Legal

Privacy Policy

Last updated: 5 November 2026

This policy explains what data Auris collects, why it is needed, and how it is handled. Auris is an independent third-party addon utility that provides Discord account integration and an Apple Music manifest generator for users who already have their own Apple Music account.

1. Data we collect

Discord identity: Discord user ID and username from Discord OAuth (scope: identify).
License data: 30-day addon period status, expiry and UPI transaction reference. UPI PIN and bank credentials are handled by your UPI app and bank, not by us.
Apple linking data: Apple developer token, Apple Music media token, storefront, device ID and the local Apple session needed to generate your manifest and keep the utility working.
Utility data: your config token, manifest URL, reserved addon slot and stream metadata such as track ID, format, sample rate and bytes delivered.
Technical logs: IP address, request time, status codes, error messages and wrapper health events.

2. Apple ID password

Your Apple ID password is used only during the Apple linking step. It is passed to the wrapper process through an anonymous in-memory file (memfd), is never written to disk, and the login process scrubs and closes the descriptor. It is not sent to Discord or any payment provider.

3. Why we use data

To authenticate your Discord account and show your Auris account page.
To process the addon period fee and activate the 30-day period.
To link your own Apple Music account, generate your manifest and run your reserved addon slot.
To stream, cache, seek and troubleshoot playback performed through your own account.
To prevent abuse, fraud, chargebacks and unauthorized access.
To provide support and meet legal obligations.

4. Cookies

We use a signed, HttpOnly session cookie for Discord login and a separate signed admin cookie for the internal dashboard. We do not use advertising cookies or third-party analytics cookies. Your UPI app may set its own cookies or storage when you complete a payment.

5. Sharing

We do not sell personal data. Data is shared only with service providers needed to run the utility:

Discord for OAuth login.
UPI apps and banks for payment processing and fraud prevention.
Apple for Apple Music authentication and playback through your own account.
Hosting, network and security providers where necessary to operate the server.

We may disclose data if required by law or to protect the Service, users or the public.

6. Retention

Account, license and Apple session data is kept while your addon access is active and for a reasonable period afterwards to handle renewals, support and disputes.
Playback cache is shared by software output and expires by the cache eviction policy; it is not sold or used as a music library.
Technical logs are kept for a limited period unless needed for security or legal reasons.
Payment records may be retained as required by tax and accounting rules.

7. Security

Tokens, sessions and account files are stored on the server with restrictive file permissions. Access is limited to the running service and the operator. No system is perfectly secure; protect your Discord account, Apple ID and manifest URL, and tell us immediately if you suspect compromise.

8. Your choices

You can stop using the utility at any time, log out of Discord, and request deletion of your account data by emailing support. Some records may be retained where required by law or to prevent fraud.

9. Children

The Service is not directed to children under 13 (or the minimum age required in your country). Do not use it if you are below that age.

10. Changes

We may update this policy. The “Last updated” date will change. Continued use after an update means you accept the revised policy.

11. Contact

Privacy questions or deletion requests: appleaddon.utility@gmail.com. See also Contact Us.