Effective Date: Sep 4, 2026
At NoBars (referred to as “NoBars,” “our,” “us,” or “we”), safeguarding your privacy is not a feature we added — it is the reason the app exists. NoBars is an offline music and audio player: it plays the files you already own, from your own device, with no account, no streaming catalogue, and no advertising. This Privacy Policy outlines our practices regarding the collection, use, and disclosure of information we obtain from users of our mobile application (the “App”). This policy applies solely to the information you provide through the App. The copyright of this agreement is owned by the operator of NoBars, who reserves the right to interpret and amend it at any time.
Your library never leaves your device. Playing music, browsing your library, making playlists, importing files, editing tags, and using the trash involve no network requests at all — this is enforced in our source code by a build-time check that fails the release if any of that code touches the network, not merely promised in a document like this one.
NoBars has no user account. You never sign up, and there is nothing for us to hold. The only times the App reaches the internet are when you personally connect one of your own cloud or NAS accounts to import files from it, and those files travel from your service to your device — never through us.
We do not show advertisements, do not embed advertising SDKs, do not collect an advertising identifier, do not build a profile of you, and do not sell or rent your data to anyone. There is no one to sell it to and nothing to sell.
To provide the App’s core functionality, NoBars stores the following entirely on your device, inside the app’s private sandboxed storage:
.lrc file you import alongside
itNone of this is transmitted anywhere. We never receive a filename, a track title, an artist name, a playlist, or a play count.
Settings contains a single switch called Offline Lock. While it is on, every outbound network request the App is capable of making is refused before it leaves the device, including the cloud and NAS connections described below. Features that would need the network are shown greyed out with an explanation rather than hidden, so you can always see exactly what the switch is holding back.
NoBars offers several ways to bring in music you already own. Each one is started by you, and each one is one-directional — files come in, nothing is sent out.
The Files app: You pick files through Apple’s standard document picker. This reaches your iCloud Drive, your device’s Downloads, and any other cloud service you have installed that provides a Files extension. NoBars only ever receives the specific items you select; it cannot see anything else, and Apple — not NoBars — runs that picker.
Upload from your computer: NoBars can start a small web server on your device so you can drag
files in from a browser on the same Wi-Fi network. That server runs on your device, is reachable only from
your local network, exists only while the screen is open, and is announced over Bonjour
(_crate._tcp) so your computer can find it. Nothing passes through the internet or through any
server of ours. This is why iOS asks for Local Network permission.
Apple Music (the Music app on your device): If you choose this, iOS asks for permission to your media library and shows Apple’s own track picker. NoBars receives only the tracks you select in it, and copies each one into its own storage. Tracks downloaded from an Apple Music subscription are DRM-protected and cannot be copied by NoBars or by any other app; they are counted and reported to you as skipped, never circumvented. NoBars does not read, index, or upload your wider media library.
The share sheet: Audio sent to NoBars from another app arrives as a file and is imported the same way.
NoBars can connect to storage you already own so you can browse it and copy files down to your device. These connections are always optional, always started by you, and always read-only — the App has no code that can upload, modify, rename, move, or delete anything on any of these services.
WebDAV and network drives (Nextcloud, Synology, QNAP, TrueNAS, and similar): You enter the server address, username, and password. These go directly from your device to your server. Your password is stored in your device’s Keychain and never written into the App’s database, so a backup or a copy of the App’s data contains no credentials.
Dropbox, Google Drive, and OneDrive: You sign in through the service’s own web page, shown in
an isolated system browser (ASWebAuthenticationSession) that NoBars cannot read. We never see,
receive, or store your password for any of these services. What comes back is an access token, which is kept
in your device’s Keychain and used only to list folders and download the files you choose.
The permissions each service grants us are the narrowest ones that let you browse and download:
account_info.read (to show which account is connected),
files.metadata.read (to list folders), and files.content.read (to download what
you pick)drive.file only — this grants access solely to the
files and folders you personally choose in Google’s own picker. NoBars cannot see, list, or search the
rest of your Drive, and has no way to request that abilityFiles.Read (to browse and download),
User.Read (to show which account is connected), and offline_access (to stay
connected without asking you to sign in repeatedly)Files downloaded from these services go straight from the service to your device over an encrypted connection. They do not pass through, and are never stored on, any server operated by us. You can disconnect any connection at any time from the Import tab, which deletes its stored token from the Keychain immediately.
This section states, in one place, exactly what NoBars does with data obtained through Google APIs.
What we access. Only the drive.file scope is requested, and it is not combined
with any other Google scope. That scope reaches only the files and folders you personally select in
Google’s own file chooser. For those items NoBars reads the file name, size, type, modification date, and —
when you ask for it — the file content, so it can be copied to your device. For a folder you select, the same
details for the items inside it. NoBars cannot see, list, or search anything else in your Google Drive, and
it has no technical means to request that ability. It does not receive your Google account name, email
address, profile, or contacts.
How we use it. File names and details are used to show you the list you are choosing from. File content is used to copy the tracks you selected into the App’s own storage so they can be played offline. That is the entirety of the use.
How we store it. Downloaded files are stored in the App’s private, sandboxed storage on your device, alongside the rest of your library. The OAuth access and refresh tokens are stored in your device’s Keychain, readable only after the device has been unlocked, and the App’s database holds a reference to the Keychain entry rather than the token itself. None of this is stored on, or passes through, any server operated by us — files travel directly from Google to your device.
How we share it. We do not. Google user data is not transferred to us, to any third party, to any advertising network, or to any AI or machine-learning model, and it is not read by any human. It is not sold, and it is not used to build a profile of you.
How long we keep it, and how to remove it. Tokens are deleted from the Keychain the moment you disconnect the connection in the Import tab. Files you already copied to the device are yours and stay in your library until you delete them, empty the trash, or remove the App — deleting the App removes everything it stored. You can also revoke NoBars’ access from your Google Account’s third-party access settings at any time, independently of anything you do in the App.
Limited Use. NoBars’ use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
NoBars asks for the following only at the moment a feature needs them, and works without any of them:
Local Network: to receive files from your computer over Wi-Fi, as described above.
Media & Apple Music: to show Apple’s track picker when you import from the Music app.
Photo Library: only when you choose to set an image as album artwork. NoBars receives the single image you pick and does not scan or upload your library.
Camera: only if you scan a pairing code shown on another device. You can always type the code instead.
Background audio and background processing: so playback continues when the screen is off and a long import can finish after you leave the screen. Neither involves the network.
Settings contains a switch called Anonymous usage stats, which you can turn off at any time and which Offline Lock disables entirely. When it is on, the App may send counts of what happened — for example that an import started, which channel it used, whether it succeeded, and which screen was opened.
These events are defined by a fixed list on our server that contains no free-text field of any
kind. Every value is chosen from a closed set of options: an outcome is
success/partial/failed/cancelled, a library size is a
bucket such as 20-99 or 1000+, a file type is mp3 or
flac. There is no field a filename, a track title, an artist name, or a folder path could
travel in. This is a property of the system rather than a promise about our intentions.
We do not use Google Analytics, Firebase Analytics, or any third-party analytics SDK.
The App may send a crash report containing the error and the stack trace from our own code, plus your device model, OS version, and app version, so we can fix what broke. It may also ask our server which optional features are enabled in the current release. Neither carries any part of your library. Both are disabled by Offline Lock, and crash reporting can be turned off in Settings.
Requests to our server are identified by a random identifier generated on your device the first time it is needed. It is not your Apple ID, your advertising identifier, or your device’s serial number, and it identifies an installation rather than a person.
If you ask NoBars to look up lyrics or corrected track information for a track, it sends only the title, artist, album, and duration to our server, which forwards the query to a public music database. It never sends the filename, the file path, or any identifier from your library, and the query itself is not logged. Results are always returned as a list of candidates for you to choose from — NoBars never silently rewrites a track. This feature is off unless you use it, and is disabled by Offline Lock.
NoBars Pro is a one-time purchase, not a subscription, sold and billed entirely through the Apple App Store or Google Play. We never see, collect, or store your payment card or billing details. After a purchase, our server receives a purchase receipt from the store and verifies it with Apple or Google to confirm your entitlement; the receipt is used for nothing else.
We do not sell your personal information. We share information only as follows:
Service Providers: our backend runs on Amazon Web Services. Optional lyrics and metadata lookups are forwarded to public music databases. Apple and Google process in-app purchases. Beyond these, nothing is shared with anyone.
Services You Connect Yourself: when you connect Dropbox, Google Drive, OneDrive, or a WebDAV server, your device communicates with that service directly. Your relationship with them is governed by their own privacy policies, not this one.
Legal Compliance and Protection: We may disclose information if required by law, or where we believe in good faith it is necessary to comply with legal process, protect our rights, or ensure the safety of our users.
Business Transfers: If NoBars is involved in a merger, acquisition, or asset sale, information we hold may be transferred as part of that transaction, subject to this Privacy Policy.
Your library is stored in your device’s app-sandboxed storage, protected by the operating system’s own file protection. Every credential — a WebDAV password, a Dropbox, Google, or Microsoft access token — is stored in the platform Keychain, marked so it is readable only after the device has been unlocked at least once, and the App’s database holds a reference to the Keychain entry rather than the secret itself. All network traffic is encrypted in transit (HTTPS/TLS), except the local Wi-Fi upload server, which does not leave your network. No method of transmitting or storing data is completely secure, and we cannot guarantee absolute security.
Your library is retained on your device until you delete it or remove the App. Deleted items sit in the trash for up to 30 days before being purged. Because there is no account and your library is never uploaded, there is nothing on our side to retain, delete, or export.
NoBars is a general-audience media player and is not directed at children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Depending on where you live, you may have rights to access, correct, or delete personal information held about you, or to object to its processing. Because NoBars operates without an account and keeps your library on your device, we hold almost nothing that could identify you; where we do, you may contact us at the address below to exercise these rights.
Where the App does contact our server — usage statistics, crash reports, configuration, purchase verification, or an optional lyrics lookup — that request is handled on servers operated in the United States, which may have different data protection laws than your country of residence. Your library is not among the things transferred.
The App may open external links, such as a service’s sign-in page or the App Store, using your device’s native handlers. Those destinations are governed by their own privacy policies, which we encourage you to review.
We may revise this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date above and, where appropriate, through an in-app notice. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
For any questions about this Privacy Policy or your data, please contact us:
Email: service@oxcellion.com