Effective date: 14 October 2026 · Curvio Studio · parivallalin@gmail.com
Hifinis is an offline audiophile music player. Your music, your listening habits, and your files stay on your device. Hifinis has no accounts, no analytics SDKs, no advertising, and no tracking of any kind.
Hifinis does not collect, store on our servers, sell, or share: your music files, library contents, playlists, favorites, play history, settings, location, contacts, or any personal identifiers. We operate no server; nothing about you is transmitted to Curvio Studio.
You choose the folders Hifinis may read using Android's system folder picker. Hifinis indexes the audio files in those folders (titles, artists, albums, artwork) into a local database on your device only. Removing a folder or uninstalling the app removes that index.
When "Artist images" is enabled (Settings → Library & appearance), Hifinis sends the artist name being displayed to the Deezer API (api.deezer.com) to fetch a public artist photo. The artist name is the only data sent; results are cached on your device. Deezer's own privacy policy applies to that request. You can turn this off at any time.
When "Fetch lyrics online" is enabled (Settings → Lock screen & widgets) and a song has no synced lyrics of its own, Hifinis sends that song's title, artist, album and length to LRCLIB (lrclib.net), a free, open lyrics database, to look up its lyrics. Nothing else is sent: no account, no identifier and no file. The results are cached on your device, so each song is looked up at most once. You can turn this off at any time. With artist images and online lyrics off and no network source added, Hifinis makes no network requests at all (apart from the update check below, in versions downloaded from our website).
The version of Hifinis downloaded from our website asks GitHub (api.github.com, operated by GitHub, Inc.) about twice a day whether a newer version has been published, and downloads it from GitHub only when you tap Update. These requests carry no personal data — GitHub sees only your IP address and the app version, as with any web request. You can turn the check off in Settings → About → Notify me about updates. The Google Play version has no such check; Play handles its updates.
Android requires the microphone (RECORD_AUDIO) permission for its audio-visualizer API, which Hifinis uses solely to compute the on-screen spectrum of the music Hifinis itself is playing. Hifinis does not record, store, or transmit any audio from the microphone. You may deny this permission; only the visualizer screen is affected.
With your permission, Hifinis talks directly to USB DACs you connect, purely to play audio. Device details (model, supported formats) are read locally and never leave your device.
Hifinis can play music from places other than your phone's storage — a home media server (Jellyfin, Plex, Subsonic/Navidrome), a network share (SMB, WebDAV/Nextcloud, DLNA/UPnP, FTP), a cloud drive (Google Drive, Dropbox, OneDrive), a streaming service you already subscribe to (Tidal, Qobuz, SoundCloud), or internet radio. None of this exists until you add a source and enter its address and your own credentials.
Lyric translation runs entirely on your device using Google's ML Kit on-device translation. The first time you pick a language, Android downloads that language model from Google's servers; after that, translation works offline. Your lyrics are never uploaded — the text is translated locally and is not sent anywhere.
The tag editor writes the changes you make (title, artist, album, artwork and so on) back into your own audio files, on your device. Nothing about those edits is transmitted.
The in-app Backup feature writes a file to a location you choose, containing your settings and playlists. It stays wherever you save it; we never receive it.
Hifinis is a general-audience music player and does not knowingly collect data from anyone, including children.
If this policy changes, the updated version will be posted at this address with a new effective date.
Questions: parivallalin@gmail.com