Karavoke: Dynamic Lyrics — Privacy Policy

Last updated: 15 May 2026

Karavoke is built with privacy in mind. This policy explains what data the App processes, where it goes, and what you control.

Short version

  • We do not have user accounts.
  • We do not sell or share personal data.
  • We do not upload microphone audio. Song identification happens on‑device via Apple’s ShazamKit.
  • Lyric lookups are made by your device to the lyrics provider (LRCLib) over HTTPS.
  • Purchases are handled by Apple. We never see your payment details.

1. Data we process on your device

The following information stays on your device (in app storage or the iOS App Group container) and is never sent to a server we operate:

  • Your identified‑song history (title, artist, artwork, ISRC if available).
  • Your preferences (active source, font size, accent colour, widget and Live Activity customisation, etc.).
  • A small lyrics cache so previously‑viewed songs work offline.
  • Quota counters that record how many identifications you have used on the free tier.

2. Microphone

If you choose Shazam as your identification source, the App opens a short microphone session (typically a few seconds) to fingerprint the audio in the cabin. The fingerprinting and matching are performed by Apple’s ShazamKit framework, on your device. Karavoke does not record audio to disk, and does not transmit raw microphone audio off the device. You can revoke microphone access at any time in iOS Settings → Karavoke.

3. Apple Music (MusicKit)

If you choose Apple Music as your source, the App requests permission to read your current “Now Playing” item via Apple’s MusicKit. This permission is granted by you directly to Apple; Karavoke only receives the song metadata necessary to fetch lyrics (such as title, artist, and ISRC). We do not request access to your library, playlists, or listening history.

4. Spotify SDK

If you choose Spotify as your source, the App connects to the official Spotify mobile SDK on your device to read the currently‑playing track. Your Spotify authentication is handled by Spotify; Karavoke receives only the track metadata needed to look up lyrics. Spotify’s own privacy policy governs that connection.

5. Lyric lookups

To display synced lyrics, your device sends the song’s title, artist, duration, and (when available) ISRC to LRCLib, a free community lyrics service, over HTTPS. The request contains no personal identifier from you and is not associated with your Apple ID. See LRCLib’s site for their own terms.

6. In‑app purchases

Karavoke offers optional in‑app purchases that unlock additional features and remove identification limits. Purchases are handled by Apple’s StoreKit and processed through RevenueCat for receipt validation. RevenueCat receives a pseudonymous device identifier and the receipt; it does not receive your Apple ID, name, email, or payment details. See RevenueCat’s privacy policy for details.

7. Analytics and crash reporting

Karavoke does not currently integrate third‑party analytics SDKs or advertising SDKs. Should this change in a future version, this policy will be updated and the relevant disclosures will be added to the App Store privacy label.

8. Children

Karavoke is not directed at children under 13 and does not knowingly collect personal information from children. Family Mode is a feature designed to filter explicit lyric content; it is not a substitute for adult supervision.

9. Your rights

Because Karavoke does not maintain user accounts or store personal data on a server we control, most data‑subject requests can be fulfilled by you directly on your device:

  • Access / portability: the song history is visible in the App.
  • Erasure: deleting the App removes all locally stored data.
  • Restriction: revoke microphone, Apple Music, or Spotify access in iOS Settings.

If you have any other request related to your privacy rights (including under the GDPR, UK GDPR, or the CCPA/CPRA), please email akhaneva.co@gmail.com.

10. International users

Karavoke is operated from the developer’s country of residence. By using the App from outside that country, you understand that the limited data processing described above may occur on Apple’s, Spotify’s, or RevenueCat’s infrastructure, which may be located in different jurisdictions.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be announced inside the App or on this site.

12. Contact

Questions, requests, or privacy concerns? Email akhaneva.co@gmail.com.