Privacy Policy

Last updated: June 18, 2026

Spinefin is designed to be private. We do not collect, store, or share any of your personal information. There is no analytics, no advertising, and no third-party tracking in the app.

What Spinefin connects to

Spinefin connects only to the Jellyfin server you choose. Your server address, login, audiobooks, and listening activity are exchanged directly between your device and your server. We — the developer — never see, receive, or have access to any of it.

What's stored on your device

The following are kept locally on your iPhone so the app works, and are removed when you sign out or delete the app:

Your server address and the access token issued by your Jellyfin server, stored securely on the device.
Your playback progress and bookmarks, so you can resume where you left off. (Jellyfin cannot store resume positions for music-type libraries, so Spinefin keeps them on the device.)
Any audiobooks you choose to download for offline listening.
App preferences such as playback speed and sleep-timer settings.

Data collection

Data Not Collected. Spinefin collects no data and does not track you across apps or websites. No information is transmitted to the developer or to any third party.

Required-reason APIs

For transparency, Spinefin uses a small number of Apple "required-reason" APIs solely for app functionality — reading and writing local settings (UserDefaults) and checking downloaded-file timestamps. These are declared in the app's privacy manifest and are not used for tracking.

Children's privacy

Spinefin does not collect personal information from anyone, including children.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new date above.

Contact

Questions about privacy? Email support@xcfmedia.com.