Privacy Policy

Updated September 22, 2026

This policy applies to the DRM (MusicList) iPhone and iPad app and its music collection service. It explains how information is handled when you use the app.

The cloud reading experience does not require a DRM reader account. When your device is signed in to iCloud, the app can use your private iCloud database to sync favorites, channel subscriptions, reading progress, settings, and in-app listening history across devices. DRM's content service does not receive this as a reader profile.

1. Information handled by the app

2. Apple Music

The app requests Apple Music access only when you use playback or playlist saving. It uses Apple's MusicKit to look up tracks and regional availability, play music, and create a playlist in your music library when you choose “Save to Apple Music.” In the current cloud mode, save task status and playlist identifiers are stored locally on your device. The app does not ask for your Apple ID password. Apple's handling of information in its music service is governed by the Apple Privacy Policy. You can manage music access in system settings; the relevant features will stop working if you revoke access.

3. Sharing and service providers

We do not sell your personal information. Apple CloudKit processes iCloud sync data on your behalf and stores it in your private database. Requests needed for content and music features may also be processed by Apple Music and our cloud hosting, object storage, CDN, and network proxy providers. If you connect to a local editorial service, its operator handles the pairing and usage data described above.

4. Retention, deletion, and your choices

From the app's Listening Log, you can export your synced personal data, clear listening history, or delete all iCloud sync data. Uninstalling generally removes local data but does not automatically delete copies already synced to iCloud. Playlists created in Apple Music remain managed in Apple Music and are not deleted when you delete DRM sync data.

The editorial party you connect to manages legacy pairing service data. To access or delete reader information held by that service, contact the editorial party and provide the information needed to identify your pairing. For questions or requests about DRM's cloud service, use the contact information below. We will verify your identity and handle requests under applicable law.

5. Security and policy changes

We use HTTPS to transmit online content. Personal fields in private CloudKit records use CloudKit encrypted fields, and the app stores legacy pairing credentials in the device's system Keychain. We will update this policy as features and data practices change and show the update date here.

6. Contact

Operator: Gill
Privacy questions and data requests: jiahao0408@gmail.com