Privacy Policy
MLP Software, LLC ("MLP Software", "we", "us", or "our") operates Companion For Spotify (the "App"). This Privacy Policy explains what information the App processes, how we use it, and the choices you have.
If you have questions about this policy, contact us at support@mlpsoftwarellc.com.
1. Overview
Companion For Spotify is a utility that connects to your Spotify account so you can discover new releases, track playlist changes, and manage playlists using Spotify's API. The App is designed so that your Spotify library data and app preferences are stored on your device. We do not operate a cloud backend that stores your Spotify library or listening history.
Companion For Spotify is an independent application. We are not affiliated with, sponsored, or endorsed by Spotify AB.
2. Information we collect
Depending on how you use the App, the following information may be processed:
Information you provide through Spotify login
When you sign in with Spotify, we receive information from Spotify's authentication service, such as your Spotify user ID, display name, email address (if shared by Spotify), profile image URL, and Spotify subscription product type (for example, free or premium). We use this only to show your profile in the App and to call Spotify's API on your behalf.
Spotify library data retrieved through the API
To provide App features, we request data from Spotify's Web API based on the permissions you grant at login. This may include:
- Playlists you own or follow, including playlist names, descriptions, cover art URLs, and track lists
- Tracks, albums, and artists in your library or that you follow
- Your saved tracks ("Liked Songs") and followed artists
- Metadata needed for discovery features, such as release dates and related artists
This data is fetched from Spotify and cached locally on your device to improve performance. We do not upload your library contents to MLP Software servers.
Data stored on your device
The App stores the following locally:
- OAuth tokens — Spotify access and refresh tokens, stored in your device's secure storage, used to maintain your session and refresh access
- App cache — Playlist snapshots, related-artist lookups, feature "last checked" timestamps, and similar operational data in a local database
- App settings — Preferences such as feature options and UI settings
- Subscription status — A local record of whether Pro is active on this device, based on validation with the app store
- Free-tier usage counters — Per-run scope counts used to enforce free-tier limits on this device
Subscription and purchase information
If you purchase Companion For Spotify Pro, billing is handled entirely by Google Play (Android) or the Microsoft Store (Windows). We receive purchase and subscription status from the store on your device to unlock Pro features. We do not receive or store your payment card details.
Pro status is tied to your app-store account on each device and platform. It is separate from your Spotify login.
Information we do not collect
- We do not collect precise GPS location from your device
- We do not operate user accounts on MLP Software servers for the App
- We do not sell your personal information
Website and support pages
If you visit our website (including this privacy policy page), standard web server logs may record your IP address, browser type, and pages viewed. Our website host may process those logs for security and operational purposes.
Diagnostics (if enabled in a future version)
We may add optional crash reporting or product analytics in a future update to help us fix bugs and improve the App. If we do, we will update this policy and describe what is collected before or when that feature is enabled. We do not currently use Firebase, Sentry, or similar services in the App.
3. How we use information
We use the information described above to:
- Authenticate you with Spotify and maintain your session
- Provide App features you request, such as new-release scans, playlist tools, and song analysis
- Cache Spotify API responses on your device for speed and reliability
- Enforce free-tier usage limits and validate Pro purchases on your device
- Remember your preferences and feature settings
- Respond to support requests and comply with legal obligations
- Improve the App, including debugging if diagnostic tools are enabled
4. How we share information
We do not sell your personal information. We share information only in these circumstances:
- Spotify — When you use the App, API requests are sent to Spotify to read or modify your library as you direct (for example, creating or updating a playlist). Spotify's privacy policy applies to data held by Spotify.
- App stores — Google Play and the Microsoft Store process payments and provide us with subscription or purchase status on your device.
- Legal requirements — We may disclose information if required by law, court order, or to protect our rights, users, or safety.
- Business transfers — If MLP Software is involved in a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction, subject to this policy.
Because library data and tokens stay on your device, there is no routine transfer of your Spotify library to MLP Software's servers.
5. Spotify data
Companion For Spotify uses the Spotify Platform but is not affiliated with, sponsored, or endorsed by Spotify. "Spotify" is a trademark of Spotify AB.
When you connect Spotify, you authorize the App to access your Spotify account according to the scopes shown during login. You can revoke access at any time in your Spotify account apps settings or by logging out in the App. Spotify's Privacy Policy describes how Spotify handles your data.
6. Retention and deletion
Spotify tokens, cached library data, settings, and usage counters remain on your device until you delete them or uninstall the App.
Log out — Use "Log out of Spotify" in Settings to remove stored Spotify credentials from secure storage on your device. Local cache data may remain until you clear app data or uninstall.
Uninstall — Removing the App from your device deletes locally stored App data, subject to your operating system's behavior for secure storage and backups.
We do not retain copies of your Spotify library on our servers because we do not collect it centrally.
7. Security
We use industry-standard measures appropriate for a client-side app, including storing OAuth tokens in platform secure storage and using HTTPS for all Spotify API communication.
No method of electronic storage or transmission is completely secure. You use the App at your own risk and should keep your device and Spotify account credentials protected.
8. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing.
Because most App data is stored on your device, you can delete it by logging out, clearing app data in your device settings, or uninstalling the App. For other requests, contact support@mlpsoftwarellc.com. We will respond within a reasonable time, generally within 30 days.
If you are in the European Economic Area or United Kingdom and believe we are unlawfully processing your information, you may lodge a complaint with your local data protection authority.
9. Children
Companion For Spotify is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.
10. International users
MLP Software is based in the United States. Spotify's services may process data in various countries according to Spotify's policies. When you use the App, Spotify API requests may be routed to Spotify's infrastructure worldwide.
If you access our website from outside the United States, web server logs may be processed in the United States or where our hosting provider operates.
11. California residents
Under the California Consumer Privacy Act (CCPA), as amended, California residents may have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising privacy rights.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. Most data processed by the App stays on your device and is not held in a centralized MLP Software database.
To make a privacy request, email support@mlpsoftwarellc.com with "California Privacy Request" in the subject line.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. If we make material changes, we may notify you through the App or by posting a notice on our website. Continued use of the App after changes take effect means you accept the updated policy.
13. Contact us
MLP Software, LLC
29606 English Way
Novi, MI 48377
United States
Email: support@mlpsoftwarellc.com