Privacy Policy
Last updated: September 2026
At Citron Music, we take your privacy with utmost seriousness. This policy provides clear, transparent information on how our app operates and why your personal data is protected.
1. Overview: Zero Personal Data Collection
Citron Music is built from the ground up on the principle of Privacy by Design. We do not track your activity, sell data to advertising networks, or aggregate statistics on your listening history.
The application acts solely as a direct client between your device and the Jellyfin media server you configure.
2. Server Credentials and Local Storage
Server URL & Credentials: Your Jellyfin server URL, username, and authentication session tokens are stored exclusively on your device's secure local storage (MMKV / Apple Keychain). They are never transmitted to any server operated by Citron Music.
Library Metadata Cache: Artist, album, and track metadata are indexed inside a local SQLite database on your device to accelerate browsing and enable offline search.
3. In-App Purchases and Subscriptions (RevenueCat / Apple StoreKit)
If you choose to purchase optional premium features, transactions are processed exclusively through Apple's official App Store payment infrastructure (StoreKit).
Citron Music integrates RevenueCat as a technical backend to validate App Store receipts and determine active entitlement status.
RevenueCat receives only anonymous transaction receipts from Apple to verify subscription validity. We never receive or store your credit card details, bank account information, or personal billing address.
4. Device Permissions
Background Audio Playback: Allows continuous playback when the screen is turned off or while switching applications.
Background Fetch: Allows the app to periodically synchronize metadata with your Jellyfin server on customizable schedules.
Apple CarPlay / Android Auto: Enables control via vehicle head units when connected.
5. Third-Party Links and Security
Citron Music connects solely to the server address provided by you using standard HTTP/HTTPS protocols.
We strongly encourage users to configure their Jellyfin servers with SSL/TLS (HTTPS) certificates to protect all network traffic in transit.
6. User Rights (GDPR / CCPA)
Because we do not store personal data on external servers, you can erase all data stored locally on your device at any time by uninstalling the application or using the 'Clear Data' option in Settings.
7. Contact Information
If you have any questions, suggestions, or concerns regarding this Privacy Policy, please contact our support team at: support@citronmusic.app.
Questions regarding privacy? We are here to help at support@citronmusic.app.