Privacy policy

This policy covers two things: the Flex Music Player app for Android, and this website, flexmusicplayer.co.za. They're handled very differently, so each has its own part below.

Who we are

Flex Music Player is made by OrganiCode (Pty) Ltd, a software company in Vereeniging, South Africa. Under the Protection of Personal Information Act, 2013 (POPIA), OrganiCode is the responsible party for the little information described here, and Warren Pridgeon is the information officer.

Privacy questions and requests: warren@organicode.co.za

Part 1: the app

The short version

The app collects no personal information. It doesn't have permission to use the internet, so it can't send anything off your phone. It has no advertising, analytics, crash-reporting or tracking code, and no user accounts.

What the app uses on your phone, and why

• Your audio files (the "Music and audio" permission): to build your library and play your music. Song details, playlists, play counts and your place in long tracks are kept only in the app's private storage on your phone.
• Notifications: to show the playback controls while music plays.
• Motion sensor, and the proximity or light sensor: only if you turn on bump gestures, only while music is playing (or for a few minutes after a knock paused it), and only to recognise knocks on the phone's edges. Readings are processed in memory straight away and are never stored or sent anywhere.
• Playlist files you choose to import (.m3u and .m3u8): read once, when you pick them, to match songs on your phone. The file itself isn't kept.

Diagnostic log

The app keeps a small log of its own errors on your phone to help fix problems. It contains no music and no personal information, and it never leaves the phone unless you choose Settings, Share diagnostic log and send it yourself, for example by email to support. If you send it to us, we use it only to fix the problem you reported and delete it once that's done.

Sharing

We don't sell, share or transfer anything from the app, because the app doesn't collect anything.

Deleting your data

Everything the app stores stays on your phone. Uninstalling the app, or clearing its storage in Android's settings, deletes it for good. We hold nothing from the app to delete or export.

Part 2: this website

The website runs no advertising trackers and no third-party analytics. We do measure which pages people visit and which buttons they use, with our own first-party tools, in two tiers. The second tier only happens if you say yes.

• Anonymous daily totals, for everyone. Counts like "the home page was viewed 40 times today, 12 of those arrived from a search engine, and the Google Play button was clicked 9 times". No cookie is set for this, no IP address is stored, and nothing in these totals can identify you. We keep them indefinitely.
• One first-party cookie, only if you choose Accept. The bar at the bottom of the page asks first. If you accept, we set fm_vid, a random number with no meaning outside this site, so we can see that the same visitor came back and which link brought them. With it we store the pages you viewed, the buttons you clicked, the address of the page that linked here and any campaign tags in the link. If you decline, the cookie is never set.
• Your choice itself is remembered in a cookie called fm_consent for a year, so the bar doesn't ask on every visit.

Per-visitor records are deleted automatically after 180 days. No IP addresses are stored in either tier, and bots are left out of both. To change your mind, clear this site's cookies in your browser and the bar will ask again.

Other things the website touches

• Server logs. Like any web server, ours records each request, including the IP address, for security and to find faults. These logs are kept for a short time, aren't used to measure visitors and aren't shared.
• Fonts. Pages load their fonts from Google Fonts. Fetching a file from any server reveals your IP address to that server, so Google sees that a browser at your address loaded the fonts. Google's own privacy policy covers what it does with that.
• Email. If you write to us, we keep your message and address only as long as we need to help you, and then delete them.
• Google Play. The download buttons take you to Google Play, which is run by Google under its own privacy policy.

Your rights under POPIA

You can ask us, at no cost and without giving a reason:

• whether we hold any personal information about you, and what it is
• to correct or delete it
• to stop using it, including withdrawing consent to the website cookie

Email warren@organicode.co.za. Because the app stores nothing with us and the website's anonymous totals can't be tied to you, in most cases the honest answer will be that we hold nothing. For consented website records, tell us roughly when you visited and we'll remove them.

If you're unhappy with how we've handled a request, you can complain to the Information Regulator of South Africa.

Children

The app and website aren't aimed at children under 13, and neither collects personal information from anyone knowingly.

Information leaving South Africa

The app sends nothing anywhere. On the website, the font and email services mentioned above may handle requests outside South Africa. We only use providers bound by data-protection laws or agreements at least as protective as POPIA.

Changes to this policy

If this policy changes, the new version goes on this page with a new "Last updated" date. If a change affects the app's handling of your information, we'll also mention it in the app's release notes.