Introduction
Subwave is committed to protecting your privacy. This Privacy Policy explains how Subwave handles your information when you use the mobile application.
Information We Collect
Subwave collects and stores the following information locally on your device only:
- Server Credentials: Your Subsonic server URL, username, and password are stored locally on your device using encrypted storage to enable connection to your music server.
- Recently Played History: A list of songs you've recently played is stored locally to enhance your experience.
- Playback Position: The last playback position of songs is saved locally to resume where you left off.
- Playlist Data: Playlists are stored on your Subsonic server. Local playlist state is cached on your device for performance.
- Dashboard Cache: Recently added and random album data is cached locally so the app can display content immediately on startup, including when offline.
- Downloaded Music: If you choose to download songs for offline playback, those audio files are stored locally on your device's internal storage or SD card. Downloaded files remain until you manually remove them through the app or uninstall.
- Widget Data: Basic now-playing metadata (song title, artist, cover art identifier) is stored locally to power the home screen widgets.
Audio Recording Permission
Subwave requests permission to record audio (RECORD_AUDIO) for the following purpose:
- Real-time Visualization Only: This permission is used exclusively to analyze audio output in real-time for the visualizer feature.
- No Recording: Audio is never recorded, saved, or transmitted. It is only processed in memory for visualization purposes.
- Local Processing: All audio analysis happens locally on your device.
Notification Permission
On Android 13 and above, Subwave requests notification permission to display playback controls and now-playing information in your device's notification area.
Data Storage
All data collected by Subwave is stored locally on your device:
- Subwave does not operate any servers or cloud services
- Your credentials and music data are only sent to the Subsonic server you configure
- Credentials are stored using Android's EncryptedSharedPreferences with AES-256-GCM encryption backed by the Android Keystore
- All locally stored data is deleted when you uninstall the app
Third-Party Services
Subwave connects to the following external services:
- Your Subsonic Server: Subwave communicates with the Subsonic-compatible server you configure to stream music, retrieve library metadata, and sync playlists. You control which server the app connects to. Subwave does not have access to your server credentials or data beyond what is needed to operate the app on your behalf.
- LRCLIB (lrclib.net): When displaying synced lyrics, Subwave may make requests to lrclib.net, a free and open lyrics database, to fetch time-synced lyric data. No personally identifiable information is sent — only the song title, artist name, album name, and duration are included in the request. LRCLIB's own privacy policy applies to these requests.
Analytics and Tracking
Subwave does not use any analytics, tracking, or advertising services.
- No usage data is collected
- No crash reports are sent automatically (you may manually report issues via email)
- No advertising or marketing tracking of any kind
Data Security
- Server credentials are encrypted at rest using AES-256-GCM via the Android Keystore
- Authentication tokens are generated fresh for each request using a cryptographically random salt — your password is never transmitted directly
- Connections to your Subsonic server use HTTPS when your server supports it. Subwave will warn you if your server is configured with an unencrypted HTTP address.
- No credentials are ever written to system logs or shared with other apps
Your Rights
- Access: All data is stored on your device and accessible through the app
- Deletion: Disconnect from your server in Settings to clear credentials, remove downloaded songs via the Downloads screen, or uninstall the app to delete all locally stored data
- Portability: Your music and playlists remain on your Subsonic server regardless of whether you use Subwave
Children's Privacy
Subwave does not collect any personal information from anyone, including children under 13. The app requires a user-provided Subsonic server, which should be set up and managed by adults.
Changes to This Policy
This Privacy Policy may be updated from time to time. Any changes will be posted on this page with an updated date. Continued use of the app after changes are posted constitutes acceptance of the updated policy.
Contact
If you have any questions about this Privacy Policy, please contact:
This privacy policy was last updated on March 14, 2026.