Privacy Policy

Last updated: November 5, 2026

gamut is a free, open source music streaming app. You can use it without an account. If you choose to sign in with Google, gamut stores your favorites, playlists and followed artists so they sync across your devices. This page explains exactly what that means.

This policy covers the gamut Android app and this website. "We" means @serptail, the developer. gamut is open source, so you can verify any of this in the source code.

What stays on your device

• The music files already on your phone, and any songs you download for offline playback.
• Your settings, equalizer and mod presets, and appearance choices.
• Your library, favorites, playlists and followed artists, if you never sign in.

If you do not sign in, none of this is sent to us. Uninstalling the app or clearing its data removes it.

What we store if you sign in with Google

Signing in is optional and only needed for sync. Authentication is handled by Supabase, using Google as the sign-in provider. When you sign in, we store:

• Account details from Google: your email address and profile picture (avatar).
• Your favorite songs.
• Your playlists, including their contents.
• The artists you follow.

That is all. We do not receive your Google password. We do not store your music files or your listening history.

How we use it

Only to run the app: to sign you in, and to save, restore and sync your favorites, playlists and followed artists across your devices. We do not sell, rent or share your data, and we do not use it for advertising or profiling.

Service providers

• Supabase provides authentication and database hosting for signed-in accounts. Your account and library data are stored there.
• Google provides the sign-in. Google's own privacy policy applies to that step.
• GitHub hosts this website and the app downloads, and may keep standard server logs.

Other features that use the network

Some features contact third-party services when you use them, such as searching YouTube Music, fetching lyrics, or identifying a song with Shazam. Those requests go to the respective service and are governed by its own privacy policy. Using them does not require an account.

This website

This site runs no analytics, advertising or tracking cookies. The only thing it saves in your browser is your light or dark theme choice, stored locally on your device.

Your choices and rights

• Sign out at any time. Your local library stays on your device.
• Access, correct or delete your data: you can ask us to delete your account and everything stored with it. Open an issue on GitHub without including private details, and we will arrange a way to verify your account. Residents of the EU/EEA, the UK and California can exercise their applicable data rights the same way.
• Revoke access: you can remove gamut from the apps connected to your Google account at any time in your Google account settings.

Retention

Account and library data are kept for as long as your account exists. When your account is deleted, the data stored with it is deleted too.

Security

Communication between the app and our backend uses HTTPS, and access to stored data is restricted to your own account. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

gamut is not directed at children under 13, and we do not knowingly collect their information.

Changes

If this policy changes, we will update the date at the top of this page. For material changes we will also mention it in the release notes.

Contact

Questions or requests: open an issue at github.com/serptail/gamut, or visit github.com/serptail.