TuneShare Privacy Policy
Effective July 25, 2026
Who we are
TuneShare is provided by Gale W. This policy explains how TuneShare handles information when you use its iPhone, iPad, and Mac app and share extension.
The short version
TuneShare matches music links that you choose to provide. It does not require an account, access your music-service account or library, sell personal information, show advertising, or track you across apps or websites.
Information used to provide matching
When you ask TuneShare to match a link, the app sends the music link you provided, or the track metadata needed to resolve it, to TuneShare's TokenBroker service. That service uses the information only to return matching links from supported music services: Apple Music, Spotify, YouTube, and YouTube Music.
TuneShare does not receive your Apple Music, Spotify, Google, YouTube, or other music-service login credentials. It does not access your library, playlists, listening history, or service account data.
The submitted link and matching metadata are used to service the request and are not retained by TokenBroker as a match history. The music providers may process requests made to their services under their own privacy policies.
Recent matches and iCloud
TuneShare saves your recent match history on your devices and synchronizes it through the private CloudKit database associated with your Apple account. This history can include submitted music links and match results such as track title, artist, provider links, artwork links, duration, and matching confidence. The history is limited to 200 recent matches. You can clear it in TuneShare; clearing removes those records from the app's synchronized history.
Gale W does not operate or have access to your private CloudKit database. Apple processes CloudKit under its own privacy policy.
Service security and anti-abuse records
To protect TokenBroker from abuse, TuneShare sends a random app-installation identifier, app and version information, and App Attest or DeviceCheck evidence. TokenBroker stores short-lived challenges and rate-limit records, and keeps an App Attest registration record and anti-replay counter for an app installation when App Attest is used. These records are used only for security, fraud prevention, and reliable operation; they are not used to identify you by name, build a profile, advertise, or track you.
TokenBroker retains application and authorizer operational logs for seven days. These logs are designed not to include music links, raw attestation payloads, provider credentials, or authorization tokens.
What TuneShare does not do
- No advertising, sale of personal information, or cross-app or cross-site tracking.
- No third-party analytics SDK, marketing SDK, or independent crash-reporting service.
- No TuneShare account, subscription, licensing account, or direct payment system.
- No collection of App Store purchase records; Apple handles App Store purchases.
If you choose Apple’s optional operating-system-level diagnostic sharing, Apple may collect diagnostic information under its own settings and privacy policy. TuneShare does not control that Apple service.
Sharing
We share only what is necessary to run the feature: a submitted music link or matching metadata is sent to the relevant music-service provider through TokenBroker; private recent-match history is synchronized with Apple CloudKit; and Apple validates App Attest or DeviceCheck evidence where required for service security. We do not sell or share information for advertising.
Retention and deletion
Recent match history remains in your private CloudKit database until you clear it or remove it through your Apple account. Short-lived TokenBroker security records expire after their security window. App Attest registration records remain while needed to prevent replay and abuse; you may request deletion of such a record by contacting us. Operational logs are retained for seven days.
Your choices and contact
You can avoid submitting a link, clear recent matches in TuneShare, disable iCloud features through your Apple account settings, and control Apple’s optional diagnostic-sharing settings through your device settings. For privacy questions or a request to delete TokenBroker security records associated with your installation, email mail@galewilliams.com.
Children
TuneShare is not directed to children, and we do not knowingly collect personal information from children.
Changes
We may update this policy when TuneShare's data practices change. The current version is always published at this address, with its effective date shown above.