Flaccy Privacy Policy

Last updated: 30 October 2026

Flaccy is designed to collect as little as possible. This policy explains what is processed and why. Your music library, playlists and play history stay on your device. Midgar's servers see only what an action you start needs, plus an anonymous Midgar ID. There is no advertising in the app and no tracking.

In short

• Your library, playlists and play history are stored on your device and are not uploaded to us.
• The app keeps one anonymous identifier that also works in Midgar's other apps, the Midgar ID. It holds no name or email address.
• Last.fm scrobbling, AI metadata cleanup and the sample album are optional and send data only when you use them.
• Purchases are made through Apple, and Midgar's purchase ledger keeps the record of them.
• Nothing is sold, and no data is given to third parties for their own use.

Who we are

Flaccy is published by Midgar Oy, a company in Finland, which is the controller of the information described here. You can reach us at support@midgarcorp.cc.

On-device data

Flaccy works without an account: there is no sign-up and no third-party analytics. Your music library, playlists, play history and settings are stored on your device and are not uploaded to us. A diagnostic log is written there too, recording errors and events such as a file name, never the contents of your music or any token. It is not uploaded to us.

The anonymous Midgar ID

The app asks our server for an anonymous Midgar ID: a random identifier, and a random secret that proves the ID is yours. The server keeps the ID, a hash of the secret and the date it was created. The app keeps both in your iCloud Keychain, so the same ID follows you across your own devices and across Midgar's other apps. When the app creates or joins the ID it may ask Apple's App Attest service to confirm that the request comes from a genuine copy of the app; we keep the identifier of the attested key with the ID and receive nothing else about you. The ID is sent to Midgar's server at api.midgarcorp.cc, and on the More Apps screen it shows which Midgar apps you already use. Deleting Flaccy does not remove it, because your other Midgar apps share it. To have it deleted, email support@midgarcorp.cc.

Flaccy's server

Three features talk to Flaccy's own server, which runs behind Midgar's gateway at api.midgarcorp.cc: AI metadata cleanup, Last.fm signing and the sample album. The first two carry a random identifier that the app generates on your device the first time it needs one. It is not your Midgar ID and holds nothing about you. The server uses it, with your IP address, only to count daily requests so no one can overspend a shared allowance; those counts are deleted after a day. Midgar's server runs on Cloudflare, which may keep standard request logs such as your IP address for a limited time. We do not use them for anything else.

Last.fm (optional)

If you connect a Last.fm account, you authenticate directly with Last.fm; we never see your Last.fm password. While connected, the app sends scrobbles (track, artist, album, and timestamp) and now-playing updates to Last.fm, and fetches your charts, loved tracks, and artist information from it. Last.fm requires every request to be signed with a secret that cannot ship inside an app, so the app sends the request's parameters (the same track, artist and album details) to Flaccy's server, which returns the signature and keeps nothing. Your Last.fm data is handled under Last.fm's privacy policy. You can disconnect at any time in Settings.

AI metadata cleanup

When an imported file lacks recognizable metadata, its file and folder names, never the audio content, are sent over an encrypted connection to Flaccy's server, which forwards them to Anthropic's Claude model, where it identifies the artist, album, and track. The request carries no personal identifiers, only the random request counter described above. The text is processed only to return the result, and our server does not keep it.

Sample album

The optional sample album is a public-domain recording that the app downloads from Flaccy's server when you ask for it. The download carries no identifier of yours.

Purchases

Flaccy Pro and the lifetime unlock are sold through Apple In-App Purchase. Each purchase carries your anonymous Midgar ID as Apple's app account token. The app sends the signed transaction record Apple issues (which product, the price, the dates and Apple's transaction identifiers) to Midgar's purchase ledger at api.midgarcorp.cc, which keeps it linked to your Midgar ID so that Flaccy Pro is recognised on all your devices and your purchases can be restored in your other Midgar apps, and Apple's own server notifications about your purchases reach the same ledger. Neither the app nor our servers send anything about your purchases to RevenueCat. We never receive your payment-card details.

Other service lookups

To enrich your library, the app fetches lyrics from LRCLIB, artwork and artist images from Apple Music/iTunes, MusicBrainz, and Last.fm, and share links from Songlink. These queries contain only track, artist, or album names.

More Apps

Settings has a Midgar universe card that opens a view of Midgar's other apps. It fetches the app list from midgar-catalog.guitaripod.workers.dev and asks Apple's public iTunes lookup service for current icons, prices and ratings; your App Store country code is sent so prices are correct for your region. It reports which app tiles were displayed and which were tapped to api.midgarcorp.cc. That report contains no identifier of any kind and not your Midgar ID: only the event, the promoted app's App Store id, your App Store country code, where in the app the screen was opened, and the app's name, version and platform. Our server stores a running total per day, event, app and platform, so there is no per-person or per-device record. This is product-interaction data, used only to decide which of our apps to promote, never for advertising or tracking. The Midgar ID is sent as a sign-in token only with the separate request that lists which Midgar apps you already use.

The app also sends further anonymous counts to Midgar's servers in the same way: one "active" count the first time you use the app on each day, in each week and in each month, which tells us how many people use the app; one count for each purchase that names only the product bought; and counts of the steps on the way to buying Pro, namely first-run steps (such as playing the sample album, adding or importing music, or starting the free trial), the paywall being shown, and the outcome of a checkout (started, pending, cancelled or failed) with the plan chosen. Like the More Apps report, they carry no identifier and are stored only as running totals per day, event, app and platform. They are used only to understand how the app is used and what stops people from buying, never for advertising or tracking.

Midgar may publish aggregate statistics built from anonymous counts, such as weekly active installs, which never identify a person.

What we don't do

We do not sell your data, show advertising, use advertising identifiers, run third-party analytics or crash-reporting software, or ask for tracking permission. We do not use your data to train AI models.

How long we keep data

• Your library, playlists, play history and the log: only on your device, until you delete the app.
• The request counters of Flaccy's server: one day.
• The Midgar ID record: until you ask us to delete it.
• Purchase records: Midgar's purchase ledger keeps them as financial records, linked to your Midgar ID until that ID is deleted, after which nothing links them to a live ID. RevenueCat keeps the records it received from earlier versions of the app under its own policy. Apple's records of your purchases: kept by Apple.

Your choices and rights

You can delete the app at any time to remove on-device data. Where privacy law such as the GDPR gives you rights to access, correct, delete, restrict or move information, or to object to its use, contact us at support@midgarcorp.cc and we will help. We process this information to provide the features and purchases you ask for. Processing takes place in the European Union and the United States, by Cloudflare as our hosting provider and by Anthropic as our AI provider. You may complain to your local data protection authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Changes

If this policy changes we will publish the new version here with a new date, and mention material changes in the app's release notes.

Contact

For any questions, contact support@midgarcorp.cc.