Addit — Privacy Policy

Addit has no servers. Your music, your account details and your listening all stay on your device or inside your own cloud storage. We have no infrastructure that could receive them, and no analytics or advertising code in the app.

Addit is an iOS music player that plays audio you already keep in Google Drive, Microsoft OneDrive, or on your iPhone. This policy explains what the app touches, where it stays, and the few narrow cases where something reaches us.

What stays on your device

All of the following is written only to Addit's own storage on your iPhone. None of it is transmitted to Hollowpoint Collective.

• Sign-in tokens. OAuth access and refresh tokens for the cloud accounts you connect, held in the iOS Keychain.
• Account details. The email address, display name and profile-photo URL of each connected account, so the app can show you an account switcher.
• Your library. Album and track records — names, artists, file identifiers, track ordering, artwork references.
• Cached audio and artwork. Tracks you play or mark for offline use are downloaded and cached, in a separate directory per account.
• Preferences. Accent colours, appearance mode, library layout.

Your cloud storage

When you connect a Google or Microsoft account, Addit talks to that provider directly from your device. Nothing is proxied through us.

Google Drive

Addit requests Google's full drive scope, plus the basic sign-in scopes (openid, email and profile). It needs the full scope because albums are ordinary Drive folders that you or your collaborators own — including folders shared with you by other people, whose contents change over time — and a narrower scope grants access one file at a time, which cannot reach a folder's contents.

What Addit accesses. From your Google account: your email address, name and profile-photo URL. From Google Drive: the names, identifiers, types, sizes, dates and descriptions of folders and files; the audio files in the folders you add as albums; album artwork; each album's .addit-data file; who an album's folder is shared with (their names, email addresses and roles); the comments that make up album chat; and how much storage you have used.

What it does with it, each only when you use the feature concerned:

• Shows your folders — your own, starred, and shared with you — so you can choose albums, and lists the audio in them.
• Streams audio files so they play, and caches them on your iPhone for offline listening.
• Reads and writes each album's .addit-data file (running order, disc breaks, artist), the folder's description (album notes) and its cover.jpg.
• Creates folders and uploads audio and artwork when you create an album or add tracks, and copies files into an album when you add tracks from elsewhere in your Drive.
• Renames a folder or file when you rename an album or a track.
• Moves a track to the trash in Google Drive when you delete it. Addit never permanently deletes anything from your Drive: whatever it trashes can be restored from Drive's trash for 30 days.
• Stars the album folders it creates for you, so they are easy to find in Drive.
• When you own an album's folder and a collaborator created its .addit-data or cover, replaces that file with a copy you own — theirs is taken out of the folder, not deleted.
• Shows who has access to an album and, when you ask, adds people, changes their role, removes them, or changes the folder's link sharing.
• Reads and posts album chat, described below.
• Shows how much storage you have left.

Addit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is used only to provide the features described above. It is never sold, never transferred to third parties except as described under "Who your data goes to", never used for advertising, and never read by a human — including us — except where you have explicitly asked us to help with a problem, or where required by law. Addit does not create aggregated or anonymized data from it, does not use it to develop, improve or train artificial-intelligence or machine-learning models, and does not send it to any AI service.

Microsoft OneDrive

Addit uses Microsoft Graph with the permissions needed to read and write files in your OneDrive, for the same purposes described above. The same restrictions apply: no selling, no advertising, no transfer beyond what the feature itself requires. A track you delete goes to the OneDrive recycle bin.

Album chat

Addit's per-album chat is built on Google Drive's comments feature. Messages you send are stored by Google as comments on the album's .addit-data file, and are visible to anyone you have shared the album's folder with. They do not pass through us, and we cannot read them.

Who your data goes to

The app sends none of it to us. Google user data moves only between your iPhone and Google, and it is never sold, rented, or passed to advertisers, data brokers or anyone else. The one thing that reaches our website is what you put in a link you share — its album title and artist, read from the address to draw the link's preview. We don't store them; our host, Cloudflare, may cache a preview for up to an hour, including the cover image of a folder that is already shared with anyone who has the link.

It reaches other people or services only where you direct it to:

• Sharing an album. When you add someone or turn on link sharing, Google gives them access to the folder, as it would if you did the same in Drive.
• Sharing a link. The album's title, artist and cover identifier travel in the link, to whoever you send it to — see "Sharing a link" below.
• Duplicate to… copies an album's files where you choose: into another cloud account you have connected, which may be a Microsoft OneDrive account, or into the Local Library on your iPhone.
• Album chat. Your messages are visible to the people who have access to the album.

How your data is protected

• In transit. Every connection Addit makes, to Google and to Microsoft, is encrypted with HTTPS (TLS).
• Sign-in tokens are kept in the iOS Keychain, which iOS encrypts and makes available only to Addit.
• Everything else Addit stores — your library, cached audio and artwork — is inside Addit's own app container, which other apps cannot read and which iOS encrypts at rest on a passcode-protected iPhone.
• No copy anywhere else. Because Addit has no servers, there is no second copy of your Google data to secure, and no one at Hollowpoint Collective has access to your accounts or tokens.

How long it's kept, and deleting it

• On your iPhone, data is kept until you remove the account or delete the app. Removing an account from the account switcher deletes that account's tokens, library records, cached audio and artwork. Deleting the app deletes all of it.
• With us, nothing: the app sends us no Google user data, and the title and artist in a shared link are read to draw its preview, not stored. The only copy is Cloudflare's cache of that preview, which expires within an hour.
• In your cloud storage, what Addit writes there — .addit-data, covers, uploaded audio, folders, comments and sharing changes — belongs to your account and stays until you or your collaborators remove it, exactly as if you had made it in Drive or OneDrive yourself.
• Revoking access at Google or Microsoft (links below) stops Addit reaching your account at once.

Sharing a link

When you share an album or a song, Addit builds a link pointing at the folder in your cloud storage. So that the link shows a card instead of a bare address, it carries the album's title and artist in the address itself, along with the identifier of the cover file. All of that is read from your own device at the moment you tap share — we are not consulted, and nothing about the link is stored on our side.

In Messages, the cover you see in the card is the one already on your phone: Addit attaches it to the message itself. That is why the card looks right even for an album nobody else can open — the image travels inside your message, not through us.

Pasted anywhere else, the card's image is fetched by our server from your cloud provider with no credentials of any kind. It therefore appears only when the folder is already shared with anyone who has the link, and falls back to a plain tile otherwise. It can never surface a cover your provider would have withheld from a stranger making the same request.

Before you share an album whose folder is restricted, Addit says so and asks you to confirm. The person you send it to will not be able to open the album — but the title and artist travel with the link either way, so the choice is yours to make knowingly.

Photo library

If you choose an album cover from your photo library, Addit reads only the image you select and copies it into the album. It does not browse, index or upload anything else, and it does not request access until you ask it to pick a photo.

Bug reports

"Pls report bugs" in the app composes an email to us. Because Addit has no server, it hands the message to your own mail app rather than sending anything itself: you see the complete message and press send yourself, from your own email account. Nothing leaves your device unless you do that.

The message contains whatever you type, plus a single automatically appended line with the app version and build number, your iOS version, and your device model (for example iPhone17,1). That line is visible to you in the composer before you send, and you can delete it.

Because you send it by email, we necessarily receive the email address you send from. Reports are used only to diagnose and fix problems, and are not added to any mailing list. Ask and we will delete yours.

The beta

Addit's beta is open to anyone through Apple's TestFlight, from the link on hollowpoint.tv/addit. We don't ask you for anything to let you in. TestFlight is Apple's service and is covered by Apple's privacy policy; through it, Apple may share with us information about how the beta is running, such as crash reports, and any feedback you choose to send through TestFlight. We use that only to find and fix problems.

This website used to keep a waitlist for the beta. It no longer does. The addresses given to it before 28 September 2026 are not sold, shared or used for anything else; they are deleted in full when the beta ends, and yours is deleted sooner if you ask at the address below.

What Addit does not do

• No analytics, telemetry or crash-reporting services in the app — the only crash reports we see are the ones Apple's TestFlight shares for beta builds, described above.
• No advertising, and no tracking across apps or websites.
• No selling or sharing of personal information.
• No use of your data to train artificial-intelligence or machine-learning models.
• No accounts of our own — there is nothing to register for, and no password we could hold.

Addit uses Google's official sign-in library to authenticate with Google. That library is governed by Google's privacy policy. Microsoft sign-in is handled by Apple's own ASWebAuthenticationSession talking to Microsoft, covered by Microsoft's privacy statement.

Children

Addit is not directed at children under 13, and we do not knowingly collect information from them.

Your control

• Disconnect an account from the account switcher inside the app.
• Revoke Addit's access entirely at Google account permissions or Microsoft app permissions.
• Delete everything by deleting the app.

Changes

If this policy changes materially, the effective date above will change and the revision will be posted at this address.

Contact

Questions about this policy, or requests concerning your information: legal@hollowpoint.tv