Privacy Policy
Last updated: 27 May 2026
This Privacy Policy explains what information Lio collects and how it is used. Lio is operated by Barel Oved, an individual based in Israel ("we", "us", "our"). We keep this short and honest because Lio collects very little.
The short version
Your music stays on your Mac. We don't track you, we don't run analytics, and we don't sell your data. The only personal information we hold is the email address you use to sign in, plus the purchase records our payment provider keeps.
Who we are
Lio is operated by Barel Oved, an individual based in Israel. For privacy-law purposes, we are the data controller for the personal data described in this policy, except where Lemon Squeezy acts as an independent Merchant of Record for purchases.
What we collect
- Account email. If you create an account, we store your email address so you can sign in and so we can attach your Pro licence to it. Sign-in is handled by Supabase, a hosting provider acting on our behalf.
- Purchase information. When you buy Pro, payment is processed by Lemon Squeezy, our Merchant of Record. They collect and store your billing details and handle payment, taxes, invoices, subscriptions, refunds, and chargebacks. We may receive limited purchase information such as your email address, product purchased, licence or subscription status, transaction ID, country, tax/VAT status, and refund status. We never see or store your full payment-card number.
- Update checks. The app may check www.lioplayer.com for new versions. Like any web request, this may involve your device's IP address, app version, macOS version, and basic server logs. We use this only for update delivery, security, debugging, and abuse prevention, not to build a profile of you.
What stays on your device and never reaches us
Your local Lio library, setlists, tags, app settings, audio files, recordings, stems, and practice edits stay on your Mac unless we clearly tell you otherwise or you choose to share or export them. All audio analysis (tempo, beats, key, loudness) runs entirely on your Mac. None of this is uploaded to us or anyone else.
Email we send you
Transactional email. We use Resend to send account-related emails, such as sign-in links or account changes. These are necessary to provide the Service and to manage your account.
Marketing email. We only send marketing or promotional emails (such as product news, updates, and offers) to people who have opted in to receive them. You can withdraw your consent at any time, free of charge, by using the unsubscribe link in any marketing email or by emailing us. Opting out of marketing does not affect the transactional emails needed to run your account.
The website
Our website is hosted on Vercel. It does not use analytics, advertising, or tracking cookies.
Legal basis for processing
Where the GDPR or UK GDPR applies, we process your data on the following legal bases:
- Contract: to create your account, let you sign in, provide Pro features, verify your licence, and provide support.
- Legal obligation: to keep purchase, tax, accounting, and compliance records where required.
- Legitimate interests: to secure the Service, prevent abuse, send transactional emails, and check for app updates.
- Consent: only where we specifically ask for it, for example if we ever offer optional marketing emails.
How long we keep your data
We keep your account email and purchase records for as long as you have an account, and as long as needed to meet legal and tax obligations. When you delete your account, we remove your account data; our payment provider may keep purchase records as required by law.
Service providers
We share the minimum data needed with providers who help us run Lio: Supabase for accounts, Lemon Squeezy for payments and tax handling, Resend for transactional email, and Vercel for website hosting and update delivery. These providers may process data under their own privacy terms and, where applicable, under data-processing agreements with us.
International transfers
Our providers may process personal data in countries other than your own, including the United States, Israel, the United Kingdom, and/or the European Economic Area. Where required, we rely on appropriate safeguards such as data-processing agreements, standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms.
Security
We use reasonable technical and organisational measures to protect the limited personal data we process. However, no system is completely secure, and we cannot guarantee absolute security.
Your rights
You can access, correct, or delete your personal data at any time. You can delete your account directly inside the app, or email us. If you are in the EU/UK, you have rights under the GDPR, including the right to access, rectify, erase, and port your data, and to complain to your local data-protection authority.
Children
Lio is not directed at children. You must be old enough to use the Service under our Terms. We do not knowingly collect personal data from children under 13, or a higher age where required by local law.
Changes to this policy
If we change this policy, we will update the "last updated" date above. Significant changes will be highlighted where appropriate.
Contact
Questions, or want your data deleted? Email support@lioplayer.com.