Updated 19 October 2026
Privacy policy
The short version: the NaviStream app collects nothing. It talks to the music server you add, and we never see your music, your listening or your password.
This policy covers the NaviStream apps for iPhone, iPad, Mac, Apple TV and Apple Watch, and this website. The two are different: the app collects nothing, and the website counts visits. NaviStream is published by Spherify Pty Ltd (“we”).
What the app collects
Nothing. NaviStream has no account system, no analytics, no advertising, no crash-reporting service and no tracking of any kind. We do not run a server that the app reports to. We cannot see who uses the app, what they play, or which server they connect to.
Who the app talks to
- Your music server. Browsing, searching, streaming, downloads, artwork, lyrics, hearts, playlists, scrobbles and the saved play queue all go between the app and the Navidrome or Subsonic server you add. That server is run by you or by whoever gave you an account on it, and its own privacy practices apply to it.
- Internet radio stations that are set up on your server. When you play one, the app connects directly to that station’s stream address.
- Devices on your home network. To control an Onkyo or Integra receiver’s volume, the app sends a discovery message on your local network and talks to the receiver directly. This is why iOS and tvOS ask for local network access. Nothing leaves your network.
Apart from these, the app makes no network connections.
What is stored on your device
- Your password is kept in the system Keychain, which the operating system encrypts. The password itself is never sent anywhere: each request to your server carries a one-off salted token made from it, as the Subsonic API specifies.
- Server addresses and usernames, your settings, cached artwork and any music you download are kept in the app’s own storage on the device.
- Widgets and Top Shelf read a small snapshot of what is playing and recently played, stored in a container shared only between NaviStream’s own app and extensions.
- Apple Watch. The iPhone app passes your server details and password to your own watch over Apple’s Watch Connectivity, so the watch can download music. The watch keeps them in its own Keychain.
Deleting the app removes all of this. Removing a server in the app removes its saved password.
Siri, CarPlay and the system
When you use Siri or Shortcuts with NaviStream, Apple processes your request under Apple’s own privacy policy. The app receives only the album, playlist or command you asked for. CarPlay shows the app’s library on your car’s screen and sends nothing to us.
This website
Unlike the app, this website uses Google Analytics 4 to count visits: which pages are read, roughly where visitors come from, and what device and browser they use. It sets first-party cookies (named_ga) to tell a returning visitor from a new one. Google signals and advertising features are turned off, so the data is not used for ads or linked to a Google account. Google Analytics does not log or store IP addresses. Google processes this data under its ownprivacy policy. You can block it with any content blocker, or with Google’s opt-out add-on, and the site works the same.
The site is hosted on Cloudflare, which processes the technical information any web request carries, such as IP address and browser type, to deliver the page and protect it from abuse. We do not use any of this to identify anyone.
Children
The NaviStream app collects no personal information from anyone, children included.
Changes
If this policy changes, the new version will be posted here with a new date. If the app ever started collecting anything, this page would say so before it did.
Contact
Questions about privacy: support@getnavistream.com.