Privacy Policy
Last updated: November 2, 2026
Tonearm ("the app") is made by XOR A BINARY RESEARCH SP Z O O ("we"). This policy explains what happens to your data when you use Tonearm on iPhone, iPad, Mac and Android.
The short version
We don't collect any data. Tonearm has no accounts, no analytics, no advertising and no tracking. We do not run servers that receive your information. The only services the app talks to are the ones listed below, and only to do what you ask.
Your collection
Everything you add to Tonearm stays on your devices: albums, conditions, shelf locations, notes, photos, prices, listening history and settings.
- iPhone, iPad and Mac: if you are signed in to iCloud, your collection also syncs through your private iCloud database. That database belongs to your Apple account, and we cannot access it. Apple's privacy policy applies to iCloud.
- Android: the collection is stored only in the app's private storage on your device. There is no cloud sync, and the app is excluded from Android's automatic cloud backup. To move your collection to another device, use the backup file export in Settings. You decide where that file goes.
If you delete the app, its data on that device is deleted with it (on Apple devices, data in your iCloud remains until you delete it there).
Discogs
Search, barcode lookup, collection import and price checks send requests directly from your device to the Discogs API (discogs.com). Those requests are authorized with the personal access token you enter. They include your search terms, barcodes and release IDs. Discogs' privacy policy applies to these requests.
Your token is never sent to us. On Apple devices it is stored in the keychain. On Android it is stored encrypted, with a key held in the Android Keystore.
Song recognition ("What's Playing?")
When you tap "What's Playing?", Tonearm listens through the microphone for a few seconds. It never listens in the background.
- iPhone, iPad and Mac: the audio is matched with Apple's ShazamKit. Apple's privacy policy applies.
- Android: a short audio clip (about 10 seconds) is sent over HTTPS to the AudD music recognition service (audd.io), which returns the song title and artist. AudD's privacy policy applies to that clip.
We never record or store the audio, and nothing is sent to us.
Camera and photos
The camera is used only when you scan a barcode or cover, or take a photo of a record. Barcodes are read on your device. On Android, cover scanning uses Google's on-device document scanner (Google Play services). Photos you choose from your library are copied into your collection on your device (and, on Apple devices, into your iCloud). They are not shared with anyone else.
Exchange rates
If your currency is the Polish złoty, the app downloads the public EUR exchange rate from the National Bank of Poland (api.nbp.pl). This request contains no personal data.
Notifications
Price alerts are generated on your device. On Android the app asks for permission to show notifications; you can decline and the rest of the app works normally.
Links to shops
Buttons that search Discogs Marketplace, eBay, Amazon, Allegro or OLX open the shop's website or app in your browser. We pass only the album's artist and title as a search term. The shop's own privacy policy applies from there.
Children
Tonearm does not knowingly collect information from anyone, including children.
Changes
If this policy changes, the date at the top changes and the new text is published at this address.
Contact
Questions about privacy: info@xor-a.com