Ruban
Last updated: 22 October 2026
In short
Ruban only processes the data it needs to work, listed below. It is never sold or used for advertising.
- No ads, no tracking across apps, no sale of data.
- The publisher receives none of your data.
- No account is required.
Data controller
Younes Khelifi, Roubaix (France), publishes Ruban (iOS and CarPlay) and is responsible for this policy.
Contact: younes.khelifi@ik.me
Data processed
Library, artwork and downloads
- Purpose: showing your music, playing it and listening offline
- Legal basis: providing the service you ask for (GDPR, art. 6.1.b)
- Storage: on your device only
- Retention: until you delete the downloads, the server or the app
Address and credentials of your servers
- Purpose: connecting to the music server you added
- Legal basis: providing the service you ask for (GDPR, art. 6.1.b)
- Storage: on your device only
- Retention: until you remove the server in the app
Plays, favourites, ratings and playlists
- Purpose: keeping them on your server and in your other players; sending plays (scrobbling) can be turned off in the settings
- Legal basis: providing the service you ask for (GDPR, art. 6.1.b)
- Storage: on a server used by the app
- Retention: according to your server's settings
App preferences
- Purpose: bringing your settings to your other devices
- Legal basis: providing the service you ask for (GDPR, art. 6.1.b)
- Storage: in your iCloud account, encrypted by Apple; the publisher has no access
- Retention: as long as you use iCloud; credentials are never copied there
Permissions
The app asks for these permissions when it needs them. You can revoke them at any time in your device settings.
- Local network: reaching your music server on your home network
- Files: playing the music in the folders you choose; Ruban only has access to those folders
Third-party services
- Your music server (Navidrome, OpenSubsonic or Subsonic): receives requests for playback, artwork and lyrics, and your plays if scrobbling is on; you choose and host it, the publisher has no access to it
- Internet radio stations: the station you listen to receives the stream request and your IP address, as with any online listening
- Apple iCloud: syncs your preferences across your devices if you are signed in to iCloud · Privacy policy
Analytics and crashes
The app contains no analytics tool. If you chose to share analytics with app developers in your device settings, Apple may send the publisher anonymous crash reports, under its own policy.
Deleting your data
Deleting the app erases the data it stored on your device. Data synced with iCloud is managed in Settings > [your name] > iCloud.
Security
Your server credentials are kept in the device keychain. Outside your local network, Ruban only accepts HTTPS servers; an unencrypted (HTTP) connection is only allowed on your home network. Some internet radio stations stream over HTTP.
Children
The app does not knowingly collect data about children under 15. If you believe a child has sent us some, write to us and it will be deleted.
Your rights
Since the publisher holds no data about you, there is nothing to send you or erase. You can still write with any question.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Details
Ruban sends no data to its publisher: no account, no Ruban server, no analytics and no ads. The app only talks to the music server you added, to the radio stations you listen to and, for your preferences, to your iCloud.
Changes
This policy may change with the app. The update date is shown at the top of the page; for any significant change, the app will let you know.