Backplane Privacy Policy
This policy covers the Backplane app for Android and iOS ("the app"). The app is published by PickApps ("we", "us"). You can contact us at hello@pickapps.co.uk.
In short: Backplane connects your device directly to media servers that you choose. We don't run a server for the app, there's no Backplane account, and we don't collect, receive, sell or share your personal data. The app contains no advertising, analytics, tracking or crash-reporting software.
Data we collect
None. PickApps does not operate any service that the app sends data to. We never see the servers you connect to, your credentials, your library or what you listen to.
Data stored on your device
The app needs some data stored on your device to work. All of it stays on your device:
- Server connections: the addresses of the servers you add and the username for each one.
- Credentials: the access tokens the servers issue to the app, or the password where a server's sign-in requires one (Subsonic-compatible servers). These are stored only in your operating system's secure storage (the Android Keystore or the iOS Keychain), never in the app's general database.
- Library data: the catalogue synced from your servers (titles, artists, albums, audiobooks, artwork) and your favourites, listening progress and playback queue.
- Downloads: audio files you choose to keep for offline listening.
- Settings and a device ID: your app preferences, and a random identifier generated once per installation. Servers use the identifier to recognise this device. It is not linked to your identity or your hardware.
Uninstalling the app, or clearing its storage in your device settings, deletes all of this data from your device.
Services the app communicates with
The app sends data only where it needs to for a feature you use:
- Your media servers (Jellyfin, Plex Media Server, Subsonic-compatible servers, Audiobookshelf). The app signs in, syncs your library, streams and downloads audio, and saves changes you make, such as favourites and listening progress. Each request includes the app's name and version, the device ID, and a generic device name (such as "Android device"). If you turn on play reporting, the app also tells your servers what you play. This setting is off by default. Your servers are run by you or by whoever gave you access, and their operator's privacy practices apply to them.
- Plex (plex.tv), if you add a Plex server. Sign-in happens on plex.tv in your web browser, so the app never sees your Plex password. The app then uses your Plex account token to find your servers and their connection addresses. Plex's privacy policy applies: plex.tv/about/privacy-legal.
- Google Cast, if you cast to a speaker or TV. The app uses Google's
Cast SDK to find Cast devices on your local network and give them the address of the
audio to play. That address comes from your server and can include the access token
the device needs to fetch the audio. Before casting, the app may look up your
server's hostname through Google Public DNS
(
dns.google), the same resolver Cast devices use, to check that the device will be able to reach it. Google's privacy policy applies: policies.google.com/privacy. - The app stores. Google Play and Apple's App Store handle installing and updating the app, under their own privacy policies.
Device permissions
- Network access: to connect to your servers and to tell whether you're online.
- Notifications: to show playback controls while audio plays.
- Background playback: to keep audio playing while the screen is off or you're using another app.
- Local network (iOS): to reach servers and Cast devices on your home network.
The app does not request access to your location, contacts, camera, microphone or photos.
Security
Credentials are kept in your operating system's secure storage. Connections to your servers use HTTPS whenever the server address you give uses it.
Children
The app is not directed at children. It collects no personal data from anyone, including children.
Your rights
Because we hold no personal data about you, there is nothing for us to access, correct or delete. To delete the data on your device, uninstall the app or clear its storage. To delete data held by your media servers or by Plex, contact the server operator or Plex. If you have questions about this policy, email hello@pickapps.co.uk.
Changes to this policy
If the app's data handling changes, we will update this page and its effective date before releasing that version of the app.