Apple Data Handling Policy

When Sign in with Apple is configured, the app uses Apple only to authenticate you and receive the account identifiers, email relay address, name fields, and token data Apple provides for the sign-in flow.

Apple sign-in data is stored server-side in the user and provider-account records needed to keep your session active and identify your account.

If Apple does not provide a name or email on a later sign-in, the app uses the account data already stored from the original connection where available.

When Apple Music playlist/session functionality is configured, the app uses Apple Music access only to create or reopen private user playlists and support saved-session handoff behavior requested by the user.

Apple Music library writes require an Apple Music developer token server-side and a Music User Token from MusicKit. Sign in with Apple token material is identity/session data and is not treated as Apple Music library-write authorization.

The app stores the Apple provider account id, sign-in token material, expiry details, provider name, playlist id, queue/session state, and track identifiers needed for saved sessions. Music User Tokens should be used only for the requested Apple Music library operation and should not be rendered into public pages or normal API responses.

The app does not claim Apple endorsement, sell Apple Music access, or provide Apple Music subscription rights.

Apple private keys, Apple client secrets, team ids, key ids, database URLs, and OAuth secrets must stay server-side in environment variables or a deployment secret manager.

The app should not render Apple private keys, Apple client secrets, OAuth tokens, or MusicKit token material into HTML, client JavaScript, browser storage, or normal API responses.

If an Apple private key or client secret is exposed, rotate it in Apple Developer and update Doppler and the deployment environment before redeploying.

You can disconnect Apple from Apps. Disconnecting removes the Apple provider account record, Apple token material, Apple saved queues, and synced Apple play events associated with your Shuffle Resume user account.

You can also revoke app access from your Apple account or Apple Music settings where Apple provides that control.

Account deletion clears provider token fields and starts the app's deletion workflow described in the Data Retention and Deletion Policy.