Tinyo Music Privacy Policy

Effective October 5, 2026. Operator: Hangzhou Xulian Information Technology Co., Ltd.

Tinyo Music helps you discover and enjoy music with Apple Music. This policy explains what information we use, why we use it, and the choices available to you. Descriptions of optional features apply when you use those features. We do not sell your personal information or use it for third-party advertising profiles.

1. Information we use and why

• Account and security. We use your Sign in with Apple account identifier, Tinyo account and device identifiers, display name, selected avatar, and security verification information to provide sign-in, protect your account, and restore your data.
• Music and favorites. We use Apple Music access permissions, your music-store region, song identifiers, favorites and the times they were saved, and relevant song information to provide playback, discovery, favorite backups and exports you request.
• Listening and preferences. Listening activity, duration, song changes, likes, removals and playback outcomes help us improve discovery and maintain your preferences. Recommendations use preferences on your device. Account-related feedback supports backups and aggregated discovery. Where private listening history and preference recovery are available, the associated records are used to restore your experience, not to publish your listening history.
• Radio. We recommend radio suited to your local time. For this purpose, Tinyo uses your device's time zone, not your precise location or GPS coordinates. This time zone is not added to your personal listening records or optional usage analytics.
• Community. If you use community features, we process song votes, comments, moderation results, comment likes, reports and blocking choices to display community content and protect users.
• Support. We process information you choose to send when contacting us. Feedback emails do not automatically include your listening history.

Your device also stores playback settings, recommendation preferences and necessary temporary data. Tinyo does not upload your complete Apple Music library or download, store or redistribute Apple Music audio. We do not send your song information to third-party lyrics services.

2. What other users can see

Your display name and selected avatar are visible with your public profile and approved comments. When public favorite collections are available, your favorites list is public by default to other signed-in Tinyo users. You can make the list private in your profile; this hides the list, not your profile, display name or avatar. Saving someone else's collection lets you follow its changes without copying their songs or casting votes.

Where community voting is available, adding a new favorite also casts a vote for that song in your music-store region; removing it withdraws the vote. Existing favorites are not automatically converted into votes. Song charts show aggregate counts, not who voted. Favorites, song votes and comment likes are separate.

Comments become public only after moderation. Until then, a pending comment is visible only to its author. Reports are available only to authorized administrators for moderation and abuse handling. You can report comments and block authors.

3. Sharing and website previews

Sharing is your choice. A song link identifies the public song and may include its music-store region and whether it was shared from Music or Radio. A public collection link identifies the shared profile. Song links do not publish your private listening history or a personal story. Cards and QR codes are created on your device. The recipient app decides which shared text, link or image it accepts and handles that information under its own policies.

Saving a card to Photos or copying content requires your action. Tinyo does not read your photo library or clipboard for sharing. Exported cards contain no audio. Exporting favorites to Apple Music and sending diagnostic files also require your action.

Our website and song previews use public song information and artwork supplied by Apple. Apple receives the network information needed to deliver artwork and, only when you press play, a short audio preview. Tinyo does not host or proxy audio. Temporary playback buffering is managed by your browser. The homepage has no usage analytics or account and library access. Opening a public song page does not read your private profile, favorites or listening history.

Installing the app does not automatically recover a previously opened song. You can tap the original link again after installation. Tinyo does not use clipboard reading or device fingerprinting for this purpose.

4. Optional usage analytics

Usage analytics help us understand reliability and improve the app. The welcome screen preselects this optional choice; you can deselect it before continuing with Apple sign-in, and no analytics events are sent before you actively continue. You can also change the choice in your profile.

When enabled, PostHog and Google Firebase may receive a random installation identifier, platform and app/device information, visits, playback and sharing actions, numerical listening summaries, and reliability or error categories. These events do not include song titles, song or artist identifiers, your music library, private per-song listening records, or your Tinyo account identifier. Providers may process network information needed to receive requests. We do not enable session recordings or automatic capture of everything you do.

With analytics consent, a shared link may include a random measurement code unrelated to your account or song. Recipient apps measure an opening only when their analytics are enabled. A sharing webpage asks separately, with an unchecked option, before measuring a deliberate app-open action. Simply viewing a page or generating a link preview does not count as an opening. A system sharing result does not prove delivery or that someone read it.

Turning analytics off stops new events, clears pending local analytics and listening summaries, and resets the local analytics identifier. Signing out also clears these local analytics data. These actions cannot recall events already sent. Analytics providers retain received events under their service and project retention policies.

5. Diagnostics and security

To diagnose faults and protect the service, Tinyo records limited operational information, such as request outcomes, timing and error categories. Radio diagnostics may include public song information and generated radio narration. Diagnostic logs exclude access credentials, private keys, full account or device identifiers, and personal music-library contents.

App diagnostic files remain on your device unless you choose to share them. They are kept for up to seven days or until the local storage limit is reached. Service diagnostics are ordinarily retained for up to 30 days; deleted operational files may remain recoverable for a further seven days under deletion protection. These records are used for service operation, not advertising.

6. Service providers

• Apple provides sign-in, music access and playback, artwork, previews and system sharing.
• Microsoft Azure hosts account data, favorites backups, listening feedback and community data. Where AI radio narration is available, public radio song information is sent to Azure OpenAI and related search services to prepare narration. We do not send your account or device identifiers, private library or audio to the generation provider. Speech is generated on your device; synthesized audio is not uploaded. Requests already sent cannot be withdrawn. Provider processing and retention are governed by the applicable Microsoft service terms.
• OpenAI processes comment text for moderation. We do not send account or device identifiers, private music libraries or audio for this purpose. OpenAI may retain abuse-monitoring logs for up to 30 days by default.
• PostHog and Google Firebase provide optional analytics as described above.

These providers may process information in countries other than where you live. Their applicable privacy policies and service terms also govern their processing. You can read the policies of Apple, Microsoft, OpenAI, PostHog and Firebase. Team and contact links lead to XUNOVA; use of the app is subject to Apple's Standard EULA.

7. Retention and your choices

Account, favorites, listening feedback and community data are kept to provide those services until removed through available controls or account deletion. Private listening records, where available, do not automatically expire. Anonymous share-measurement receipts expire after seven days. Analytics and operational records follow the periods described above.

You can manage Apple Music permissions in system settings, edit your profile and favorites, make your collection private, remove saved collections, disable analytics, report or block community content, and sign out. To request deletion of your Tinyo account, use the account deletion action in your profile.

After successful account deletion, we remove the associated account, profile, devices, favorites and saved collections, listening data, community votes, comments, comment likes, reports and blocking data, and clear local Tinyo favorites and feedback. Other users' saved references to your collection become unavailable. Signing in again creates a new account and does not restore deleted data. Playlists you exported to Apple Music remain under your control there.

Deleting a Tinyo account does not reliably identify historical anonymous analytics events. Contact us for help with those records or requests to access, correct or delete your personal information. Available rights depend on applicable law.

8. Contact and policy changes

If our information practices materially change, we will update this policy and provide any notice or consent required by applicable law.

Hangzhou Xulian Information Technology Co., Ltd. · info@xunova.tech

Tinyo Music 隐私政策

生效日期：2026 年 10 月 5 日。运营主体：杭州煦联信息技术有限公司。

Tinyo Music 帮助你通过 Apple Music 发现和欣赏音乐。本政策说明我们使用哪些信息、用途以及你的选择。可选功能的说明在你使用相应功能时适用。我们不出售个人信息，不将其用于第三方广告画像。

1. 我们使用的信息及用途

• 账号与安全。我们使用 Apple 登录账号标识、Tinyo 账号与设备标识、显示名称、所选头像及安全验证信息，提供登录、账号保护和数据恢复。
• 音乐与收藏。我们使用 Apple Music 授权状态、音乐商店地区、歌曲标识、收藏及收藏时间和相关歌曲信息，提供播放、音乐发现、收藏备份及你主动选择的导出。
• 聆听与偏好。收听行为与时长、切歌、喜欢与取消、播放结果帮助我们改善发现体验并保存偏好。推荐使用设备上的偏好信息；账号关联的反馈用于备份和汇总发现。在提供私人播放记录与偏好恢复的功能中，相关记录用于恢复你的体验，不会公开你的听歌历史。
• 电台。我们依据你的当地时间，推荐适合当下的电台。为此，Tinyo 使用设备时区，不获取精确位置或 GPS 坐标，也不将该时区加入个人听歌记录或可选使用统计。
• 社区。使用社区功能时，我们处理歌曲投票、评论、审核结果、评论点赞、举报和屏蔽选择，用于展示社区内容及保护用户。
• 联系支持。我们处理你主动提供的信息，反馈邮件不会自动附带听歌历史。

设备还会保存播放设置、推荐偏好及必要的临时数据。Tinyo 不上传完整 Apple Music 资料库，不下载、存储或转发 Apple Music 音频，也不向第三方歌词服务发送你的歌曲信息。

2. 其他用户能看到什么

公开资料和已审核评论会显示你的名称与所选头像。在提供公开收藏列表的功能中，你的收藏默认向其他已登录 Tinyo 用户公开。你可以在个人页将列表设为私密；这会隐藏列表，但不会隐藏个人资料、名称或头像。保存他人的收藏列表可以跟随其后续变化，不会复制歌曲或产生投票。

在提供社区投票的功能中，新增收藏会同时为该歌曲在你的音乐商店地区投一票，取消收藏会撤回该票。已有收藏不会自动转换为公开票。榜单只显示汇总票数，不显示投票者身份。个人收藏、歌曲投票和评论点赞分别处理。

评论通过审核后才会公开，待审核时仅作者本人可见。举报信息仅供获授权的管理员审核和处理滥用行为。你可以举报评论及屏蔽作者。

3. 分享与网页试听

分享由你主动选择。单曲链接标识公开歌曲，并可能包含歌曲所属商店地区及 Music 或 Radio 分享来源；公开收藏链接标识被分享的个人页。歌曲链接不会公开私人听歌历史或自动发布个人故事。卡片和二维码在设备上生成，接收 App 决定接受哪些文字、链接或图片，并按其自身政策处理。

保存卡片到相册、复制内容均须由你操作。Tinyo 不为分享读取相册或剪贴板，导出卡片不含音频。导出收藏到 Apple Music、发送诊断文件也须由你主动选择。

官网及歌曲预览使用 Apple 提供的公开歌曲信息和封面。Apple 会收到提供封面所需的网络信息；只有你点击播放后，浏览器才从 Apple 获取歌曲试听片段。Tinyo 不托管或代理音频，临时播放缓冲由浏览器管理。首页不使用访问统计，不访问账号或资料库；打开公开单曲页不会读取私人资料、收藏或听歌历史。

安装 App 不会自动恢复此前打开的歌曲；安装后可以再次点击原链接。Tinyo 不为此读取剪贴板或使用设备指纹。

4. 可选使用统计

使用统计帮助我们了解稳定性并改善产品。欢迎页预选此可选项，你可以在继续 Apple 登录前取消；在你主动继续前，不发送统计事件。之后也可在个人页更改选择。

开启后，PostHog 和 Google Firebase 可能接收随机安装标识、平台及设备和 App 信息、页面访问、播放与分享操作、数值收听汇总、稳定性或错误类别。这些事件不包含歌名、歌曲或艺人标识、音乐资料库、私人逐曲播放记录或 Tinyo 账号标识。提供方可能处理接收请求所需的网络信息。我们不开启会话录屏，也不自动采集你的一切操作。

经同意，分享链接可能带有与账号和歌曲无关的随机统计码。接收方 App 仅在其统计开启时记录打开；分享网页会以默认未勾选的选项另行征求同意，只有同意后主动点击打开才进行测量。仅访问网页或生成链接预览不计为打开，系统分享结果也不证明已经送达或被阅读。

关闭统计会停止新事件、清除本机待发送统计和数值收听汇总，并重置统计标识；退出登录也会清除这些本地统计数据。这些操作无法撤回已发送事件。分析提供方依其服务和项目保留政策保存已接收事件。

5. 诊断与安全

为排查故障及保护服务，Tinyo 记录请求结果、耗时、错误类别等有限运行信息。电台诊断可能包含公开歌曲信息及生成的电台串场文案。诊断日志不包含访问凭据、私钥、完整账号或设备标识以及私人音乐资料库内容。

App 诊断文件保留在你的设备上，除非你主动分享，最长保存七天或在达到本地容量限制时更早清理。服务运行诊断通常最多保存三十天；删除保护可能使已删除的运行文件在额外七天内仍可恢复。这些记录用于服务运行，不用于广告。

6. 服务提供方

• Apple 提供登录、音乐访问与播放、封面、试听及系统分享。
• Microsoft Azure 托管账号、收藏备份、听歌反馈和社区数据。在提供 AI 电台串场的功能中，公开电台歌曲信息会发送至 Azure OpenAI 及相关搜索服务，用于准备串场内容；不会向生成提供方发送账号或设备标识、私人曲库或音频。语音在设备上生成，合成音频不上传；已发出的请求无法撤回。提供方依适用的 Microsoft 服务条款处理及保留信息。
• OpenAI 处理评论文本以进行内容审核，不为此接收账号或设备标识、私人曲库或音频。其滥用监测日志默认可能保留最多三十天。
• PostHog 和 Google Firebase 提供上文说明的可选使用统计。

这些提供方可能在你所在国家或地区以外处理信息，其适用的隐私政策及服务条款也约束相应处理。可查看 Apple、Microsoft、OpenAI、PostHog 和 Firebase 的政策。团队与联系我们链接指向 XUNOVA；App 使用适用 Apple 标准 EULA。

7. 保存期限与个人选择

账号、收藏、听歌反馈及社区数据会为提供相应服务而保存，直到你通过可用操作移除或删除账号。提供私人播放记录的功能中，记录不会自动到期。匿名分享测量记录七天后过期；统计与运行记录按上文所述期限处理。

你可以在系统设置管理 Apple Music 权限，在 Tinyo 编辑个人资料和收藏、将收藏设为私密、移除已保存的列表、关闭统计、举报或屏蔽社区内容及退出登录。需要删除 Tinyo 账号时，可在个人页使用删除账号功能。

账号成功删除后，我们移除相关账号、资料、设备、收藏与保存的列表、听歌数据、社区投票、评论、评论点赞、举报和屏蔽数据，并清除本机 Tinyo 收藏与反馈。他人保存的你的收藏列表将不可用。再次登录会创建新账号，不恢复已删除数据；已导出到 Apple Music 的歌单仍由你在那里管理。

仅凭删除 Tinyo 账号无法可靠识别历史匿名统计事件。如需处理这些记录，或申请访问、更正、删除个人信息，请联系我们；具体权利依适用法律确定。

8. 联系与政策更新

如信息处理方式发生重大变化，我们会更新本政策，并依法提供必要通知或征求同意。

杭州煦联信息技术有限公司 · info@xunova.tech