마디 개인정보 처리방침

Madi Privacy Policy (English)

Effective 2026-11-06. Scope: the Madi iPhone and Android apps.

1. Summary

Madi is an offline video and music player with practice tools, NAS playback, PDF tools and simple video editing. There is no account or sign-in, and no personal data reaches Vivory Lab ("we"). We have added no advertising, analytics, tracking or crash reporting tools. The diagnostic records that Google libraries in the Android app (the Google Play Billing Library and Google ML Kit for paper scanning and subtitle translation) may send to Google are described in section 4. Sections 2 and 3 describe the iPhone app and section 4 the Android app (the Android app has no phone storage cleanup or Music app import). The only feature that connects to our servers is Import from Naran in the iPhone app; it opens only for the operator's own administrator account and is not available to users (section 2).

2. iPhone and iPad app: what stays on your device

• Files in your library (video, music, PDF, edited exports) live in the app's Documents folder, visible in the Files app. They are never uploaded to us (with Library Backup on, copies are kept only in your own iCloud Drive).
• Playback positions, section markers, beat grids, practice records (practice time and repeat counts) and settings are stored only on the device (they may be included in your device backup). Waveforms and beat detection are computed on the device.
• Vocal and accompaniment separation, chords, key and the spectrogram are computed on the iPhone by a model bundled with the app. Separated audio and analysis results stay in the device cache and are never sent to a server. You can delete them in Settings (저장 공간), and iOS may remove them when space runs low.
• Recordings (echo practice and the record button) are m4a files on the device. Record-button takes stay in the library '녹음' folder; echo-practice takes are played back once and then overwritten.
• Section-marker files (.madi) are created only when you tap Share, and handed to the iOS share sheet (boundaries, names and beat only, no audio).
• NAS (SMB) addresses and user names are stored on the device; passwords are stored only in the device Keychain (this device only). The app connects only to the server you enter or find on your Wi-Fi, never through our servers.
• PDF signature: your last signature drawing is kept inside the app for reuse (it may be included in device backups); remove it with 지난 서명 지우기.
• Pro purchases are processed by Apple and checked on the device through the App Store. We never receive your payment method or Apple ID.
• Library Backup (optional, off by default): when you turn on Library Backup (보관함 백업) in Settings, copies of your library files and their records (playback positions, section markers, beat grids, practice records, PDF pages and bookmarks), starred sentences, folder names and the NAS server list (without passwords) are kept in a Madi-only container in your own iCloud Drive (not shown in the Files app). The copies move only through Apple's iCloud, never through our servers, and we cannot see them. After reinstalling or on a new device, Restore (되살리기) in the library brings them back. Backup uses your iCloud storage; delete it with Delete Backup in iCloud in the app, or in iPhone Settings > [your name] > iCloud > Manage Storage > Madi. Your PDF signature and NAS passwords are not backed up. Files you delete from the library stay in the backup for 30 days, where Restore can bring them back, and are then removed from the backup too.
• Import from Naran (operator only): copies videos from the drawer of Naran, another Vivory Lab service, into this iPhone's Madi library. It opens only when the operator's own administrator account taps Send to Madi in Naran, and is not available to users. Madi then sends naran.vivory.app a one-time key and a hash of a random identifier created on this device, and the server deletes that record after 10 minutes. Files move only from the server to this iPhone; Madi uploads nothing.

3. iPhone and iPad app: permissions

• Local network: only to connect to a NAS or a shared folder on your computer, and while the Wi-Fi transfer screen is open so a computer on the same Wi-Fi can send and receive files. Its address contains a random key shown on screen, and it stops when the screen closes.
• Camera: only for the camera mirror (shows you on screen while you practice dance), for the library's Camera (records a lesson or performance straight into your library) and for scanning paper sheet music or documents. The mirror view is never saved or sent. Recorded videos are saved only in your library on the device (and in your own iCloud Drive if Library Backup is on), not in the Photos app; scans are saved only as PDFs in your library.
• Microphone: only to record your voice to compare with the original, to capture sound in videos you record with the library's Camera, and for the tuner. Recordings stay on the device (and in your own iCloud Drive if Library Backup is on); the tuner measures pitch in memory and never stores audio.
• Speech recognition: only when you tap Transcribe (받아쓰기) on a file without subtitles. Recognition runs on the device only (on-device recognition is required); audio is never sent to Apple's servers or to Vivory Lab. The result is saved as an .srt file in your library.
• Photo picking (import): only the videos and photos you pick are copied into the library; this does not read your whole photo library.
• Photos (read and write): only in Phone cleanup (폰 용량 정리), to find similar photos, screenshots and large videos, and to delete the items you choose or save a smaller copy of a video. Similar photos are detected on the device only; photos and results are never sent anywhere. Deleted items stay in the Photos app's Recently Deleted album for 30 days.
• Add to Photos: to save an edited video to the Photos app.
• Media and Apple Music: only the songs you pick in Import > Music (가져오기 > 음악) are copied into the library, and only songs that are not copy-protected. Your music library list and listening history are never stored or sent. Apple Music subscription songs are protected and cannot be imported.

4. Android app

The Android app (Google Play) also has no account or sign-in, and no personal data reaches us. It differs from the iPhone app as follows.

• Files: the app requests no photo, media or storage permission. It opens only the files and folders you pick in the system file picker or photo picker, files other apps send to it ('Share → 마디' or 'Open with 마디'), and files you upload through the Computer (Wi-Fi) screen. Originals picked in the file picker stay where they are; only files received through the photo picker, sharing or Wi-Fi, files downloaded from a NAS, recordings, edits, and PDFs you made or edited are kept inside the app.
• Records on the device: the library list, playback positions, section markers, beat grids, practice records, settings, subtitles made by transcription, translated subtitles, starred sentences, recordings, edits, the PDF list with last pages read and bookmarks, your last PDF signature and the NAS server list stay in the app's private storage. Chord, key and pitch analysis results stay in the app cache, which Android may clear. All of it is excluded from Android backup and device transfer, so it is not copied to your Google account backup.
• Library Backup (optional, off by default): when you turn on Library Backup in Settings and choose a folder, copies of Madi's own files (received files, recordings, edits, files downloaded from a NAS, PDF documents, subtitles it made) and records (the library list, section markers, practice records, starred sentences, PDF pages and bookmarks, the NAS server list without passwords) are kept in that folder. The folder is one you pick in the system folder picker (on this phone, an SD card or a cloud app's folder); inside a cloud app, that app uploads it to your own account. Nothing passes through our servers and we cannot see it. After reinstalling, choose the same folder with Restore from backup to get it back. Delete it with Delete backup in the app or by deleting the folder in your files app. Originals picked in the file picker are not backed up; they stay where they are. Copies of files you delete from the library stay in the backup folder for 30 days, where you can restore them, and are then removed from the folder too.
• Import from Naran (operator only): the same feature as in the iPhone app. It opens only when the operator's own administrator account taps Send to Madi in Naran, and is not available to users. Madi sends naran.vivory.app a one-time key and a hash of a random identifier created on this device, and the server deletes that record after 10 minutes. Files move only from the server to this phone, and only while the app is open.
• NAS (SMB): the server name, address, share name, user name and domain are saved in the app's private storage, and the password is saved encrypted with a key in this phone's Android Keystore (the key never leaves the keystore). Deleting a server also deletes its saved password. Madi connects only to servers you enter or find on the same Wi-Fi, directly, never through our servers. Finding servers on the same Wi-Fi uses only local name announcements (mDNS) on your network.
• Computer (Wi-Fi) transfer: only while the '더 가져오기 > 컴퓨터 (Wi-Fi)' screen is open, the app opens a web address on your Wi-Fi. The address contains the random key shown on screen, and anyone on the same Wi-Fi who knows it can see the names and sizes of your library files and PDF list, download them, and upload files. The connection is not encrypted (HTTP), so use it only on a Wi-Fi you trust. It stops when you close the screen or leave the app.
• Microphone: used only for transcription (Pro), the record button and recording during echo practice (Pro), and the tuner (Pro), and asked the first time you use one. The microphone is opened only while the app is on screen. Recordings made with the record button are saved in the app's '녹음' (Recordings) folder. When you open Computer (Wi-Fi), they can be downloaded to a computer on the same Wi-Fi along with other library files. The access and stopping conditions described above for Wi-Fi transfer also apply to recordings. Echo recordings are deleted after they are played back. The tuner measures pitch on the spot without saving any sound. Transcription feeds only the sound of the file you chose to the phone's on-device speech recognition; if the phone has no language pack, its speech recognition service downloads one when you tap '받기' (Download). Subtitles are saved in the app as .srt files.
• Camera: used only for Camera Mirror (Pro, to see yourself on screen while practicing dance or an instrument) and the library's Camera (record and add straight to your library), and asked the first time you use them. Camera Mirror only shows the front camera picture on screen; nothing is recorded, photographed, saved or sent, and the camera is closed when you leave the player. The library's Camera opens your phone's camera app and lets it write the video only to a single file inside Madi. The video is saved in Madi's received files and never sent to the operator, and Madi makes no copy in your photo gallery (some camera apps may also keep one in their own gallery). The recording screen and how it works belong to the camera app you use.
• Chords, key and pitch view, editing and saving selected sections as files (Pro): all computed and made on the device. Edits are kept in the app's '편집' (Edits) folder.
• Paper scanning (Pro): the screen for scanning paper sheet music and documents is the document scanner provided by Google Play services on your phone, and it uses the camera permission of Google Play services (Madi does not request a camera permission for this feature). Google states that the entire scanner flow runs on the device. Madi receives only the pages you save, keeps them briefly in the app cache, makes a PDF on the phone, saves it in the app and then deletes those images. Google Play services may download the scanner the first time you use it.
• Vocal and instrument separation (Pro): songs are split into vocals, drums, bass and other instruments on this phone, and the audio is never sent to Google or to us. The separation models (about 73 MB) are delivered by Google Play together with the app when you install it; no server of ours is contacted. Separated audio is kept in the device's temporary space (cache, up to 2 GB) and can be deleted under '저장 공간' (Storage) in Settings; files you export or save stay in your library.
• Subtitle translation (Pro): translation runs on this phone with Google ML Kit, and subtitle text and translations are never sent to Google or to us. The first time you use a language, its translation data (about 30 MB per language) is downloaded once from Google's servers and kept in the app; you can delete it in the app with '받아 둔 번역 자료 지우기' (Delete downloaded translation data). Translated subtitles, starred sentences and practice files made from saved sentences are stored only on this phone.
• Google ML Kit: Google's ML Kit, used for paper scanning and subtitle translation, is started only when you use one of these two features (opening the app alone does not start it). It sends Google diagnostic and usage-analytics information: device information (manufacturer, model, OS version), the app's package name and version, a device identifier and per-installation identifiers that are not intended to identify a user or device, performance metrics, feature configuration (for translation, the chosen languages), input and output sizes and feature version, event types (such as initialization, model downloads and detection) and error codes. For remote configuration diagnostics, subtitle translation also uses a Firebase installation ID and the device's country code, language code and time zone. Google states that it encrypts this information in transit with HTTPS and does not transfer it to third parties. Scanned images, subtitle text and translations are not on Google's list. Google processes these records under Google's privacy policy and they never reach us.
• PDF: pages are drawn, searched and edited on the device only. Passwords of protected PDFs are kept in memory only while the file is open and never saved; unlocked temporary copies are deleted when you close the file. To let you reuse it, only your last signature is saved in the app, and you can delete it from the signature screen.
• Sending: sharing, saving elsewhere and printing PDFs, edits and section files (.madi) go only to the app, location or print service you choose, and the receiving app gets temporary read access to that one file.
• Count voice (Pro): the phone's text-to-speech engine makes only number words such as '하나 둘 셋', kept on the device.
• Pro purchases are processed by Google through Google Play. The app checks the purchase state only through Google Play on the phone and remembers on the device only whether Pro was bought. We never receive your payment method or Google account details. Promo codes are also redeemed in Google Play.
• Google Play Billing Library: Google's billing library inside the app may send Google diagnostic records such as the success or failure of billing calls and connection problems. Google processes them under Google's privacy policy; they never reach us.
• Permissions: internet (NAS connections, Wi-Fi transfer, the Google Play Billing Library, downloading translation data and ML Kit diagnostic records), network state, a media-playback foreground service and wake lock to keep playing with the screen off, the Google Play billing permission, the microphone (asked the first time you use transcription, recording, echo recording or the tuner) and the camera (asked the first time you turn on Camera Mirror or use the library's Camera). No location, contacts or photo/media permission is requested.
• Deleting the app removes its records, received and NAS-downloaded files, recordings, edits, PDFs it made, saved NAS passwords, downloaded translation data, separated audio and the separation models; original files you added stay where they are. Your Google Play purchase stays with your Google account, so Pro returns when you reinstall.

5. Retention and deletion

• Nothing is kept on our servers (for Import from Naran in the iPhone and Android apps, only the hash of the device identifier is kept, and it is deleted after 10 minutes). Deleting the app removes its files and records from the device.
• If Library Backup is on, the copies in your own iCloud Drive stay after you delete the app, so you can restore them after reinstalling. They are removed when you delete them with Delete Backup in iCloud in the app or in iCloud storage management in iPhone Settings.
• On Android, if Library Backup is on, the copies in the folder you chose stay after you delete the app, so you can restore them after reinstalling. They are removed when you delete them with Delete backup in the app or delete the folder in your files app.

6. Processors and transfers abroad

Because we receive no personal data, nothing is entrusted to processors or transferred abroad. Library Backup is a copy you turn on yourself and keep in your own iCloud (Apple) or, on Android, in a folder you choose; it is not processing we entrust to anyone. Pro purchases are handled directly by Apple Inc. (USA) through the App Store. On Android, Pro purchases are handled directly by Google through Google Play, and Google receives the diagnostic records of the billing library and of Google ML Kit (paper scanning and subtitle translation) directly.

7. Children

We receive no one's personal data, including children's.

8. Your rights and contact

You may request access, correction, deletion or suspension of processing at any time. Data protection officer: 조제이 (대표), Vivory Lab, contact@vivory.app, 070-8095-9243. General contact: contact@vivory.app. In Korea you may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118).

9. Changes

Changes are posted on this page with a new effective date. 2026-11-06: added Import from Naran (operator only) in the iPhone and Android apps and the 30-day retention of deleted files in Library Backup.