Your space, respected.

Every Player privacy policy · Effective October 24, 2026. Contact: hello@everystudio.app.

On your device

Imported media, your library, playlists, favorites, and saved preferences are stored in the app's private storage. Device playback and exact local commands do not need a cloud AI account. Removing the app removes its local data, subject to any device backups managed by your operating system.

Optional cloud folder sync

When you select a folder, media and library/playlist metadata are copied to that folder. If the folder belongs to iCloud or another cloud provider, that provider processes it under its own terms. Every Studio's API does not receive those media files. Saved assistant preferences, conversation history, and imported/generated caption and lyrics documents are not included in folder-sync snapshots.

Optional cloud assistant

Cloud assistance is off until you enable it. When enabled, your request, a limited selection of media titles/artist/genre metadata, recent conversation, and the saved preferences included in the request are sent over HTTPS to Every Studio's secure API and the provider you select. Control-assistant requests do not include audio, video, or image files. Optional Media AI transcription sends an extracted M4A audio excerpt of up to five minutes and 8 MB, only after a separate confirmation naming the provider. Optional translation sends the caption/lyrics text and target language after confirmation. Original media files are not uploaded by these tools. The app displays the selected provider and requests your permission before sending this context.

The API processes requests in memory and does not store prompts, conversation history, media metadata, or AI responses, extracted audio, or caption/lyrics documents in its database. Media tools process content transiently; audio excerpts are briefly written to restricted temporary storage for duration validation and removed after processing; provider retention policies still apply. The selected provider may retain or process inputs according to its own terms and privacy policy. OpenAI requests use store:false; that does not override the provider's security/abuse retention policies. Provider names and privacy links are shown in the app before use. Do not send sensitive personal information in prompts or media titles.

Authentication and operational records

Every ID uses the existing Every Studio Supabase identity service. Email one-time codes confirm access to your address; Apple sign-in is offered only when configured. The Player server stores your shared Every ID, a verified email when supplied by the identity service, hashed Player session credentials, encrypted upstream session access, creation/expiry times, short-lived challenges, and request-limit counters. Player sessions last no longer than the identity access session (up to one hour) and may renew using the device-only Keychain refresh credential. Legacy pre-Every-ID sessions expire after seven days. Identity-service and email-provider processing is governed by their policies. Expired sessions, challenges, and request counters are removed periodically. Player accounts remain until deletion. Your shared Every ID remains when you delete Player data, as do other Every Studio apps. If you use an existing Every ID password, it is passed over HTTPS to the shared identity service; Player does not retain it on the device or in its database.

Railway and network providers may process connection information such as IP addresses and service access metadata as part of delivering and securing the service. Application logs omit prompt bodies, private credentials, and provider response bodies. We do not include advertising or analytics SDKs or use app data for tracking.

Photos, sharing, and AirPlay

The system Photos picker gives Every Player access only to the videos you select, which are copied to the private library. File sharing uses the iOS share sheet and sends your selected files to your chosen destination. AirPlay sends playback to a receiver you select using Apple’s route picker; receiver and network behavior are controlled by iOS. Imported/generated captions are displayed on-device; embedded caption tracks can be used by compatible receivers.

Wi-Fi transfer

Wi-Fi upload is a temporary HTTP connection directly to your device, protected by a random pairing token. It is not encrypted, so use a trusted local network. Every Studio's Railway service does not handle these uploads. Incomplete transfers are discarded.

Your controls

Turn cloud assistance off to stop sending new requests. Delete saved preferences inside Every Assistant. Disconnect the cloud folder without deleting files. Sign out to revoke the current backend session. Settings → Account & Pro → Delete Every Player account to remove the account, sessions, and user-specific request counters from the active backend database. Infrastructure backups may retain records until their retention period expires; deleting the account cannot erase requests already processed by an external provider. Contact support to request help with access or deletion.

Subscriptions, diagnostics, and email

Apple handles payment details; Every Player does not receive card numbers. We store verified product/original-transaction identifiers, subscription expiry/revocation status, environment, and the Every ID linked to the purchase. Signed Apple transactions and notifications are verified before granting paid cloud access. Usage counters enforce disclosed allowances and are retained for the current month and up to three previous calendar months, or until Player account deletion.

Optional device diagnostics include app/iOS versions, general device type, locale, and a random installation ID. They are used for app functionality/support, linked to your Player account, and deleted after 90 days without an update or when you remove diagnostics/delete Player data. We do not collect advertising IDs, serial numbers, contacts, precise location, or hardware fingerprints. You can read basic device information without sending it.

Supabase email confirmation may be delivered through the configured Resend SMTP service. Optional sign-in and Player-deletion confirmations use Resend transactional mail. Only verified recipient addresses are used; these are not marketing subscriptions. The encrypted mail outbox retries for up to 23 hours and removes jobs by 24 hours. Email-provider records have their own retention policy. Request-throttling uses hashed network identifiers; origin IP headers are used only with the configured hosting-proxy trust checks or authenticated edge proxy. No raw prompts, tokens, media, or email codes are written to application logs.

Changes

We will update this policy when the app's data practices change. The effective date identifies this version.