Ondoq by Avivoq (Québec, Canada). Last updated: October 2026.
The short version. Ondoq is a music player that works on your phone. It has no account, no advertising, no analytics and no tracking. Your music library, your settings and your network-share passwords stay on your phone, and we never receive them. Apart from checking whether you own the full version, the app goes online only for what you ask it to do: play from your own network shares, download a headphone correction profile, find a missing album cover or a track's lyrics, send what you play to ListenBrainz or Last.fm if you connect them, and buy the full version through Google Play or the App Store. The iPhone app does a little less, and its differences are in section 6.
Everything below is stored on your phone only.
| What | Why |
|---|---|
| Your music library: the names and locations of your music files, the tags inside them (title, artist, album, cover art and so on), and what Ondoq measures about each track (format, dynamic range, tempo, whether it is genuine hi-res) | To show, sort, search and play your music. |
| Play counts and last-played dates, your queue, playlists, equalizer and other settings | To remember your music and your preferences. |
| Network shares you add: their address, your user name and your password | To play music from your own computer or NAS. Passwords are encrypted with a key held in your phone's secure hardware (the Android Keystore). |
| Scrobbling accounts you connect: your ListenBrainz token or your Last.fm session key (never your Last.fm password), and the listens waiting to be sent | To send your listening history to the service you connected. Encrypted with the Android Keystore, like network passwords. |
| Headphone correction profiles you download | To apply the correction you chose. |
| Album covers (from your files, or found online when you ask), and a cache of the parts of network tracks being played | To show covers and play smoothly. |
| Lyrics found online when you ask | To show them again without asking the service a second time. |
| Music you download from your network shares (Download to phone) | To play it without the network. It is copied straight from your own computer or NAS; Settings → Downloaded music removes it. |
None of this is sent to Avivoq or to anyone else. We do not run a server that holds Ondoq users' data, and there is no advertising identifier or third-party analytics tracker in the app. The only record kept off your phone is whether you bought the full version (section 2).
For things you ask it to do, and to check whether you own the full version.
| When | What goes where |
|---|---|
| You play music from a network share (SMB/Windows or WebDAV) | Ondoq connects directly to that computer or server, with the details you entered. The music travels between your phone and your server, not through us. |
| You add a network share | Ondoq looks for computers on your local network that share files, so you can pick one by name. This stays inside your local network. |
| You open the equalizer, or search for or download a headphone profile | Ondoq fetches the list of headphone models (once, then keeps it) and the profile you pick from the public AutoEQ project on GitHub (raw.githubusercontent.com). As with any website, GitHub sees your phone's IP address; Ondoq sends nothing else about you. GitHub's privacy statement applies to that connection. |
| You ask Ondoq to find a missing album cover (on an album, or for all albums without one) | Ondoq sends that album's title and artist name to MusicBrainz (musicbrainz.org) to identify it, then downloads its picture from the Cover Art Archive (coverartarchive.org, whose pictures are stored at archive.org). Nothing else is sent, and only when you ask. As with any website, those services see your phone's IP address; the MetaBrainz Foundation's and the Internet Archive's privacy policies apply to those connections. |
| You ask Ondoq to find a track's lyrics online (the Lyrics panel, "Find lyrics online") | Ondoq sends that track's title, artist, album and length to LRCLIB (lrclib.net), an open lyrics database, and keeps the lyrics it returns on your phone. Nothing else is sent, and only for the track you asked about. As with any website, LRCLIB sees your phone's IP address; its own terms apply to that connection. Lyrics stored in your files, or in a .lrc file beside them, are read on the phone and never sent anywhere. |
| You connect ListenBrainz or Last.fm (Settings → Scrobbling) | For each track you listen to (half of it, or four minutes), Ondoq sends that service the artist, title, album, album artist, track number, length and the time you started it, and while a track plays, that it is playing now. ListenBrainz (listenbrainz.org) is run by the MetaBrainz Foundation; Last.fm (last.fm) by Last.fm Ltd. To sign in to Last.fm, your user name and password go to Last.fm once; Ondoq keeps only the session key it returns. Nothing is sent before you connect a service, and disconnecting it stops everything and deletes the listens still waiting for it. That service's privacy policy applies to what it receives. |
| On Android: Ondoq starts, and when you buy the full version (iPhone: section 6) | Google Play handles the payment; we never see your payment details. Google's purchase component built into the app (the Play Billing library) may also send Google technical information about the purchase process, under Google's privacy policy. RevenueCat (RevenueCat, Inc., revenuecat.com) checks purchases for us: each time Ondoq starts it asks RevenueCat whether you own the full version. It sends a random identifier made for this installation, the purchase record Google Play gives the app, and technical details (app and Android version, language, store country and currency). We do not link it to your name, email or Google account, and it is never used for advertising. RevenueCat keeps purchase records on our behalf, under its privacy policy; we can have yours deleted on request (section 7). |
| Permission | Why |
|---|---|
| Music and audio | To find and play the music stored on your phone. |
| Network access | For network shares, headphone profiles, album covers you ask for, scrobbling you turn on, and buying or checking the full version (Google Play, RevenueCat). |
| Playback in the background | To keep playing when the app is not on screen, and to show the playback notification and controls. |
| USB device (asked when you plug one in) | To send audio straight to your USB DAC, bit-perfect. |
| Change audio settings | To switch your USB DAC to Android's bit-perfect mode while Ondoq plays through it (when Reference Mode is off). |
Ondoq does not ask for your location, contacts, camera, microphone, or access to files other than audio. On iPhone it asks for no permission at all (section 6).
Settings → About → Send a diagnostic log prepares the app's recent technical events (for example which audio output was used, errors, and the names of files that were played), together with the app version, your phone model and Android version. Nothing is sent unless you choose where to send it, for example by email to us. We use a log you send only to fix the problem you report, and delete it when it is no longer needed. The same goes for any email you write to us.
If Android backup is turned on, Android backs up only a small record of when your free trial started, so that reinstalling the app does not restart the trial. Separately, Google Play services keeps the random purchase-check identifier from section 2 in your Google account's backup, so that a reinstall or a new phone recognises your purchase. Your library, settings and passwords are not included in backups.
You can also save your own backup file from Settings: your playlists, favourites and ratings, play history, sound-quality grades, EQ and settings — not your music, and never network-share passwords, scrobbling sign-ins or your purchase. The file goes where you choose to save it; we never receive it.
Backups on iPhone work differently: see section 6.
The iPhone app follows this policy, with these differences:
| Topic | On iPhone |
|---|---|
| What it keeps | What section 1 lists, apart from network shares, scrobbling accounts and downloads, which the iPhone app does not have yet. Music you add from the Files app is copied into Ondoq's own folder on your iPhone; music you put there yourself stays there. |
| Purchases and the free trial | The App Store handles the payment; we never see your payment details. The free 14-day trial is a free item from the App Store that you choose to start in Settings, after Ondoq tells you how long it lasts, what stops working when it ends and the price of the full version. RevenueCat checks your purchase and your trial as described in section 2, with the App Store's transaction record in place of Google Play's and your iOS version in place of Android's. It is not linked to your name, email or Apple Account, and never used for advertising. |
| Permissions | None are asked. Ondoq plays the music you add to it, and keeps playing in the background, with its controls on the lock screen and in Control Center, like any music app. |
| Diagnostic log | The app keeps its recent technical events (of the kind described in section 4) in a log file inside the app, of at most about 2 MB, replaced as it fills. It is left out of backups, never leaves your iPhone by itself (only when you send it, as section 4 describes), and is deleted with the app. |
| Backups | If you use iCloud Backup or back up your iPhone to a computer, Apple includes Ondoq's folder, as it does for every app: your library, settings and the music you copied in. Apple's terms apply to those backups; we never receive them. Your purchase and your trial come back from your Apple Account (Settings → Restore purchase), not from a backup. |
| Your choices | Deleting the app deletes everything Ondoq stored on your iPhone. Your purchase record is kept by Apple, managed through your Apple Account, and by RevenueCat on our behalf (section 7). |
You can remove tracks, clear the whole library (Delete All Tracks) or remove a network share in the app. Clearing Ondoq's storage in Android settings, or uninstalling the app, deletes everything Ondoq stored on your phone. You can withdraw Ondoq's access to your music at any time in Android settings. Your purchase record is kept by Google, managed through your Google account, and by RevenueCat on our behalf; write to ondoq@avivoq.com to have RevenueCat's copy deleted.
Under Canada's Personal Information Protection and Electronic Documents Act and Québec's Law 25, you may ask to see the personal information we hold about you, correct it, have it deleted, obtain a copy in a portable format, or withdraw a consent you previously gave. Because Ondoq keeps your information on your phone, we normally hold none, apart from what you send us yourself, such as an email or a diagnostic log. Write to ondoq@avivoq.com and we will answer within 30 days.
Avivoq's person responsible for the protection of personal information can be reached at the same address. If our answer does not satisfy you, you may complain to the Commission d'accès à l'information du Québec or to the Office of the Privacy Commissioner of Canada.
If personal information we hold is exposed in a way that presents a risk of serious harm, we will notify the affected users and the appropriate regulator, as Law 25 requires, and tell you plainly what happened and what to do about it.
Ondoq is not directed at children under 13. We do not knowingly collect information from children.
If this policy changes we update the date at the top, and for anything significant we say so in the app's release notes before it takes effect.
ondoq@avivoq.com
Avivoq, Québec, Canada