Privacy policy

Last updated 1 November 2026

The short version: we collect nothing about you. There’s no Cloudtape account and no Cloudtape server, so there’s nowhere for your data to go. Your music and everything the app knows about it stay on your phone.

Who we are

Cloudtape is made by Believe Labs, LLC (“we”), a company in San Francisco, California. This policy covers the Cloudtape apps for iPhone and Android, and this website.

What the app collects

Nothing. The app has no analytics, no advertising, no tracking and no third-party SDKs (code from another company that reports back to it). We don’t know who uses Cloudtape, what they listen to or how often. On the App Store this is labelled “Data Not Collected”.

Google Play labels things differently. Its data safety section counts anything the app sends to another company at your request, so it lists app activity: your Last.fm scrobbles, if you connect Last.fm, and the artist and album names the app looks up to show bios. Neither is kept by us. See Artist bios and Last.fm below.

What stays on your phone

These are made on your phone and stay there:

• Your music files, and the artwork inside them.
• The library index (a small database of titles, artists and albums read from your files).
• Playlists, play counts and the place you left off in each long file.
• Your settings.
• Crash and diagnostic logs. You can read them in the app under Diagnostics. They only leave the phone if you choose to send them to us yourself.

Three small things are kept in the phone’s secure storage (the iPhone keychain, or the Android Keystore): your Dropbox and Last.fm sign-ins, and the date your trial started.

Deleting the app removes all of this, with one exception on iPhone. iOS keeps the keychain after an app is gone, so on iPhone the trial date survives and reinstalling doesn’t restart the trial. Android keeps nothing: deleting the app there removes the trial date too.

Dropbox

When you connect Dropbox, you sign in on Dropbox’s own page. That sign-in is between you and Dropbox; we never see your Dropbox password. Dropbox gives the app a token, which is stored in your phone’s secure storage.

Cloudtape asks Dropbox for read-only access. It reads your account name to show which account is connected, lists the folders you choose, and downloads the files in them. It never writes to, moves or deletes anything in your Dropbox. Files travel straight from Dropbox to your phone. They don’t pass through any server of ours.

Dropbox’s handling of your data is covered by Dropbox’s privacy policy.

Artist bios

When you open an artist or an album, the app looks up a short bio. To do that it sends the artist’s name, and the album’s title, to Release Wave (a music site also run by Believe Labs) and to Last.fm. Nothing else goes with them: no account, no ID, nothing about you or the rest of your library. Like any request over the internet, it carries your phone’s IP address.

Release Wave doesn’t keep these lookups. Last.fm gets them as ordinary requests to its public API, covered by Last.fm’s privacy policy. The bio is then kept on your phone, so the same artist isn’t looked up again each time.

Last.fm (optional)

If you connect Last.fm, the app sends Last.fm the tracks you play (“scrobbles”) and the tracks you love. Plays made offline are kept on the phone and sent later. The Last.fm session key is stored in your phone’s secure storage. You sign in on Last.fm’s own page, so your Last.fm password never reaches Cloudtape.

Last.fm’s API can’t delete a scrobble that has already been sent. To remove one, the app opens the Last.fm website and uses your own website session there. Again, your password stays with Last.fm.

If you never connect Last.fm, the only thing sent to it is the artist and album names used for bios (see Artist bios), and nothing that identifies you. What Last.fm does with scrobbles is covered by Last.fm’s privacy policy.

Purchases

The one-time unlock is bought through Apple on iPhone and through Google Play on Android, and they handle the payment. Cloudtape gets a signed confirmation that it was bought, and nothing else: not your name, your Apple ID or Google account, or your card. The app keeps that answer on the phone, so an unlock keeps working offline.

This website

This site has no analytics, no cookies and no tracking scripts. It loads its typeface from Google Fonts, so Google receives your IP address when the page loads, as it does for any site using Google Fonts. Our hosting provider may keep standard server logs, such as IP addresses and request times, for security. We don’t use them to identify anyone.

Children

Cloudtape isn’t directed at children.

If this changes

If we ever add something that collects data, like a mailing list, we’ll update this page first and change the App Store and Google Play labels to match.

Contact

Questions about privacy go to dream@believelabs.com.