Muzalo Privacy Policy

You choose the music folder Muzalo can read. Most player information stays on your device. This summary distinguishes local processing from an online request.

A song title or artist can reveal an interest or listening preference even without your name. Online services also see the network information needed to answer. You can choose local playback without requesting online lyrics or downloads.

Muzalo is a music player for your local audio library. You do not need an account with us to use it. When you choose a music folder, Muzalo reads audio files and their metadata to build your library and play your music.

The app stores the following information on your device:

• Song file locations, filenames, titles, artists, albums, duration, file size, year and artwork.
• Playlists, playlist descriptions, favourites, play counts and recently played information.
• Lyrics and synced lyrics you retrieve, enter, edit or synchronise, and changes you make to song information.
• Your chosen music folder, playback queue, current track, playback position, volume, shuffle, repeat and lyrics display preferences.

This information is used to organise your library, display song details, resume playback and remember your choices. Muzalo uses a local database, app storage and cached files for these functions. We do not receive uploads of your audio library, playlists or listening history.

When you use the fetch-lyrics action, Muzalo sends the selected song's artist name and title to LRCLIB to find plain or synchronised lyrics. This lookup does not send the audio file, your entire library, or your playlists.

LRCLIB receives the lookup terms and the network information needed to serve the request, including your IP address. Retrieved lyrics are saved locally so the app can display them again. You can use local playback and enter lyrics yourself without using this lookup.

When you use a download action for an audio file hosted online, Muzalo contacts the server hosting that file and saves the downloaded audio to the folder you authorise. That server receives the file request and your IP address. Files saved to your selected folder remain outside the app's private storage.

• Files and folders: Muzalo asks you to select and authorise a music folder on Android. It uses access to read and index songs, cache audio or artwork, and save downloads. Denying access prevents it from loading music from that folder.
• Clipboard: the lyrics editor reads clipboard text when you press "Paste from Clipboard" so you can insert lyrics.
• Background playback: the app uses background audio and Android playback services to keep music playing and provide media controls.
• Lock screen, notifications and widget: playback controls can display the current song title, artist and artwork outside the app. Other people who can see your device may see those details.

You can manage app permissions and lock-screen visibility through your device settings. Disabling a permission may prevent the related feature from working.

Muzalo does not include advertising, advertising identifiers, behavioural analytics or a crash-reporting service. It does not sell your music library or listening history. The external requests described above are used to deliver the lyrics and download features.

If you contact us for support, we receive the information you choose to send, such as your email address, device details and problem description. Avoid sending private audio files or other sensitive material unless it is necessary to explain your request.

Muzalo keeps its library database and playback preferences on your device so they remain available between sessions. You can remove playlists and favourites within the app. To reset the app's local database and preferences on Android, use the device's app settings to clear Muzalo's storage.

Clearing app storage does not delete your original music files or downloads saved in a folder you selected. Manage those files separately with your device's file manager. Uninstalling or clearing the app also does not remove copies held in device backups; backup and restore behaviour depends on your operating system and backup settings.

We cannot remotely inspect, export or erase the music database stored only on your device.

Information you send us for support or a privacy request is kept only as needed to handle that request and related service needs. We delete or de-identify it when it is no longer needed, including when a verified deletion request is handled, except for records that must be kept for a specific legal obligation or legal claim. We do not host a copy of your local music database.

Muzalo processes local files and settings to deliver the player features you request. This does not give us possession of your library. When you contact us, we process your address and message to answer the enquiry, provide support or handle privacy rights. Relevant grounds can include providing the requested service, our legitimate interest in resolving a genuine enquiry, and compliance with a legal duty.

Folder access is needed for music stored in that folder. Lyrics lookup, downloads and sending a message are separate choices, not requirements for playing an accessible local file. You can edit lyrics without an online lookup. Declining folder access prevents the app from indexing files that require it.

Where consent or parental authorisation is required, it must be obtained for the specific processing before it occurs. Granting folder access is not consent for unrelated analytics or advertising. Muzalo does not add those activities as a condition of local playback.

Children may use Muzalo. A parent or legal guardian must authorise a child's use of online features, including lyrics lookups and downloads, or the submission of personal information to us. Local music playback does not require an account with us.

A parent or guardian can contact privacy@chefu.co.za about information a child has sent to us or to request its deletion. The music library stored only on the child's device must be managed on that device.

For children: your music stays on your device, but pressing the lyrics button sends the song's name and artist to an online service. Ask a parent or guardian before using online features. Do not put your school, address, passwords or other private information into a message to us.

If a law requires verifiable parental consent, a statement in this policy does not replace verification. Muzalo does not currently contain a parental-consent verification flow. An authorised parent can ask to review information we hold about a child, stop consent-based processing or delete it, subject to applicable legal exceptions.

For personal information we receive and decide how to use, we act as the responsible party under South Africa's Protection of Personal Information Act (POPIA), or the controller under other applicable data-protection law. Our legal identity and contact details appear above. Information stored only on your device and never sent to us is different from information held in our systems.

This notice covers Muzalo. Our company Privacy Policy also explains website enquiries and other company services. Visiting this website is separate from using the app: website cookies and optional website analytics are covered by our Cookie Policy and the website's cookie preferences.

Third-party services can also have responsibilities for requests they receive directly. Their notices do not replace our responsibility for information we disclose or the providers we engage.

The app-specific sections identify the services involved in ordinary use and the information sent to them. Staff or providers handling a support or privacy request may need the information relevant to that request. This does not give us access to files that remain only on your device.

We may disclose relevant information where required by a valid legal obligation or enforceable request, or where lawfully necessary to protect rights, investigate abuse or address a security incident. A disclosure must have a lawful purpose and be limited to relevant information; someone claiming authority is not, by itself, permission to release your information.

If the app changes operator through a business transfer, any transfer of personal information remains subject to applicable law and the purposes described here. A material change in use requires the notice or permission required by law.

Security depends on the app, the providers involved and your device. Our website and published account API use HTTPS. This does not mean every local file, backup or item of diagnostic information is encrypted by the app. The app-specific sections explain device storage and publicly accessible image URLs.

Keep your device updated, protect access to shared devices, and do not send passwords, sign-in codes or unnecessary sensitive files. If you suspect information handled by us has been exposed, email privacy@chefu.co.za with the app name and a description. We may ask for relevant details through an appropriate channel.

No service can promise absolute security. If an incident triggers a legal notification duty, we must notify the relevant authority and affected people as applicable law requires. Publishing this notice does not remove those duties.

Depending on applicable law, you can ask whether we hold information about you, request access, correct inaccurate information, request deletion, object to processing or ask for it to be restricted. Where applicable, you can request a portable copy of information you supplied. These rights can have conditions and exceptions.

For Muzalo, email privacy@chefu.co.za and tell us:

• Which app and feature your request concerns.
• Your account email, if you use an account, or the address used for earlier correspondence.
• Whether you want access, correction, deletion, an explanation, an objection considered or consent withdrawn.
• Whether you act for a child or someone else, and your authority to act.

We may verify identity or authority before releasing or deleting information. Verification should be proportionate; do not attach identity documents unless we explain why they are needed and how to provide them. We cannot retrieve information that never left your device.

We will handle requests within the applicable legal time limit and explain a lawful extension, refusal or restriction and the available complaint route. Where a law permits an access fee, we will explain it before charging. If particular records must be retained for a legal obligation or legal claim, we will explain why.

Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. Contact our privacy address and identify the feature or information concerned. An authorised parent or guardian can act for a child.

Changing device permissions can stop a feature, but it does not automatically delete information already received by us or a third party. Deletion is a separate request. Some information may still be needed for another lawful purpose, such as a legal claim.

Agreeing to terms, granting device access and consenting to an optional use of personal information are different decisions. This notice does not treat reading the page or continuing to use the app as blanket consent.

We operate from South Africa and intend the apps for international distribution. Information sent to us can be processed in South Africa and countries where the providers described above operate. A provider's privacy notice alone does not establish that every transfer meets all legal requirements.

Where a transfer requires a safeguard, it must have an applicable lawful basis and safeguard, such as an adequacy decision or appropriate contractual protection. Additional restrictions can apply to children's and sensitive information. Contact us to ask about the recipients, locations and safeguards relevant to your information.

If EU, EEA or UK data-protection law applies, its mandatory protections remain available, including applicable access, correction, erasure, restriction, portability, objection and complaint rights. Regional law can require specific parental authorisation or another condition for children's or health-related information. This notice does not assert that a regional representative or consent-verification process is already in place.

Contact privacy@chefu.co.za with the app name, what happened and the outcome you seek. You do not need to send private workout details or audio files merely to raise a concern.

You can complain to South Africa's Information Regulator through its official contact and complaints page or POPIAComplaints@inforegulator.org.za. Its published office address is Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191.

Where another authority has jurisdiction, you can use its complaint process, including the competent authority in your EU/EEA country or the UK Information Commissioner where applicable. Contacting us does not waive your right to complain or seek a legal remedy.

We will update this page and its date when Muzalo's information practices change. Changes in collection, purpose, providers or privacy choices may require an updated notice. You can save or print this page for your records.

Where required, we will give additional notice or obtain permission before a new use. An updated page does not retrospectively authorise processing that required consent or another legal condition when it occurred.