Privacy Policy

Last updated: October 1, 2026

MigraSon converts, merges and syncs your playlists between music services. This page explains what data is processed, why, and how to erase it.

Controller

ByLoot, Inc.. Contact: business@byloot.us.

Data processed

• Anonymous account: an identifier created on first launch. The session token stays in your device's Keychain; the server only keeps a hash of it.
• Access to your services: Spotify, Apple Music and Tidal tokens and, if you use one, your personal Spotify app's Client ID. They are encrypted (AES-256-GCM) on the server.
• Your playlists: titles, artists, albums and ISRC codes of the playlists you choose to convert or sync, and the matching results.
• Sync journal: tracks added or removed by a sync, so they can be undone.
• IP address: its hash (SHA-256), never the address itself, is kept for less than 24 hours to limit how many accounts one address can create.

No ads, no tracking, no third-party analytics. Your data is never sold or used to profile you.

Why

Only to do what you ask: read your playlists, find the tracks on the destination, create playlists and run your syncs (legal basis: performance of the service you use).

Spotify with your own key

MigraSon keeps your Client ID and access to your Spotify account, encrypted, to run your conversions and syncs. Disconnect Spotify in Settings to erase everything.

Sharing

Data goes through the services you connect (Spotify, Apple, Tidal, Deezer), under their own policies. Server host: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Nobody else.

Retention

• Service access: until you disconnect it.
• Sync journal: 30 days, then erased automatically.
• Conversion and sync history: until you delete your account.

Your rights

In the app, Settings › Delete my account immediately erases everything about you on the server; swiping a service disconnects it and erases its access. For access, correction, portability or any question: business@byloot.us. You may also contact your data protection authority.

Children

MigraSon is not directed at children under 15.