Privacy Policy

Last updated: October 15, 2026

Nari is a music player for Android, Linux, Windows and macOS, developed and published by NaviVani. This policy covers the Nari app and the narimusic.com website, including its plugin and theme stores, its theme editor and its publishing pages.

Summary

Nari has no analytics, advertising, tracking or crash-reporting service, and no Nari account. NaviVani does not receive your music library, listening history, playlists, likes, settings, server credentials or logs through the app.

Nari connects directly to third-party services only for features that need them, like online lyrics, artist photos, scrobbling or your own music server. Those services receive ordinary network information, such as your IP address and request headers, and handle data under their own privacy policies.

NaviVani does not sell personal information, use it for advertising, or build user profiles.

Information stored on your device

Nari keeps what its features need on your device. Depending on what you use, this can include:

• Settings, the music folders you picked, and a cache of your songs' tags, covers and lyrics.
• Playlists, likes, listening history, the queue to resume, and songs downloaded for offline listening.
• Sign-in details for the services you connect: server addresses, user names and access tokens.
• Scrobbles waiting to be sent while you're offline.
• Sounds you record or import into the soundboard.
• Installed plugins and themes, and the data plugins save.
• Log files of the current and recent sessions.

None of this is uploaded to NaviVani. Passwords, tokens and other private values are encrypted with a key that never leaves the device: the Android Keystore, the Windows user account (DPAPI), the macOS Keychain, or the system keyring on Linux (a file only your user can read when there's none). Nari doesn't store the passwords of your servers or accounts, only the tokens they hand out or that are made from them to sign in.

On Android, Nari opts out of Android's app data backup, so its data stays on the device. Music files themselves are never changed or moved by Nari.

Network access and third-party services

Nari only goes online for the features below. Everything in this list can be turned off or simply left unused.

• Lyrics. To find lyrics for the current song, Nari sends its title, artist, album and length to the lyrics providers that are on in Settings → Lyrics: LRCLIB, Musixmatch, NetEase Cloud Music, Kugou, AMLL, Lyrics+ and Binimum. Musixmatch gives Nari an anonymous token, kept encrypted on the device. Providers can be turned off one by one, and lyrics in your files are read without going online.
• Artist information. Artist pages ask Deezer and Last.fm for photos, a biography and similar artists, sending the artist's name. This can be turned off in Settings → Library.
• Music servers. When you connect Navidrome (or another Subsonic server) or Plex, Nari talks to the server you chose, and for Plex also to plex.tv to sign in and find your servers. These requests go straight from your device to those servers.
• The plugin and theme stores. Opening a store downloads its list, images and README files from narimusic.com and its CDN. Installing or updating an addon downloads it the same way and adds one to its public download count. No identifier is sent with these requests.
• Casting. When you look for a Chromecast or a speaker, Nari searches your local network. While you cast, it streams the audio and the song's details from your device to that speaker over your local network, behind an address that changes every time.
• Links you open from Nari, like an artist page or a song's share link, open in your browser.

NaviVani does not control these services. Read their privacy policies before signing in or sending them information.

Scrobbling

Scrobbling is off until you connect an account in Settings → Integrations. Last.fm and Libre.fm are connected by approving Nari on their own website, so Nari never sees your password; ListenBrainz uses a token you paste. Nari keeps the session key or token encrypted on the device.

While connected, Nari tells the service what you're playing, and after you've listened to enough of a song it sends its title, artist, album, album artist, length and the time you played it. This goes straight to the service, not through NaviVani. Disconnecting deletes the stored key and any scrobbles that were waiting. The service controls your account and the history it keeps.

Discord

Discord Rich Presence is off by default. When you turn it on in Settings → Integrations, Nari shows the current song on your Discord profile: its title, artist, album, cover, how long it has been playing, and optional buttons that link to the song and to narimusic.com.

Nari hands this to the Discord app on the same device, over a local connection; nothing passes through a server owned by NaviVani. Discord then publishes it to your account, where others may see it according to your Discord privacy settings. To show a cover for songs without a public one, Nari can search Deezer for the album's artwork, sending the album and artist names; this can be turned off. Discord fetches cover images from their addresses. Nari never signs in to Discord itself.

Plugins and themes

Plugins and themes add features and looks, and many are made by other people. A plugin can contact the services it was made for, like a streaming service you sign in to, and those services handle your data under their own policies.

Plugins run in a sandbox: they only read and write their own files, can't run other programs, and can only reach the internet or your clipboard when they ask for it. Nari shows what a plugin asks for in its details. A plugin that needs all access to your device must say so, and Nari asks you before turning it on. Theme scripts run in the same sandbox, without internet access.

Addons in the stores were reviewed before they were published, but NaviVani is not responsible for what an addon does with data you give it. Uninstalling a plugin deletes the data it saved, including its encrypted values.

Permissions and device access

On Android, Nari may use:

• Access to your music, or the folders you pick with the system's file picker, to build your library. Nari reads only what you grant it.
• Internet and network state, for the online features above, and to show your connection in the status bar.
• Wi-Fi and multicast access, to find speakers on your local network and keep the connection while casting.
• Notifications and a foreground service, for the player controls and to keep music playing in the background.
• The microphone, only when you record a sound for the soundboard. Android asks first, and recordings stay on the device.
• Seeing whether the Discord app is installed, for the optional Rich Presence.

On desktop, Nari shows the current song to the system's media controls (like MPRIS on Linux), so your desktop can display and control it. Nari does not ask for your contacts, messages, call logs or location.

Diagnostics

Nari has no remote crash or usage reporting. It writes logs to its own folder on your device to help with problems, and removes the query part and credentials from web addresses before logging them, since those can carry tokens. A log only reaches NaviVani if you choose to share it, for example in a bug report.

The website and publishing addons

narimusic.com is hosted on Cloudflare, which processes requests, including IP addresses, to serve and protect the site under its own policy. The site has no analytics or advertising, loads no third-party trackers, and serves its own fonts.

Browsing the stores, the docs and the theme editor needs no account, and the theme editor works in your browser without uploading your theme. Publishing an addon needs a Discord sign-in, which asks Discord only for your basic profile (the identify scope, no e-mail). NaviVani then stores your Discord user id, name and avatar, the addons you send with their files and review history, and keeps you signed in with a cookie for 30 days. Your name is shown as the owner of your addons to reviewers, and an addon's author field is shown in the stores. Reviewers are notified on Discord when you send an addon.

Security

Nari's data lives in its own folder, and private values are encrypted as described above. Nari uses HTTPS for the services it contacts, but a music server or radio station you add yourself may only offer HTTP, which isn't protected in transit. Files you export or keep in folders you picked are protected by those folders' own permissions. No storage or network transmission is completely secure.

Retention and deletion

Data on your device stays until you remove it or Nari replaces it in normal use. Settings let you clear the listening history, sign out of each service, delete downloads and uninstall addons. Uninstalling Nari, or clearing its storage on Android, removes everything in its folder. Data held by third-party services, like your scrobbles or your Discord profile, has to be deleted with those services.

To delete what narimusic.com keeps about you as a publisher, withdraw your pending addons from the publishing page, and ask us to remove the rest through the contacts below.

Children's privacy

Nari and narimusic.com are not directed to children under 13. Addons and third-party services have their own content and age requirements, so parents and guardians should supervise their use where appropriate.

Changes to this policy

This policy may change when Nari's features, its integrations or the law change. The date at the top shows the latest revision, and changes apply when the updated policy is published here.

Contact

Questions, privacy requests and deletion requests can be sent through theNari issue tracker or theNari Discord server. The source code is available atgithub.com/NaviVani-dev/Nari.