Privacy

What we collect, what stays on your Mac, and why — written plainly, with no surprises.

Kapell is built for the love of the music, not for harvesting data about you. Your library, your Listen Log, and your Crates live on your Mac and in iCloud. We don't sell anything about you, and we don't track you across the web.

This website

This site uses Plausible for analytics: privacy-friendly, no cookies, and no personal data collected. It tells us how many people visit a page, not who they are. Nothing here follows you around.

The app on your Mac

Kapell is a native macOS app, and most of it stays close to you. Your music library, your Listen Log, yourCrates, and the enrichment Kapell has fetched are stored on your Mac and synced through your own iCloud account — never through our servers. There's no Kapell account to create, and you don't sign in to use it.

What the app sends

A few things do leave your Mac:

  • USAGEAnonymous usage analyticsWhich features get used and how often — in aggregate, never tied to who you are.
  • CRASHESCrash & error reportsDiagnostics when something breaks, so it can be fixed. Sent to help, not to watch.
  • DEVICEApp & device infoApp version, macOS version, and hardware class — for compatibility and support.
  • ENRICHMENTEnrichment lookupsTrack identifiers go to Kapell's backend to fetch the credits, samples, and history. This is how enrichment works at all.

None of this is sold, and none of it is used to build a profile of you. It exists to keep Kapell working, fix what breaks, and make enrichment possible.

Apple Music

Kapell plays through the Apple Music® app and the library you already have — it's a client, not a replacement. Your music and your subscription stay with Apple, and what you do inside Apple Music is governed byApple's privacy policy, not ours.

Verifying your purchase

Kapell is a one-time purchase — there’s no subscription to renew. To confirm the enrichment service is talking to a real copy of Kapell, the app sends an Apple-signed receipt that our server checks on its own — we make no call back to Apple. The receipt tells us only that the app was bought; it carries no name, email, Apple ID, or payment details, and we never write it to disk.

From that receipt we derive a one-way pseudonymous handle — a keyed hash of Apple’s transaction id — and immediately discard the original. We use that handle, never your identity, to enforce fair-use rate limits and to record which catalog items get looked up — and, for each one, which of our data sources did or didn’t have something to add. That tells us what’s popular, what’s under-enriched, and how each source is pulling its weight. The handle can’t be reversed without a secret key we hold separately, and our analytics hold nothing that directly identifies you.

We call this pseudonymous, not anonymous, on purpose: on its own our analytics can’t be traced to a person, but because re-linking is theoretically possible with our key and Apple’s records, we still treat it as personal data. The same catalog-lookup logging applies to everyone using the enrichment service — beta testers and owners alike. We keep these records for 13 months, then delete them.

What the enrichment service never sees: your listening history, your playlists, or your library. It only ever receives the single catalog item you’re looking at.

The beta list

If you give us your email to join the beta, we store it for one reason: to send you beta and launch updates. We don't sell it, we don't share it, and you can ask us to remove it at any time.

Questions, or want your data removed?

Email hello at kapell.fm and a real person will answer. If this policy ever changes, we'll update it here — the date below tells you when it last did.