Cratto Privacy Policy
Cratto is a local-first service with no Cratto-operated account or collection server. Your library remains available on your device. If you enable Library Sync, Apple CloudKit stores and synchronizes your library in your private iCloud database. Other network features include Discogs search and import, Apple Music playback and library import, artwork loading, App Store purchase verification, and feedback you send from Settings.
1. Information We Process
Information stored or created locally
Cratto helps you manage a vinyl record collection. To provide that functionality, the app may store information on your device, including:
- Collection and want list records, including Discogs IDs, record titles, artists, years, labels, genres, styles, countries, formats, catalog numbers, Discogs links, artwork URLs, tracklists, media and sleeve condition ratings, added dates, and collection or want-list status.
- Crate organization, including crate names and materials, the records in each crate, and their order.
- Notes you choose to enter, such as a record's album note and must-hear tracks.
- Share poster settings, such as display name, signature, and whether to show a catalog-number code.
- App preferences, including interface language, theme, player and record appearance, music source, shuffle queue, widget display data, and backup settings.
- A Discogs Personal Access Token if you manually enter one for Discogs API access.
Connected account information
If you connect third-party services, Cratto may process:
- Discogs OAuth token, OAuth token secret, and Discogs username.
- Apple Music authorization status used for MusicKit search, playback, and library import.
Imported records
- When you import from Discogs, Cratto reads the collection and want list of the Discogs account you connected, including each release's details, the date it was added, and its media and sleeve condition grades, so that you can choose which records to add.
- When you import from Apple Music, Cratto reads the albums in your Apple Music library and, if you include them, your recently played albums, and matches them to the Apple Music catalog so that you can choose which ones to add to your collection as digital albums.
- An import runs only when you start one. The lists come from Discogs or Apple and are processed on your device; Cratto does not send them to any server of its own.
Search, scan, and photo information
- Search terms, record names, artist names, barcodes, catalog numbers, and Discogs IDs used to perform searches or fetch record details.
- Camera scan results from barcodes, QR codes, Aztec codes, and catalog-number text recognition. Camera frames are processed on device for recognition and are not intentionally uploaded by Cratto.
- Photos that you choose through the system photo picker for barcode or text recognition. The selected image is processed on device for recognition and is not intentionally uploaded by Cratto.
- Generated share posters, cover collages, and archive labels (ticket, grid, and receipt) when you choose to save them to your photo library.
Cache, backup, and widget data
- Artwork image cache stored in memory and on local disk to improve loading speed.
- Backup files such as
Cratto.backup, which may include backup version, export date, Discogs IDs, catalog numbers, collection or want-list status, and media and sleeve condition ratings. - Widget data stored in the App Group container, including current record title, artist, genre, playback state, and artwork image.
Library Sync information
If you turn on Library Sync, Cratto also keeps on your device a random identifier for this installation, the app-specific iCloud user record identifier that CloudKit provides, a sync journal, and a recovery snapshot of your library taken before the first sync. The iCloud identifier does not reveal your Apple Account name or email address; Cratto uses it only to keep libraries from different iCloud accounts apart. These files are excluded from device backups. Records stored in iCloud carry the installation identifier so that changes from your devices can be merged.
Feedback
If you send feedback from Settings, Cratto stores your message, any contact details you choose to leave, and the app version, system version, device model, and language shown on the form in Cratto's CloudKit public database, where only the developer can read it. CloudKit attaches an identifier specific to this app, which does not reveal your Apple Account name or email address. We use feedback only to reply to you and to improve the app.
Purchase information
If you purchase or restore Cratto Gold Record, Apple and StoreKit provide information needed to confirm your entitlement, such as the product identifier, transaction identifier, purchase date, storefront, verification status, and whether a transaction was refunded or revoked. Cratto does not receive your full payment-card or bank-account details.
2. Information We Do Not Currently Collect
Cratto does not include advertising SDKs, third-party analytics SDKs, third-party crash-reporting SDKs, location tracking, contacts access, microphone access, or health data processing. We do not sell personal information and do not use your information for cross-app or cross-site advertising tracking. When Library Sync is on, your library is stored in your own private iCloud database, which we cannot access.
3. How We Use Information
We use information only to provide and maintain app functionality, including to:
- Search for records, show record details, manage your collection and want list, filter records, and search locally.
- Fetch record data, artwork, tracklists, and release versions from Discogs.
- Import the records you choose from your Discogs collection and want list, or from your Apple Music library and recently played albums.
- Search and play Apple Music content through MusicKit when authorized.
- Recognize barcodes, QR codes, Aztec codes, and catalog numbers using camera, photo, and system vision features.
- Cache artwork, sync widget display data, generate share posters, cover collages, and archive labels, and save them to your photo library when you request it.
- Create, read, and import backup files; synchronize your library through iCloud when enabled.
- Maintain app preferences and basic app state.
- Load in-app purchase information, verify and maintain Cratto Gold Record access, restore eligible purchases, and respond to refunds or revocations reported by Apple.
- Respond to support, feedback, or rights requests if you contact us.
4. Storage and Retention
- Local data: collection data, preferences, OAuth tokens, image cache, widget data, and local backups are primarily stored on your device until you delete them, disconnect accounts, clear app data, disable backups, or uninstall the app.
- iCloud sync: when you enable Library Sync in Settings, your collection, want list, record metadata (including your condition ratings, album notes, and must-hear tracks), and crate organization are stored in your private iCloud database through Apple CloudKit and synchronized between your devices. Demo data, Discogs credentials, playback state, and device display preferences are not included. Turning sync off retains existing local and iCloud data; transfers already queued may finish. Sync records can retain previous values and deletion markers to reconcile offline changes. You can manage the app’s iCloud storage in system Settings. Sync is not a substitute for backups.
- Feedback: messages you send from Settings are kept in Cratto's CloudKit public database, readable only by the developer, until we delete them. To have your feedback deleted, contact us at the address below.
- Third-party service data: requests and responses involving Discogs, Apple Music, or artwork hosts are processed by those providers under their own terms and privacy policies.
- Image cache: artwork may be cached locally. The current disk cache limit is approximately 150 MB, after which older cached files may be removed.
5. Third-Party Services
Discogs
When you search records, scan barcodes or catalog numbers, view record details, restore backups, connect a Discogs account, or import your Discogs collection and want list, Cratto may send necessary requests to Discogs. These requests may include search terms, barcodes, catalog numbers, Discogs IDs, OAuth credentials, or a Personal Access Token. Discogs may return record metadata, artwork links, tracklists, account username information, and the records in your collection and want list.
Cratto may open the Discogs website through an Apple-provided system authentication page. The website, accounts, content, and cookies are provided and managed by Discogs. Cratto does not read Discogs website cookies or use them for advertising or cross-app tracking.
Cratto does not provide its own account system. A connected Discogs account is independently registered, managed, and deleted through Discogs. Disconnecting Discogs removes locally stored authorization information from this device; it does not delete the Discogs account or the records already stored in Cratto.
Apple and system services
Cratto uses Apple-provided system capabilities including CloudKit, StoreKit, SwiftData, MusicKit, AVFoundation, Vision, Photos, WidgetKit, and App Groups. Apple processes App Store payments and may provide transaction and entitlement information to Cratto. These services are subject to Apple's terms and privacy policies.
Artwork hosts
When Cratto displays or caches artwork from a URL, the corresponding image server may receive network-level information such as IP address, request time, and device network information. Most artwork URLs are returned by Discogs.
6. Permissions
Cratto may request the following permissions:
- Camera access, used to scan record barcodes, QR codes, Aztec codes, and catalog numbers.
- Photo picker access, used to read only the image you select for local barcode or text recognition.
- Add-only photo library access, used to save generated share posters, cover collages, and archive labels to your photo library.
- Apple Music access, used to search and play Apple Music content, and to read your Apple Music library and recently played albums when you start an import.
- Network access, used to reach Discogs, Apple Music, and artwork resources.
- App Group storage, used to share current display data between the main app and widgets.
- Background notifications from iCloud, used only while Library Sync is on so that changes from your other devices can arrive. They are silent and never show alerts.
You can manage system permissions in iOS Settings. Disabling a permission may make the related feature unavailable.
7. Your Choices
- Delete records from your collection or want list inside the app.
- Log out of Discogs or remove a manually entered Discogs token by clearing app data or using any available token controls.
- Turn off automatic backup in Data Management.
- Turn off Library Sync in Data Management. To remove the copy stored in iCloud, delete the app’s data from your iCloud storage in iOS Settings.
- Delete backup files such as
Cratto.backupfrom local device storage. - Manage camera, photo, and media permissions in iOS Settings.
- Uninstall the app to remove app data stored on the device, subject to normal iOS backup and retention behavior.
8. Security
Cratto stores your core collection data on your device and does not operate a server that stores your collection. Access to features such as the camera, photos, and Apple Music is controlled by iOS permissions, and App Store payments are handled by Apple.
Connected-service credentials are kept on your device. We recommend protecting your device with a passcode and keeping iOS up to date. No method of storage or transmission can be completely secure.
9. Children
Cratto is not directed to children. Users under 13 years old, or a higher minimum age required by local law, should not use the app without consent and supervision from a parent or legal guardian.
10. International Transfers
Discogs, Apple, and artwork servers may process requests in countries or regions outside your place of residence. By using features that depend on those services, you understand that request information may be transferred to and processed by those providers according to their own policies.
11. Third-Party Links
Cratto may display Discogs links, content, artwork URLs, or other third-party resources. Third-party services are not governed by this Privacy Policy. Please review their own terms and privacy policies.
12. Changes to this Policy
We may update this Privacy Policy for product, legal, third-party service, or operational reasons. Material changes may be communicated through the app, release notes, a published page, or another reasonable method. The updated policy is effective from the stated effective date. Continued use of the app after an update means you accept the updated policy.
13. Contact
For questions about this Privacy Policy, contact us at wang1118911@gmail.com.