Moka Music Player — Privacy Policy
Last revised: October 17, 2026
How Moka works
Moka Music Player is a local-first Android music player. It reads music and its metadata through Android's media permissions to display your library and play selected tracks. The developer does not automatically receive the audio files stored on your device. Audio processing, DSP, library scanning and optional offline loudness calculations run on your device.
Optional internet services
- Navidrome/Subsonic: If you choose to sign in to an HTTPS music server, Moka sends requests and streams audio to/from the server you selected. Server operators may see your username, IP address, requested music and authentication information in requests/logs. You control which server you use; Yoo Shastan does not operate that server by default.
- MusicBrainz and artwork: If you initiate online metadata enrichment, Moka can send artist/album text to MusicBrainz and fetch matched artwork from the Cover Art Archive/Internet Archive. These services may receive standard request information such as your IP address.
- AutoEq: If requested, Moka accesses GitHub-hosted public headphone indexes and profiles, which may involve standard HTTP request information sent to that host.
Saved login and local data
If you enable remembered Navidrome login, the selected server URL and username are stored locally on your phone, and the password is encrypted with a key managed by Android Keystore. The encrypted password file is excluded from Android's usual app backup. You can disconnect without deleting the remembered login or choose the forget-server control to delete the saved login.
Library metadata, analysis results, preferences and selected DSP settings are stored on the phone. Normal app data can be cleared through Android settings; uninstalling also deletes app-private data subject to Android backup and restore behavior. Deleting the app does not delete music files stored outside its private data.
Diagnostics, analytics and advertising
Moka lets you export a diagnostics report when you explicitly request it. The report may contain device details, playback routes, local file metadata, recent errors and DSP settings. Moka does not automatically upload that report to Yoo Shastan. This release does not integrate an advertising SDK or developer-operated analytics account; requests to optional external services are described above.
Retention and security
The developer has no hosted database of users' local libraries or encrypted saved server credentials. On-device data remains until it is deleted through app controls, Android app storage management or uninstall; third-party servers follow their own data-retention rules. Moka uses HTTPS for optional Navidrome connections and Android Keystore for remembered passwords.
Contact
To ask questions about privacy or request assistance with Moka Music Player, use the developer contact information shown in the App support section of Moka Music Player's Google Play listing. Please do not send passwords, authentication tokens or private streaming URLs. A direct studio support address will be added when available.