Privacy Policy

Overview

Flowly Player ("Flowly", "we", "us", or "our") is a Windows desktop music streaming application developed and maintained as an independent software project. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Flowly Player application ("Application").

We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this policy or our practices regarding your personal information, please contact us using the details provided in Section 12.

By installing and using the Flowly Player application, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not install or use the Application.

Information We Collect

We collect different types of information depending on how you use Flowly Player. The following describes the categories of data we may collect.

2.1 Information You Provide Directly

• Google Account Information: When you choose to sign in with Google, we receive your Google profile information including your name, email address, and profile picture. This is required to authenticate your session and access YouTube API features on your behalf.
• Search Queries: When you search for music within the Application, your search terms are transmitted to the YouTube Data API to retrieve relevant results. We do not store your search history on our servers.
• User Preferences: Settings you configure within the Application (such as volume preferences, display settings, equalizer presets) are stored locally on your device.
• Playlist and Library Data: Songs you save, playlists you create, and your favorites list are stored locally on your Windows device by default.

2.2 Information Collected Automatically

• Application Diagnostic Data: In the event of application crashes or errors, we may collect anonymized error reports including the error message, stack trace, application version, and Windows version. No personally identifiable information is included in these reports.
• Usage Analytics (Anonymous): We may collect anonymized, aggregated usage statistics such as which features are used most frequently. This data is fully anonymized and cannot be linked back to any individual user.
• Device Information: We collect basic device information including your Windows operating system version and hardware architecture (x64/x86) solely for compatibility and performance optimization purposes.

2.3 Information We Do NOT Collect

• We do not collect, record, or store your listening history on our servers
• We do not collect financial information, payment details, or billing data (the Application is free)
• We do not access your microphone, camera, or any peripheral devices
• We do not track your location or collect geolocation data
• We do not access any files outside of the Application's designated folder on your device
• We do not collect biometric data of any kind
• We do not read your clipboard contents
• We do not monitor your other running applications

How We Use Your Information

We use the information we collect solely to provide, improve, and maintain the Flowly Player Application. The specific purposes are as follows:

3.1 To Provide Core Application Features

• To authenticate your identity through Google OAuth 2.0 and maintain your session
• To process your music search queries via YouTube Data API v3 and return relevant results
• To stream music content through YouTube's official IFrame Player API
• To save and retrieve your personal playlists and favorites stored locally on your device
• To remember your application preferences between sessions

3.2 To Improve the Application

• To analyze anonymized, aggregated usage data to understand which features are valuable
• To diagnose and fix technical bugs and crashes using anonymized error reports
• To optimize application performance for different Windows configurations

3.3 To Communicate With You

• To send important notices about significant changes to the Application or this Privacy Policy
• To respond to your support requests or inquiries
• To notify you of critical security updates

Google & YouTube API Integration

Flowly Player uses Google's YouTube Data API v3 to power its music search and metadata features. This section explains exactly how this integration works and what data is involved.

4.1 OAuth 2.0 Authentication

When you sign in to Flowly Player using your Google account, we use the OAuth 2.0 protocol to obtain authorization tokens. We request only the minimum necessary permissions:

• youtube.readonly — Allows the Application to search for music and retrieve public video metadata (titles, thumbnails, duration, channel names) from YouTube. This scope does not allow us to modify your YouTube account, playlists, subscriptions, or any other account data.

OAuth tokens are stored securely in your Windows Credential Manager and are used exclusively to authenticate API requests on your behalf. We do not store your Google password.

4.2 YouTube Data API Usage

All music content displayed in Flowly Player is sourced from YouTube's publicly available content through the YouTube Data API v3. Our usage includes:

• Search queries using the search.list endpoint to find songs by title, artist, or album
• Video detail retrieval using the videos.list endpoint to fetch metadata including title, description, thumbnail, and duration
• Music playback facilitated through YouTube's official IFrame Player API embedded within the Application

4.3 Data Shared With Google

When you use Flowly Player, certain data is transmitted to Google's servers as part of API requests, including:

• Your search queries (transmitted to YouTube API servers to retrieve results)
• Video IDs for playback requests
• Your IP address (as part of standard internet communication; not stored by us)
• OAuth tokens for authenticated requests

4.4 Content Compliance

Flowly Player streams music exclusively through YouTube's official playback mechanisms. We do not download, extract, convert, cache server-side, or redistribute any audio or video content from YouTube. All content remains on YouTube's servers and is accessed through official, compliant methods as required by YouTube's Terms of Service.

Data Storage & Security

5.1 Local Storage (On Your Device)

The majority of your personal data is stored locally on your Windows device and never transmitted to our servers:

• Application Data: Stored in %APPDATA%\FlowlyPlayer\ on your Windows device
• OAuth Tokens: Stored securely in Windows Credential Manager (DPAPI-encrypted)
• Playlists & Favorites: Stored as encrypted JSON files in your local Application Data folder
• User Preferences: Stored in the Windows Registry under HKCU\Software\FlowlyPlayer

5.2 Security Measures

We implement the following security measures to protect your data:

• All network communication uses TLS 1.2 or higher encryption
• OAuth tokens are encrypted at rest using Windows Data Protection API (DPAPI)
• The Application does not request elevated (Administrator) privileges
• Regular security audits of third-party dependencies
• No sensitive data is logged to log files or transmitted in plain text

5.3 Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify affected users by email (if we hold your email address) and publish a notice on our website within 72 hours of becoming aware of the breach, in accordance with applicable data protection laws.

Third-Party Services

Flowly Player integrates with the following third-party services. Each of these has their own privacy policies which govern their data handling:

We do not sell, trade, rent, or otherwise share your personal information with any other third parties for marketing, advertising, or commercial purposes. We will only disclose your information to third parties in the following limited circumstances:

• With your explicit consent
• To comply with a legal obligation, court order, or valid governmental request
• To protect the rights, property, or safety of Flowly Player, our users, or the public
• In connection with a merger, acquisition, or sale of assets (you will be notified in advance)

Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

7.1 General Rights (All Users)

• Access: You may request a copy of the personal data we hold about you by contacting us at privacy@flowlyplayer.app
• Deletion: You may request deletion of your personal data. You can also delete local Application data by uninstalling Flowly Player or clearing the Application Data folder manually
• Opt-out of Analytics: You may disable anonymous usage analytics in Application Settings → Privacy → Disable Analytics
• Revoke Google Access: You may revoke Flowly Player's access to your Google account at any time via myaccount.google.com/permissions

7.2 GDPR Rights (European Economic Area)

If you are located in the EEA, you have additional rights under GDPR:

• Right to Rectification: Request correction of inaccurate personal data
• Right to Restriction: Request restriction of processing of your personal data
• Right to Portability: Request transfer of your data to another service in a machine-readable format
• Right to Object: Object to processing of your personal data based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: Lodge a complaint with your local data protection supervisory authority

7.3 CCPA Rights (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising your CCPA rights

To exercise any of these rights, contact us at privacy@flowlyplayer.app. We will respond within 30 days.

Children's Privacy

Flowly Player is not directed to, and is not intended for use by, children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children.

If you are a parent or guardian and you believe your child under the age of 13 has provided us with personal information, please contact us immediately at privacy@flowlyplayer.app. We will take steps to remove such information from our systems.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

International Users

Flowly Player is developed and operated primarily for Windows users globally. If you are accessing the Application from outside the country in which our servers are located, your information may be transferred to, stored, and processed in a different country.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure that any transfer of personal data outside these regions is subject to appropriate safeguards in accordance with applicable data protection law, including the use of Standard Contractual Clauses approved by the European Commission.

By using Flowly Player, you consent to the transfer of your information to countries which may not have the same level of data protection as your home country.

Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. We will notify you of any material changes by:

• Displaying a prominent notice within the Flowly Player application at the next launch
• Updating the "Last Updated" date at the top of this page
• Sending an email notification to users who have provided their email address (for major changes)

Your continued use of Flowly Player after such changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this policy periodically for any changes.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using any of the following methods. We aim to respond to all privacy-related inquiries within 10 business days.