DROP — Privacy Policy

Last updated: July 9, 2026

DROP is a music journaling app. It has no accounts, no sign-up, and no servers of its own. Your journal, your notes, and your listening history never leave your control — we could not read them if we wanted to. The only thing DROP sends anywhere on our behalf is a small set of anonymous usage counts, described under "Analytics" below.

What DROP stores, and where

DROP keeps your listening journal (album ratings and notes), your taste inputs (favorite artists, genres you chose to explore, an optional display name), and your app settings (reminder time, preferred music service). This data lives in two places only: on your device, and — if you are signed into iCloud — in your personal iCloud key-value storage, so your journal survives reinstalls and follows you across your own devices. Both are under your Apple ID. We have no access to either.

What DROP reads

If you connect Apple Music, DROP reads your library and recent plays on-device to learn your taste and choose albums. Nothing in your library is modified, and your listening history is not transmitted to us or to any third party — it is processed on your device. If you don't connect Apple Music, DROP works from the favorite artists you name by hand.

What leaves your device

To find albums, DROP makes catalog queries to Apple's iTunes/Apple Music catalog and to the Last.fm API (for similar artists and genre tags). These queries contain artist names, album names, or genre terms — never your identity, your full journal, or any account identifier. They are standard web requests, subject to Apple's privacy policy and Last.fm's privacy policy respectively.

Analytics

DROP sends anonymous usage events to TelemetryDeck, a privacy-focused analytics service, so we can tell whether the app's core loop works — events like "a drop was opened," "a drop was rated," or "the paywall was shown."

These events never include your journal, your notes, your listening history, the album or artist names you interacted with, or anything that identifies you. A random identifier is generated on your device and cryptographically hashed before sending, so returning devices can be counted; it identifies your device to us as a number, never you. TelemetryDeck does not store IP addresses. "Erase all data" also erases this identifier, so after erasing you become a brand-new anonymous device.

What DROP does not do

No advertising, no tracking across other apps, no fingerprinting, no selling or sharing of data, no accounts.

Notifications

If you enable the daily reminder, the notification is scheduled locally on your device. No push servers are involved.

Deleting your data

Profile → "Erase all data" removes everything DROP knows — journal, taste profile, and settings — from your device and from your iCloud key-value storage, and erases the anonymous analytics identifier so this device counts as brand new. Because there is no account and no server, this erases everything that exists. You can export your journal first from the same screen. Apple Music access permission itself is managed in iOS Settings.

Children

DROP is not directed at children. The anonymous usage counts described above are the only data collected from anyone.

Changes

If this policy changes, the updated version will be posted at this URL with a new date.

Contact

Questions: matthew@susko.ca