Privacy

Last updated 1 August 2026.

rpm is a player for music you already own. Most of it runs on your own machine and nothing about your library reaches us until you switch the cloud on.

What we hold

• Your account. An email address, a display name if you gave one, and the date you joined. Passwords are held by Amazon Cognito, never by us. If you sign in with Apple or Google we receive the email address they release and nothing else.
• Your cloud library, if you use it. The audio files you upload, their tags, the cover art you have stored, and your playlists. They are yours: we do not scan them, sell them, train anything on them or hand them to anyone.
• Service records. Ordinary server logs — request times, error messages — kept briefly so that faults can be found.

Where it lives

On Amazon Web Services in Ireland (eu-west-1). Audio is stored encrypted at rest and is only ever served to you, through links that expire.

Who else is involved

• Apple and Google, if you choose to sign in with them.
• MusicBrainz, AcoustID, AudD, TheAudioDB and fanart.tv, when the app identifies a recording or looks for cover art. What is sent is an acoustic fingerprint or a title and artist — never the audio file, and never anything identifying you.
• Discogs, only if you connect your Discogs account yourself, and only for what you asked it to do.

Keeping and deleting

Your library stays until you remove it. You can delete your whole account from inside the app, or ask us to — see deleting your account. Deleting removes the account, its profile and any connected third-party accounts, and your uploaded audio with it.

Children

rpm is not directed at children under 13, and we do not knowingly hold their data.

Asking us anything

Write to support@rpmrpmrpm.com. That includes asking for a copy of what we hold about you, or asking us to correct or delete it.