PRIVACY POLICY
LAST UPDATED: February 1, 2026
1. PRIVACY FIRST ARCHITECTURE
PROTO is architected to operate entirely on your device. We do not operate servers that collect, store, or sell your personal data. Your music library metadata, play history, and authentication tokens never leave your phone.
2. GOOGLE DRIVE ACCESS & SECURITY
PROTO functions as a client for your personal cloud storage. To stream your music, the app requires standard Google Drive permissions via Google OAuth 2.0.
- PERMISSIONS: We request the `drive.readonly` scope. This specific permission is required to technically allow our search algorithm to find your "Music" folder and recursively index your albums across different subfolders.
- STRICT USAGE: While this scope allows reading files, PROTO's internal logic is strictly programmed to only access and read files within the `/Music` directory and only recognized audio formats (mp3, m4a).
- DATA SAFETY: We never access, read, or transmit your personal documents, photos, or other non-audio files.
3. LOCAL DATA STORAGE
Your data belongs to you.
- CREDENTIALS: Your Google authentication tokens are stored using your device's native secure hardware storage (SecureStore).
- LIBRARY INDEX: Your song metadata is stored in a local database on your device (AsyncStorage).
- REVOCABILITY: You may revoke PROTO's access to your Drive at any time via your Google Account Security settings.
4. NO THIRD-PARTY TRACKING
PROTO is a standalone tool. We do not share your data with third-party advertisers, data brokers, or analytics firms.
[ BACK ]