Privacy Policy

Introduction

MusicCloud ("the App") is an Android music player application developed and maintained by Aquila Innovations. We are committed to protecting your privacy and being fully transparent about how our application works.

This Privacy Policy describes our practices regarding data collection, how the App handles your information, and your rights as a user. By using MusicCloud, you agree to the terms outlined in this policy.

MusicCloud is, at its core, a fully offline, privacy-first music player. We also offer an entirely optional Ad Monetization & Earnings feature that lets you choose to listen to advertiser-supplied audio ads in exchange for earnings, which can be withdrawn to a bank account or UPI ID you provide. This feature is off by default, fully within your control, and described in detail in Section 05 below.

Information We Collect (and Don't)

By default — using MusicCloud in Guest Mode with monetization off — we never collect:

• Personal identifiers — name, email, phone number, date of birth
• Device identifiers — IMEI, advertising ID, device fingerprints
• Location data — GPS, IP-based location, or network location
• Usage analytics — what songs you play, how long you listen, your listening habits
• Crash reports — crash logs are not transmitted to our servers
• Music file content — your audio files, metadata, or playlists (unless you actively use the optional Friends feature to share a specific track with a specific friend — see Section 07)
• Contact information — the App does not access your contacts
• Camera or microphone data — the App does not access these sensors

Only if you opt in to the Ad Monetization & Earnings feature, we additionally collect:

• Ad engagement counters — how many advertiser ads you've listened to, so your earnings can be calculated and your self-set daily ad limit enforced
• Earnings ledger — a running balance of money earned, tied to your account
• Payout account details — the bank account number, IFSC code, account holder name, and/or UPI ID you provide for monthly withdrawals

None of this is collected unless you deliberately enable monetization and complete the opt-in flow. See Section 05 for full detail.

Permissions Used

MusicCloud requests the following Android permissions. Here is exactly why each one is needed:

Optional Account Feature

MusicCloud offers an optional account system that allows you to log in using an email address and password. This feature is entirely optional. The app is fully functional without creating an account (Guest Mode).

If you choose to create an account, the following data is collected and stored on our secure server:

• Username — chosen by you at registration
• Email address — used for login and account recovery only
• Password — stored as a secure bcrypt hash (cost factor 12). We never store plain-text passwords.

What is not collected even with an account:

• Your music library, playlists, or listening history
• Your device information or identifiers
• Your location

If you also choose to enable the Ad Monetization & Earnings feature, an account becomes required (so your earnings and payout details can be tied to a real, identifiable user). See Section 05 for details.

Ad Monetization & Earnings Feature

MusicCloud offers an entirely optional feature that lets you earn money by listening to advertiser-supplied audio ads while you play music. This section explains exactly how it works and what data it involves.

How it works:

• The feature is off by default. You must actively opt in from Settings to enable it.
• Ads are audio clips with an accompanying thumbnail, supplied directly to us by the advertising businesses themselves. We do not use Google AdMob, Google Ad Manager, Meta Audience Network, or any third-party ad SDK or ad exchange. We do not use programmatic ad auctions, and no ad-tech company receives your data.
• You control how frequently ads play — you set your own daily ad count/frequency in the app's settings.
• Each ad listened to in full credits a fixed, disclosed amount to your in-app earnings balance.
• You can disable the feature at any time. Disabling it stops future ad delivery and earnings accrual; it does not erase previously earned, unpaid balances (see below).

Minimum age for this feature: Because this feature involves real monetary payouts to a bank account or UPI ID, you must be 18 years or older to enable Ad Monetization & Earnings, even though the base music player has no such restriction. We do not knowingly enable this feature for accounts we know belong to a minor.

Payouts:

• Earnings are paid out monthly to the payout account you provide.
• We currently process payouts manually — there is no automated third-party payment gateway integrated into the app at this time. Our team reviews and initiates each payout directly to the bank account or UPI ID you've registered.
• Because payouts are manual, please allow for standard processing time each month; any minimum payout threshold or delay will be clearly disclosed in-app.
• If we later integrate an automated payment gateway or processor, we will update this policy and notify you before your payout data is shared with that processor.

Payout & Financial Data

If you opt in to Ad Monetization & Earnings and choose to withdraw your balance, we collect:

• Bank account number and IFSC code
• Account holder name
• UPI ID (as an alternative or additional payout method)

This information is used solely to process your monthly payout. It is never sold, rented, shared with advertisers, or used for any marketing purpose. Because payouts are currently handled manually by our team, this data is accessed only by authorized personnel for the purpose of initiating your transfer.

We retain payout and earnings transaction records for as long as required under applicable tax and financial record-keeping laws, even after you disable monetization or delete your account, solely to satisfy those legal obligations.

Friends & Track Sharing Feature

MusicCloud includes an optional Friends feature that lets you share specific tracks with specific friends who also use the app. This is entirely user-initiated — no track is ever shared automatically or without your explicit action.

How it works:

• You choose which friend(s) on the app you want to share with — sharing is never public or broadcast to anyone outside your chosen recipient(s).
• You choose which specific track(s) to send. No other files, playlists, or library contents are shared.
• If you never use this feature, no music file of yours is ever transmitted off your device.
• The recipient friend receives only the track(s) you selected, and can play them within the app.
• Sharing requires an account and an internet connection, since the track has to be transferred to the recipient through our servers.

Local Data Storage

The following data is stored exclusively on your device using Android's SharedPreferences and local file storage:

• Playlists you create within the app
• Your favourited songs (stored as a list of media IDs)
• Equalizer settings and presets
• Shuffle and repeat mode preferences
• Sort and filter preferences
• The last played song position (for resuming playback)

Third-Party Services

MusicCloud does not integrate with any third-party advertising networks, ad exchanges, or programmatic ad SDKs. The app does not include:

• Google AdMob, Google Ad Manager, or any Google advertising SDK
• Google Analytics, Firebase Analytics, or any usage tracking SDK
• Crashlytics or any crash reporting service
• Facebook Audience Network, Meta SDK, or any social media ad tracking
• Any third-party ad mediation or ad-tech SDK

Ads shown as part of the optional Ad Monetization & Earnings feature are supplied directly by the advertising businesses we partner with, delivered from our own servers as simple audio + thumbnail assets — not through any ad exchange or ad network. Payouts are currently processed manually by our team, without a third-party payment gateway.

The libraries used in the app (ExoPlayer, Retrofit, Glide, etc.) are used solely for local device functionality and, aside from the optional account/monetization features described above, do not transmit data to external servers.

Data Security

We take the security of any data we hold seriously:

• All API communication uses HTTPS/TLS encryption
• Passwords are hashed with bcrypt (cost factor 12) — irreversible
• Authentication tokens use JWT (HS256) with a 30-day expiry
• Logged-out tokens are blacklisted server-side immediately
• Database queries use prepared statements to prevent SQL injection
• Bank account, IFSC, and UPI details are encrypted at rest and only accessible to a limited number of authorized personnel who process payouts
• Access to earnings and payout records is logged and restricted on a need-to-know basis
• Music files are only ever uploaded to our servers when you actively choose to share a track via the Friends feature — never automatically or in the background

Data Retention

We keep your data only as long as necessary:

• Account credentials — kept until you delete your account
• Ad engagement counters & earnings balance — kept while monetization is enabled and until any owed balance is fully paid out
• Payout/financial records — retained for the period required by applicable tax and financial regulations, even after account deletion, solely to meet those legal obligations
• Local playlists, favourites, and settings — retained only on your device until you clear app data or uninstall

Children's Privacy & Age Requirements

MusicCloud does not knowingly collect any personal information from children under the age of 13 for the base music player. The app does not have features designed to appeal to children in ways that would prompt data collection.

The Ad Monetization & Earnings feature is restricted to users 18 years of age or older, because it involves real monetary payouts to a bank account or UPI ID. We do not knowingly permit anyone under 18 to enable this feature. If you believe a minor has accessed this feature or provided personal or financial information, please contact us immediately at apps@aquilainnovations.in and we will promptly disable the feature and delete the relevant information.

Your Rights

If you have created an optional account, you have the following rights:

• Access — request a copy of your account, ad engagement, and earnings data
• Correction — update your username or payout details via the app's profile screen
• Deletion — request permanent deletion of your account and all associated server-side data by emailing us, subject to the financial record-keeping retention described in Section 11
• Portability — request your data in a machine-readable format
• Opt-out — disable Ad Monetization & Earnings at any time from Settings, with no need to delete your account

Guest mode users with monetization disabled have no server-side data. All data is local and can be cleared by uninstalling the app.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes — particularly to what data we collect or how we use it — we will update the "Last Updated" date at the top of this document and notify users via an in-app notice or update release notes on Google Play.

Continued use of the app after any changes constitutes acceptance of the revised policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please get in touch: