GRP/UNGRP Privacy Policy

Last updated August 2026

What stays on your device

Your saved playlists, saved music links, scenes, and room preferences are stored only on your device (and your personal iCloud device backups). We do not store your Sonos or Spotify credentials — you authenticate directly with each service, and the resulting tokens are kept in your device's Keychain.

What we collect

• Usage data — feature usage and playback events (for example "favorite played" or "playlist created"), tied to a random identifier generated for your install. This does not include playlist contents, track names, or account credentials.
• Email address (optional) — only if you choose to add it in Settings, directly or via Sign in with Apple. We use it to send occasional product updates about GRP/UNGRP, and we associate it with your install's usage data so we can answer support questions. It is never required to use the app.

How we use it

To understand which features are used, fix bugs, prioritize improvements, and — only if you added your email — send occasional product news. We do not sell your data, show ads, or track you across other companies' apps and websites.

Your choices

• Turn off usage analytics anytime in Settings → Privacy Policy → Share usage analytics.
• Remove your email anytime in Settings → Email → Remove — this also removes it from our systems.

Service providers

Usage data and optional email are processed by Customer.io (US data center) on our behalf. Our token broker for Sonos sign-in runs on Google Firebase; it exchanges authorization codes and does not retain your account data. Linking Sonos or Spotify is subject to each provider's own privacy policy, and disconnecting an account in Settings revokes GRP/UNGRP's access immediately.

Data retention & deletion

Deleting the app removes all locally stored playlists, scenes, and preferences. Analytics history is retained only as long as needed to improve the app — contact privacy@grpungrp.app to request deletion of your analytics history or email address, and we'll honor it within 30 days.

Children

GRP/UNGRP is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes

If this policy changes materially, we'll update this page and the copy inside the app, with the date above.