Privacy

The app

Pochette has no account, no analytics, no tracking code and no online lookups, and it never sends your music, your tags or your file names anywhere.

On the Mac it goes online itself for one thing: the model that splits a track into stems, which it downloads from Hugging Face (huggingface.co) when you ask for it in Settings › Models, pinned to a fixed version and checked file by file. Hugging Face sees that download as any web server sees one; nothing about you or your library is sent with it. The model is kept in a folder shared with our other apps on this Mac, so they use the same copy. And the MCP server, off until you turn it on in Settings, listens only on this Mac, behind a token, so that an AI agent running here can reach your libraries; no other machine can. Both show in the app's entitlements: codesign -d --entitlements - /Applications/Pochette.app.

Everything else that crosses the network goes through Apple's own services, never to us. The instruments MIDI files play with are downloaded by the system from Apple when they are first needed: a General MIDI sound bank the first time a MIDI file plays on iPhone or iPad, and the Concert Grand piano when you choose it. On the Mac, a language for Transcribe Lyrics is downloaded by the system from Apple the first time you use it, and the transcription itself runs on your Mac. Buying Pro goes through the App Store. And if you leave it on, iCloud sync keeps the short list described below.

It reads and writes only the folders you give it: your music, your tags and your file names stay on your device, or in your own iCloud Drive if that is where the folder lives. The undo journal is kept on your device too. Crash reports, if you allow them, go to Apple and not to us.

If you leave iCloud sync on, Pochette keeps a short list in your own iCloud account, through Apple's key-value storage, so your other devices can show the same libraries: the name of each library you opened from iCloud Drive and where it sits there, your Rename, Organize and Tags from Path patterns, and how a slash in a tag is written. It never includes a track, its file name or its tags. It goes to Apple and not to us, and the switch in Settings turns it off.

This website

This site counts visits with Cloudflare Web Analytics, which sets no cookies and does not follow you across other sites, so there is no consent banner. Fonts and images are served from this site itself; no other third party is contacted when you read it.

Feedback form

The feedback form sends something only when you fill it in and press send. The app never sends feedback itself: it opens that page in your browser and stops.

We receive what you typed, the subject and details, and your email address if you chose to give one. Opening the form from the app also fills in four technical facts: your Pochette version, your system version, your device’s model identifier (like Mac16,10) and your language. They arrive in the web address itself, so you can read them in the address bar before anything is sent, and the form shows them as ordinary fields you can edit or clear. That is the whole list: never a file name, a tag or anything else from your library.

Submissions are stored in a Cloudflare D1 database in Western Europe, with the two-letter country your request came from, and emailed to support@mgcrea.io so we can reply. The form sets no cookie, and the code that handles a submission never reads or stores your IP address. Submissions are never used for marketing, sold or shared. To have one deleted, email us.

Contact

Questions about this page: support@mgcrea.io.