Atero

Privacy Policy

Effective date: June 8, 2026 · Last updated: July 9, 2026

This Privacy Policy describes how Ironwood Software LLC ("Ironwood," "we," "us," or "our") handles information in connection with Atero (the "App"), a self-hosted personal media client. The App is available on Android; an iOS version is in active development. This policy applies to the App and to this website at atero.app.

This policy is provided for informational purposes and does not constitute legal advice. Ironwood Software LLC has not represented that this policy satisfies any specific regulatory framework.

1. Summary

Atero is designed for users who operate their own media servers. The App connects directly from your device to servers you configure. Ironwood does not host, store, review, monitor, or control your media libraries. Ironwood does not operate a streaming catalog and does not provide copyrighted content.

2. Information We Collect

Depending on how you use the App, we may collect or process the following categories of information:

  • Device and app diagnostics: Share crash reports is enabled by default until you turn it off. When enabled, we may receive crash and error reports through our crash-reporting service (Sentry), including device type, operating system version, app version, and technical diagnostic data. Reports are subject to redaction and sanitization before transmission.
  • Purchase and entitlement information: If you purchase Atero Pro, purchase validation is handled through Google Play and our purchase validation provider (RevenueCat). We may receive transaction-related identifiers needed to confirm your entitlement status, including a pseudonymous installation or app user ID generated for your device. We do not receive your full payment card details through the App.
  • Support communications: If you contact us, we receive the information you choose to provide (such as your email address and message contents).
  • Website usage: This website is largely static. We do not currently operate third-party marketing or product analytics on this site. Standard web server or hosting logs maintained by our hosting provider may record IP addresses, user agents, and request metadata.

3. Information We Do Not Collect

Ironwood does not collect or receive:

  • Your music, podcasts, audiobooks, ebooks, or other media files
  • Your server-side media libraries or library metadata as a hosted service
  • Continuous playback history sent to Ironwood servers for catalog or recommendation purposes
  • Your Listening / Listening Insights data used for on-device summaries (stored locally on your device)
  • Your server credentials on Ironwood-operated servers (we do not operate your media servers)

Media playback, browsing, and downloads occur between your device and the servers you configure, subject to those servers' own policies and your network configuration.

4. Self-Hosted Server Connections

When you add a server in the App, you provide connection details such as server URL and authentication credentials (for example, username, password, API token, or similar). This information is stored locally on your device to enable the App to connect to your servers.

Connections are made directly between the App and the servers you choose. Ironwood Software LLC does not route your media through Ironwood-operated infrastructure for ordinary library access, does not review the contents of your libraries, and does not monitor what you store on servers you operate or control.

You are responsible for securing your servers, credentials, and network access. Server operators (including you, if you operate your own server) may log connection and usage information according to their own configuration.

5. Local Storage on Your Device

The App stores data locally on your device to provide its features, including:

  • Server connection settings and credentials (using device secure storage where available)
  • Local library indexes, playlists, favorites, playback queues, podcast subscriptions, and app preferences
  • Recent music search queries (on your device only)
  • Downloaded offline content you choose to save
  • Cached artwork, metadata, and related app data (including short-lived podcast discovery cache)
  • Entitlement and settings data, including your crash-reporting and Listening Insights preferences
  • Optional service tokens you connect (for example, a ListenBrainz user token), stored using device secure storage where available. A development build may also store a Last.fm connection token.

This locally stored data remains on your device unless you delete it, uninstall the App, or use in-app features that clear specific data.

6. Downloaded Content

When you download music, podcast episodes, audiobooks, or ebooks for offline use, those files are stored on your device. Ironwood does not receive copies of downloaded media files. You are responsible for ensuring you have the right to download and retain any content you save offline.

7. Account and Purchase Information

The App does not require an Ironwood account for basic use. Optional integrations (such as ListenBrainz scrobbling) may involve accounts with third-party services you choose to connect.

Atero Pro purchases are processed through Google Play on Android and, when the iOS app is available, the Apple App Store. RevenueCat helps validate entitlements. These providers process information according to their own privacy policies and platform terms. Ironwood receives only the information reasonably necessary to confirm whether Pro features are active for your installation. The App may display a pseudonymous Installation ID in About for support and purchase troubleshooting; this identifier is used with RevenueCat and is not shared for advertising.

8. Optional Third-Party Integrations

If you enable optional features, data may be shared with third parties you select, including:

  • Last.fm (development builds): Scrobbling and now playing apply to music only. Current production builds do not offer Last.fm in Settings and do not connect a Last.fm account. A development build can connect a Last.fm account. If that account is connected and scrobbling or now playing is on, Atero sends music playback metadata you choose to share (such as artist, track title, album, playback time, and other information needed for scrobbling) to Last.fm. Atero uses an Ironwood-operated service at lastfm.atero.app to help connect the account and forward scrobbles and now-playing updates. That service does not access your media libraries or audio files. Atero does not see your Last.fm password. In a development build you can disconnect in Settings → Scrobbling → Last.fm account. Last.fm processes data under its own privacy policy (last.fm/legal/privacy).
  • ListenBrainz (optional): Scrobbling and now playing apply to music only. If you connect ListenBrainz with a personal user token and enable scrobbling or now playing, Atero sends music playback metadata you choose to share (such as artist, track title, album, playback time, and other information needed for scrobbling) directly to ListenBrainz. You provide the token; Atero stores it on your device using secure storage. Atero does not receive or store your ListenBrainz password. You can remove the token in Atero and revoke it from your ListenBrainz account. ListenBrainz and MetaBrainz process data under their own privacy policy (metabrainz.org/privacy).
  • Your media servers: Jellyfin, Emby, Plex, Navidrome, OpenSubsonic-compatible servers, Audiobookshelf, and similar services receive requests from the App according to your configuration. If you enable server playback reporting, supported servers may also receive play history and playback progress updates you choose to send.
  • Podcast discovery services: When you use podcast search, trending, or category browsing, the App may send your search terms or discovery requests to an Ironwood-operated service at podcasts.atero.app, which requests podcast metadata from Podcast Index on the App’s behalf. Apple/iTunes podcast search may still be contacted directly from your device for supplemental results. Ironwood does not receive or store your podcast search terms on its servers, and the App does not retain a local history of podcast searches.
  • Chromecast / AirPlay: Output routing may involve Google Cast or Apple system services on your device.

You can review provider homepages and privacy links in the App under Settings → About → Third-Party Services. Ironwood does not control how those third parties handle information they receive.

9. Crash Reporting (Sentry)

The App may use Sentry for crash and error reporting. Share crash reports is enabled by default until you turn it off in Atero Settings → Privacy & Diagnostics. When disabled, crash events are dropped before transmission.

When enabled, crash reports may include:

  • Stack traces and error messages
  • App version, build, and device/OS information
  • Limited technical context and sanitized breadcrumbs

The App is designed to redact or avoid sending passwords, tokens, and similar sensitive values in crash reports. Sentry processes data according to its own privacy policy and our configuration.

10. Analytics

Ironwood does not currently operate a separate third-party product analytics platform (such as advertising analytics or behavioral profiling services) within the App for general usage tracking. Diagnostic logging inside the App is primarily used for development and operational troubleshooting and is not intended to build a marketing profile of you.

11. How We Use Information

We use information we receive to:

  • Operate, maintain, and improve the App and website
  • Validate purchases and entitlements
  • Diagnose crashes and technical issues when Share crash reports is enabled
  • Respond to support requests
  • Protect the security and integrity of our services
  • Comply with applicable law

12. How We Share Information

We may share information with:

  • Service providers that help us operate the App (for example, crash reporting, purchase validation, hosting)
  • Legal and safety recipients when required by law, legal process, or to protect rights, safety, and security
  • Business transfers in connection with a merger, acquisition, or asset sale, subject to appropriate notice where required by law

We do not sell your personal information as a standalone product.

13. Data Retention

Information stored on your device is retained until you delete it or uninstall the App. Crash reports retained by Sentry are kept according to our Sentry project configuration and Sentry's policies. Support emails are retained as long as reasonably necessary to address your request and maintain business records.

14. Security

We use reasonable administrative, technical, and organizational measures designed to protect information we process. No method of transmission or storage is completely secure. You are responsible for protecting your device, server credentials, and network environment.

15. Children's Privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take reasonable steps to delete it where appropriate.

16. Your Choices

  • Crash reporting: Enable or disable Share crash reports in Atero Settings → Privacy & Diagnostics.
  • Your Listening: Pause or resume Listening Insights in Settings → Your Listening (data stays on device).
  • Server connections: Add, edit, or remove servers at any time.
  • Local data: Clear downloads, reset library data, or uninstall the App.
  • Optional integrations: Connect or disconnect ListenBrainz, and turn server playback reporting on or off, in Settings → Scrobbling. Current production builds do not offer Last.fm there.
  • Search history: Remove individual recent music searches from the Search screen, or clear local app data by uninstalling the App.

17. International Users

Ironwood Software LLC is based in the United States. If you use the App from outside the United States, your information may be processed in the United States and other countries where our service providers operate. Laws in those locations may differ from the laws where you live.

18. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes may also be communicated through the App, website, or other reasonable notice. Your continued use of the App after an update constitutes acceptance of the revised policy, except where applicable law requires otherwise.

19. Contact Us

Questions about this Privacy Policy may be directed to:

Ironwood Software LLC
Email: support@atero.app
Website: atero.app