The short version
Tomeplayer is an offline-first audiobook player. It is a client — a piece of software that connects to an audiobook server that you host and administer yourself. We, the developers, do not run a backend service, do not have accounts, and have no way to see your library, your listening habits, or your credentials.
There is no analytics SDK in this app. There is no advertising. There is no crash reporter that phones home to us. If you use Tomeplayer without ever connecting it to a server, it makes no network requests at all.
Who this policy covers
This policy describes the practices of Zach Yazzie ("we", "us") with respect to the Tomeplayer mobile application (the "app"). It does not cover:
- Your audiobook server. If you run your own server, you are the operator of that service and this policy does not govern it. Any logs, accounts, or data on that server are yours to manage.
- Third-party services you connect to. If you point the app at a server operated by someone else, that operator's privacy practices apply to the data they receive.
- Your device platform. Apple and Google collect certain data about app installation and usage independently of us. See Data Apple and Google collect.
Information we collect
None. We do not collect personal information. Specifically, we do not collect:
- Names, email addresses, phone numbers, or postal addresses
- Account credentials or authentication tokens
- Your audiobook library, listening history, or playback positions
- Device identifiers, advertising IDs, or IP addresses
- Location data
- Usage analytics, telemetry, or behavioral data
- Contacts, photos, calendars, or other device content
We do not sell, rent, or share personal information with third parties, because we do not have any personal information to sell, rent, or share.
The one exception is if you voluntarily email us or use the contact form on this website. See Contact us for how we handle that.
Data stored on your device
The app stores the following locally on your device only. It is never transmitted to us:
- Server connection details — the address of the server you connect to, and the credentials or access token used to authenticate. These are held in the app's own private storage area, which your operating system isolates from other installed apps.
- Downloaded audio files — any books you download for offline listening, stored in the app's private storage area.
- Playback state — current position, playback speed, bookmarks, and sleep timer settings.
- App preferences — theme, sort order, and similar settings.
All of this is removed when you uninstall the app or clear its data from your device settings.
Data sent to your own server
When you connect Tomeplayer to an audiobook server, the app communicates directly with that server over the network. Depending on the server software, this typically includes your login credentials or token, requests for book metadata and audio files, and playback progress so your position syncs across devices.
This traffic goes from your device to your server. It does not pass through us, and we have no ability to intercept, log, or read it. Whoever operates that server controls what is logged and retained there — if that is you, the responsibility is yours.
We strongly recommend connecting only over https://. If you
connect over plain http://, your credentials and audio traffic
are sent unencrypted and could be read by anyone on the same network.
Data Apple and Google collect
Even though we collect nothing, the app stores themselves do. When you download or use an app, Apple and Google may collect installation counts, aggregate and anonymized usage statistics, purchase records, and — if you have opted in at the OS level — crash and performance diagnostics.
This happens under Apple's Privacy Policy and Google's Privacy Policy, not ours. We may see aggregate, anonymized figures in our developer dashboard — for example, how many people installed the app in a given country, or an anonymized crash trace. We cannot identify individual users from this, and we do not attempt to.
You can limit OS-level diagnostic sharing in your device settings, under Privacy & Security on iOS or Google > Usage & diagnostics on Android.
Permissions the app requests
Tomeplayer asks you to approve no permissions. It does not request — and therefore cannot access — your location, camera, microphone, contacts, photos, calendar, or health data.
What it does use requires no approval prompt:
- Network access — to reach the audiobook server you configure, and nothing else. The app makes no connections to any service we operate, because there isn't one.
- Its own private storage — to hold downloaded books, playback position, and settings. This is the sandboxed area your OS assigns to the app. It is not your photo library, your documents, or the wider file system, and the app cannot read those.
No tracking, ads, or analytics
Tomeplayer contains:
- No advertising or ad networks
- No analytics or telemetry SDKs
- No third-party trackers, pixels, or fingerprinting
- No cross-app or cross-site tracking of any kind
Because we do not track you, the app honors "Do Not Track" and Apple's App Tracking Transparency by default — there is nothing to opt out of.
Children's privacy
Tomeplayer is not directed at children under 13, and we do not knowingly collect personal information from anyone, including children. Because the app collects no data at all, there is no children's data for us to hold or delete. If you believe a child has provided personal information to us through the contact form, email us at tomeplayer@yazzie.dev and we will delete it.
Your privacy rights
Privacy laws including the EU/UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and similar state and national laws give you rights to access, correct, delete, and port your personal data, and to opt out of its sale or sharing.
We honor these rights fully — and in our case they are simple to satisfy, because we hold no personal data about you. There is nothing for us to disclose, correct, export, or delete. We have never sold or shared personal information, and we do not use it for targeted advertising or profiling.
If you have exchanged email with us, you may ask us to delete that correspondence at any time. For data held on your own audiobook server, you already have direct control — we cannot access it on your behalf.
Retention and deletion
We retain no user data, so there is no retention period to describe. Data the app stores on your device stays there until you delete it, and is removed entirely when you uninstall the app.
Email you send us is kept only as long as needed to resolve your question, and is deleted on request.
Security
Your server address and credentials are kept in the app's private storage area. Both iOS and Android sandbox this, so other apps you install cannot read it. To be straightforward with you: this is ordinary app storage, not hardware-backed secure storage. On a device that has been jailbroken or rooted, or that someone else can physically unlock, it should not be treated as strongly protected.
Connections to your server use whatever transport that server provides — use HTTPS.
Because we operate no servers holding your data, there is no central database for an attacker to breach. The security of your library depends on how you configure and secure your own server.
Changes to this policy
If we change this policy, we will update the effective date at the top of this page and post the revised version here. If a future version of the app begins collecting data in any way — it does not today — we will say so clearly and prominently before that version ships, and update the app store privacy labels accordingly.
This policy is governed by the laws of Utah, United States, without regard to conflict-of-law principles.
Contact us
Questions about this policy, or about privacy in the app generally, are welcome:
- Email: tomeplayer@yazzie.dev
- Web: the contact form on this site
If you use the contact form, we receive the name, email address, and message you submit, plus your IP address for spam prevention. We use this only to reply to you. It is delivered to our email inbox and is not added to any mailing list, shared, or sold. Ask us to delete it and we will.