AmpFire/docs/PRIVACY_AND_PUBLISHING.md

Privacy and publishing posture

AmpFire is planned as a self-hosted music client for user-controlled Subsonic/Navidrome-compatible servers.

Data handled by the app

• Server URL supplied by the user.
• Username and password/token used to authenticate to that server.
• Music library metadata returned by the user's server.
• Playback activity if scrobbling is enabled.

First release goals

• No ads.
• No third-party analytics.
• No credential logging.
• No trust-all TLS bypass in release builds.
• Reviewer/demo server support before Amazon Appstore submission.

Before Appstore submission

• Replace the temporary DataStore credential persistence with Android keystore-backed encrypted storage.
• Publish a privacy policy URL.
• Create app icon, banner, screenshots, short description, full description, and support contact.
• Provide Amazon reviewers with a demo server or built-in demo mode.
• Verify remote-only navigation on physical Fire TV hardware.