PX7 Digital Mixtapes privacy

Local playlists are stored as JSON: the direct Mac build uses ~/Library/Application Support/PX7 Playlists/library.json, while iOS and the sandboxed Mac Store build use Application Support inside their own app container. Playlist notes, source labels, kept-song/position flags, rules, snapshots and the last successful export list are stored in that same local library. These workshop functions run on your device. The app remembers import text and the public search region in app preferences. It does not include analytics or advertising SDKs.

iCloud library sync is optional and off until you enable it in Settings and confirm combining libraries. When enabled, the app sends mixtapes, inbox items, drafts (including import text and selected matches), notes, source names/links, cover images, snapshots, deletion information and recoverable conflicting edits to your private CloudKit database in iCloud.digital.px7.mixtapes. Devices using the same iCloud account can receive that content. Apple Music connections and unconfirmed playlist-write receipts stay on each device; Apple Music authorization, private-update credentials and audio files are not part of the synced document. Turning sync off keeps local data and the existing iCloud copy. An account change or a missing previously synced cloud library pauses sync and requires a new explicit decision before combining again.

Friend suggestion links are optional. Creating a link sends only the invitation title you review to PX7 Digital’s suggestion service at mixtapes-suggest.px7.digital. Anyone with the public link can see that title and submit a song link or Artist — Song, an optional name and a note. Other suggestions and your playlist contents are not shown to visitors. Treat the public link as an invitation you can forward; use a title you are comfortable sharing. The host receives the submitted fields for review and chooses the Apple Music recording and destination before accepting. Accepting adds to the local mixtape; sending it to Apple Music still requires a separate export or synchronization review.

The suggestion service uses Cloudflare Workers and a D1 database constrained to the EU. Requests still pass through Cloudflare’s network, which processes connection information such as IP addresses under Cloudflare’s privacy policy. IP-based rate limiting reduces abuse; the app does not add advertising, analytics, tracking cookies or third-party page scripts. Stored service data consists of invitation titles/times, submitted song/name/note fields, review decisions and cryptographic hashes of independent access keys. No Apple Music token, Spotify account, full playlist or microphone recording is sent to this service. Names and notes can identify their author if provided; the service does not promise that submitted content is anonymous.

Links expire after 30 days or can be closed earlier by their host. Public submission stops immediately on closure/expiry. Server copies are scheduled for deletion within seven days of closure/expiry. The host’s already collected suggestions, notes, original links and approved songs may remain in the host’s local library, review cache and backups until the host removes that content. The app saves unfinished link creation and decisions locally so an interrupted request can be reviewed and resumed without duplicate additions.

The link’s separate owner key stays in Keychain and is never included in a public link, ordinary library backup or review journal. “Sync owner access with iCloud Keychain” is optional and off by default; enabling it lets Apple synchronize that key to your other eligible devices under your iCloud Keychain settings. Public invitation metadata and approval receipts join the private CloudKit library only if library sync is already enabled. Library sync and owner-key sync are separate choices. Without the owner key a device can retain invitation metadata but cannot read or decide its suggestions. Closing a link stops new submissions; it does not remove songs already approved by the host.

Shazam recognition starts only when you choose Listen in Recognize a Song. Microphone permission is requested at that point. Apple’s ShazamKit converts captured sound into an audio fingerprint and checks it against Shazam’s catalog. Mixtapes does not save microphone audio, add to the Shazam library or start playback. Stop, closing the recognition screen or leaving the active listening scene cancels recognition. Saving is a separate action: title, artist, safe artwork/catalog/source links and the recognition date are stored in your inbox. These metadata follow optional private iCloud inbox sync; no audio or fingerprint is included in the library. The Apple Music recording still requires review before moving into a mixtape.

When you search, titles and artist names are sent to Apple's catalog services. When you paste a Spotify song link and choose Find Songs, the link is sent to Spotify's public oEmbed service and the song's public page is read to identify its title and artist. Artwork is loaded from the music services' image servers. Spotify sign-in is not used.

Playlist requests and More Like These use Apple's on-device language model when it is available. The model receives your request, up to three chosen seed song titles/artists and up to 18 previous suggestion titles/artists. It has no access to notes, person/source labels, files, Apple Music credentials or the rest of your library. The model proposes artist names and interprets requested years/minutes; those artist names and public identifiers are sent to Apple's catalog to retrieve real recordings. The rest of your local collection is used only on this device to exclude known songs from suggestions. Artist identity ambiguity stays available for review. Mood/style are curatorial suggestions, not verified song metadata. Festival lineups search the artist names you review; choosing an artist sends its public catalog identifier to retrieve songs. No model request creates or edits an Apple Music playlist. Requests, lineup/setlist text, suggestions, search results, exclusions, numeric limits and recording choices are saved together as local drafts, backed up and included when you enable private iCloud sync.

MusicBrainz searches are optional and start only when you choose Search MusicBrainz in Song Details. The request contains either the song's ISRC or the title and artist shown in the editable search fields. Reviewing a recording, refreshing it or checking an artist/album genre sends the relevant public MusicBrainz identifier to musicbrainz.org. Requests identify the app/version and support URL; no Apple Music token, playlist name, note or shared-by label is included. MusicBrainz receives your network address and handles requests under MetaBrainz's privacy policy. No MusicBrainz account or write access is used.

Successful MusicBrainz responses are cached on this device for seven days, up to 200 files/32 MB. Clearing the operating system's app cache does not remove saved song information. Only a recording and any genre you explicitly choose and then Save in Song Details are retained in your library, history and backups, and included if you enable iCloud sync. The original catalog genre and Apple Music identity remain separate. Collection Connections reads this saved information locally, with no automatic or bulk requests. Removing MusicBrainz information from a song leaves earlier library snapshots available for recovery. MusicBrainz is community edited; missing information remains unknown. MusicBrainz's data licences distinguish CC0 core data from supplementary data under CC BY-NC-SA 3.0. PX7 Digital uses the service under its existing MetaBrainz agreement, confirmed by the owner on 22 October 2026.

Apple Music permission is requested only when you choose Connect Apple Music. MusicKit manages account authorization. The app reads playlists on request and creates a new private Apple Music playlist only after you choose Create Playlist. You may explicitly connect a local mixtape to an existing Apple Music playlist. Synchronize reads its current songs and shows changes before approval. Sending supports additions at the end; the app does not delete or reorder existing remote songs. Receiving updates the local song list after review and saves a local snapshot first. Playlist identifiers and unconfirmed-send receipts are stored in the local library.

Screenshot text recognition runs on your device with Apple Vision. The recognized text is editable; song names are sent to the catalog only when you choose to find matches. Inbox items, source notes and saved drafts remain in the local library and are included if you explicitly enable iCloud library sync.

Exported CSV files contain song metadata and links, never audio. When you explicitly choose playback, MusicKit streams the selected catalog song using your Apple Music account. macOS uses the Mixtapes player; iOS uses the system Music player. The app does not save full song files or inspect their audio. Showing a song in Apple Music does not request playback. On Mac you can reveal the local library; on iOS you can export a library backup package from Settings, including saved cover images. A damaged library can still be exported unchanged as JSON for recovery. Deleting the iOS app removes its local container. Save a backup first. Working import drafts are checkpointed locally when iOS leaves the foreground.

Cover photos are copied locally at a maximum long edge of 2048 pixels; location and camera metadata are omitted from the saved PNG. Album collages download up to four public Apple artwork images only when you choose Build from This Mixtape. Saved images and crop/text/color settings stay with the local library and its history. A cover PNG export contains the rendered design; a library backup includes the source cover images. No cover images are sent to the update service.

Only the directly downloaded Mac build includes private updates. The iOS and Mac App Store builds exclude the updater and use Apple’s update mechanisms. Private updates connect to groovefile.app only after this Mac is approved through Safari. A random access key is kept in this Mac’s Keychain under digital.px7.playlists.private-updates; it is not synced through iCloud or included in app packages. Safari receives a device name and the key’s hash, never the key itself. The shared PX7 Digital Storage approval includes private app downloads and Storage publishing; PX7 Digital Mixtapes only uses it to read updates. No playlist content or Apple Music credentials are sent to the update service. Approval polling stops after cancellation or ten minutes. Automatic checks are optional; download and installation require acceptance. An update checkpoint beside the local library preserves the tracklist and selected matches across restart.

Siri and Shortcuts are optional. Apple handles spoken requests and shortcut workflows under your system settings. When you choose a mixtape in Shortcuts, the app provides its local name, identifier, song count and duration to that system interface. Save Music to Inbox stores only the text, source and note you supply; it does not contact Spotify or Apple to match songs. Timed copies use local song metadata and require review in Mixtapes. No shortcut silently exports, starts playback or edits an Apple Music playlist. New local copies and inbox captures join your private iCloud library only if you have already enabled library sync.

Widgets

Optional system widgets read a local App Group overview containing an inbox count, up to three matched song titles/artists, and the latest mixtape/draft name, identifier and song count. Unmatched inbox entries use a generic review label. Notes, raw input, original links, source/person labels, credentials and the complete library are excluded. The widget extension does not contact the catalog, iCloud or the private updater. Tapping opens the relevant item in Mixtapes; it never starts playback or changes a playlist. Changes from shared captures appear after the app imports them. WidgetKit controls refresh timing. Remove widgets through the system widget editor.