apple's MusicKit / Apple Music APIs, under your own Apple Music authorization, or
fetched from public pages on albumoftheyear.org (a third-party site not operated by the developer), or
stored in your own private iCloud account, which the developer cannot access.

What the app accesses, and why

Apple Music library and catalog data (MusicKit). With your permission, the app reads your Apple Music library and playlists, searches the Apple Music catalog, and creates/modifies a playlist named "AlbumTodoList" that the app itself creates. This access is granted and controlled entirely through Apple's own Apple Music authorization system — you can revoke it at any time in Settings. The developer does not receive a copy of this data; it flows directly between your device and Apple's servers.

"Seen" status (iCloud / CloudKit). When you mark an album as "seen," that status is stored in your private iCloud account via CloudKit, so it syncs across your own devices signed into the same iCloud account. This data lives in your personal iCloud storage, not on a server operated by the developer, and the developer has no access to it.

Filter preferences (iCloud Key-Value Store). Your current filter settings (e.g. "Hide Seen," "Hide Library," release-date cutoff) are synced across your devices the same way, via NSUbiquitousKeyValueStore — again stored in your own iCloud account.

albumoftheyear.org. The app fetches publicly available release-listing pages from albumoftheyear.org to discover new and upcoming albums. This is a standard web request (with a browser-identifying User-Agent) to a third party the developer does not control; no personal or account data is sent as part of these requests. albumoftheyear.org's own privacy practices are outside this app's or this policy's control.

Music.app automation (Mac only). On Mac, some actions (removing a track from a playlist, deleting an album from your library) are performed by directing the local Music app via Apple's scripting system, with your one-time permission. This is local communication between two apps on your device — nothing is sent anywhere.

What the app does NOT do

No analytics, crash reporting, or advertising SDKs of any kind.
No user accounts, sign-up, or developer-operated login.
No data is sent to, or stored on, any server operated by the developer — there isn't one.
No data is shared with or sold to third parties.
No tracking across apps or websites.

Your control over your data

Because your data lives in your own iCloud account and Apple Music library rather than on a developer-operated server, you control it directly:

Revoke the app's Apple Music access at any time in Settings.
Manage or delete your iCloud data for this app via your device's iCloud/Apple Account settings.
Deleting the app removes its local data from your device.

Children's privacy

This app is not directed at children and does not knowingly collect data from children.

Changes to this policy

If this policy changes, the updated version will be posted at this same URL with a new effective date.

Contact

Questions about this policy: tom@lorenz-unna.de