privacy
Privacy first,
period.
VIVI Music DE is built to respect your privacy. No trackers, no analytics, no collection — just your music, on your machine.
Zero data collection
VIVI Music DE does not collect, store or transmit any personal data.
- No account creation or login is required to use the app.
- No search logs, playback history or playlists are sent to our servers.
- No third-party advertising, analytics or telemetry scripts are integrated.
Optional sign-in
Signing in with a Google account (or by pasting cookies) is optional and only unlocks your own YouTube Music history, library and playlists. The session is stored locally on your device and used to talk to YouTube Music as you — nothing is forwarded anywhere else.
Public source code
Trust is built through transparency. The entire development history and source code are public on GitHub: you can verify every commit, audit the dependencies or build the app yourself.
External network connections
To stream audio, VIVI Music DE connects directly from your device to public YouTube Music endpoints. No middleman server is involved in streaming, and these connections are subject to Google's own privacy policies.
Two optional features use a lightweight relay:
- Device sync — pairs your desktop with the Android app. Only the settings, queue and playback state you choose to share are relayed, so your two devices can find each other over the internet.
- Listen Together — a room where friends' players are kept in sync. Only the room state (track, position, chat) travels through the relay.
If you don't use those features, the app never talks to our servers at all.
Local storage
Preferences, the audio cache, downloaded updates, custom playlists and your login session live strictly inside the app's own folder on your device (on the desktop: ~/.vivimusic/). Nothing is uploaded, and the folder is wiped if you uninstall or clear the app data.
The app only requests the permissions it needs to play and manage audio correctly — network access for streaming, notifications, and local storage for the cache and backups.
Third-party services
Depending on the features you enable, the app may talk to the services you configured yourself: Last.fm (scrobbling), Spotify (playlist import), ShazamKit (song recognition), lyrics providers, and the GitHub API (update checks and the live changelog). Each one is only contacted when you use that feature, and only with the data that feature needs.
Contact & support
Questions, concerns, or a potential security issue? Open a public issue or send an email: