Updated: 2026-10-10 · 2026-10-10.2
1. Operator and scope
BaiboMusic is operated by Guohao Fang. This notice covers local playback, file imports and official policy pages. Platform-specific operations are identified in the relevant sections; download availability is shown on the official website. No account, advertising or behavioral analytics service is used.
2. Data processed on your device
The app reads music files you authorize, filenames, audio tags, duration and size. It stores your library, playlists, favorites, play counts, playback position, chorus segments and settings locally. A play is counted only after more than 15 seconds of accumulated active playback.
Chorus candidate analysis and audio effects run locally. Visuals use audio energy and beat information from the app’s own playback session, without capturing your microphone. Lyrics are read only from associated files in authorized locations; there is no online lyrics search. Audio, lyrics, your library, playlists, favorites and listening statistics are not uploaded to our servers.
After importing music or opening the app, local background work schedules chorus-candidate analysis for unmarked tracks and stores pending jobs on your device. Playback has priority; some decoding waits until playback is paused. Candidates can be inaccurate. Tracks that cannot or should not be analyzed remain available for full playback, without uploading audio.
Cassette and Vinyl gestures locally decode up to about 64 seconds around the current song position for continuous forward or reverse variable-speed audition. The sample window is held temporarily in memory, without creating sample audio files, and cleared on track change or service exit. This does not record the microphone, upload samples or modify the original music. Normal playback continues while the window prepares; an ellipsis indicates preparation.
Bundled audio ships in the app and is copied into private storage by a low-priority worker without using the network or microphone. White noise is generated procedurally; nature mixes licensed CC0 1.0 rain, bird and cricket recordings and is not a continuous recording of one location. Authors and source links are shown offline in Sound sources in Settings. Removing an entry or its private copy leaves the packaged asset intact; Add can restore it.
3. Permissions and file operations
Media access discovers local music. Folder access through the system file picker is limited to folders you select and can be revoked in system settings. Notifications and a foreground service support background playback, headset controls and lock-screen controls. Android’s recording permission is used only for visualization data from this app’s audio session, never to record or monitor the microphone. Playback remains available without that permission; some visual feedback may be limited.
Deleting an original file requires your explicit confirmation and any deletion authorization required by Android. Older Android versions may require storage write permission. Removing a song from the library deletes its app record and playlist memberships. Removing it from a playlist deletes only that membership. Neither action deletes the original file.
4. Network access
When you open the privacy policy or terms, the app makes an HTTPS GET request to https://baiboki.com/legal/baibo-music.json. The website server and CDN receive the IP address, User-Agent and request time needed for that connection and may process them in operational, security and troubleshooting logs. The request contains no audio, library, playlists, favorites or play counts.
Playback, scanning, effects and visuals work without a network connection. The app includes an offline document and caches website documents after validating the app ID, format and version. Older revisions cannot replace newer ones. Fetching a revised policy does not consent to new data uses; changes requiring consent must be separately explained and agreed to.
5. Backups, retention and deletion
You may export listening records and playlists, including file URIs, names, playlists, favorites, listening statistics and chorus markers. Backups contain no music files or lyrics text and are not uploaded automatically. Your chosen storage location or sharing app may have its own privacy practices; you control the backup.
App data stays in device app storage until you remove records, clear app data or uninstall. Clearing or uninstalling does not delete original music or backups you exported. Delete those backups at their saved location. Rescanning a removed song adds a new library record.
6. Your choices and contact
You may manage the library and playlists, revoke media or folder permissions, revoke the audio-analysis permission, clear app data, and export or delete your backups. Contact privacy@baiboki.com for privacy questions or support@baiboki.com for help.
Policy updates change the date and version and are provided in four languages from the same official source. Material changes in data processing will be explained; refreshing a document alone will not enable them.
7. Local narration and additional tools
Audiobooks, ambient audio and TXT text are imported only from local files you select. TXT is copied into private app storage and split into sections. Narration uses an installed system voice for the text language that is marked as installed and not requiring a network; the app does not download voices or upload text. Synthesized audio for the current and next sections is cached locally and cleared when other sections are selected or the service exits. Text sections remain until app data is cleared or the app is uninstalled. Progress and bookmarks stay on the device.
Optional volume leveling analyzes music loudness and peaks locally while the player is idle. Duplicate comparison reads local files and stores SHA-256 checksums. Music speed changes and separate per-song fades are processed locally in bounded memory, without creating music sample files or uploading audio. Optional headphone profiles store the system output name and, when exposed by the system, its Bluetooth output address locally to distinguish sound settings; these identifiers are not tracked or uploaded.
JSON backups also contain content types, display names, audiobook progress, bookmarks and smart-playlist rules, and may include filenames, sizes, durations or checksums for relocated-file matching. They exclude TXT contents and synthesized speech. M3U/M3U8 playlists store local paths and track names; imports match only already indexed local files and do not play network audio addresses. Home widgets read local playback state and the selected playlist.
8. Cover art, lyrics and tags
The app reads embedded artwork or authorized images beside a track on a background thread, with a bounded memory cache. It does not download cover art. You may select an LRC/TXT lyrics file up to 1 MB; validated text is copied to private app storage without changing the original. Lyrics associations and timing offsets are saved per track; private lyrics copies are deleted when app data is cleared or the app is uninstalled. Multiple artist, album, genre, year and custom tags change library records only, never audio files. Older-library tags are read while playback is paused; file modification time is not treated as release date. JSON backups include categories, tags, lyrics URIs and timing offsets, without images, lyrics text or permission grants; lyrics may need to be selected again on another device. Queue positions and the current queue snapshot remain on-device and are not uploaded.
9. File imports you choose
File selection and Open In or sharing from another app read only files you explicitly provide. Audio, lyrics and covers are copied into private app storage, preserving originals and avoiding dependence on temporary sharing grants. SHA-256 is computed locally for duplicate detection; files, hashes and names are not sent to our servers. Existing favorites, play counts and playlist records are not overwritten by identical files. Ambiguous same-name lyrics or covers are not automatically linked.
Wi-Fi receiving starts only when you open the transfer screen and binds only to the current local Wi-Fi address. A browser on your chosen computer or phone sends files over local HTTP. Scanning the QR code or opening the copied connection link verifies a random invitation automatically; manual connection codes remain available. QR codes and links are valid only for this receiving session and let devices on the same network send files, so share only with trusted devices. The invitation is a URL fragment, not part of the page GET request, and the browser removes it after connecting. Clipboard writes happen only when you tap Copy; the app does not read the clipboard. Verification grants an in-memory session token associated with the sender’s LAN IP. File names, folder identifiers, sizes, contents and sender IPs are used only for this local receipt, with no cloud account or upload to our servers. Local HTTP is unencrypted; use trusted Wi-Fi and devices. No network endpoint reads or downloads the phone’s library.
Closing the transfer screen, moving the app to the background or 15 minutes without transfer activity ends reception and clears session tokens. Incomplete temporary files are deleted; fully imported private copies remain. Retrying after cancellation resends that file. Originals remain unchanged; private app copies are removed by clearing app data or uninstalling.
Android reads network connection state only to obtain its local Wi-Fi address, without reading Wi-Fi names or location. After a USB copy into Music or Download, you select files or authorize a folder. iOS uses the system Files picker and security-scoped access. Finder or Apple Devices file sharing reads only files you place in the app’s Documents. AirDrop files can be saved to Files and selected here. iOS Local Network permission is used only for Wi-Fi receiving you start; denying it does not prevent picker imports. Your file provider may download a selected cloud file under its own rules; BaiboMusic does not browse cloud accounts or search online for music.
The receiving screen and file list show names, saved locations and lyric association status. Wireless receiving saves a visible copy by default to Android Download/BaiboMusic or iOS app Documents/Received. You can choose a system-authorized folder, retain its grant or bookmark, or keep files only in the app. The app also retains a stable playback copy, so visible copies use extra space. Changing the default does not move history. Android visible copies survive clearing or uninstalling the app; iOS app Documents are removed on uninstall, while this app does not actively delete copies saved outside its container. Unwritable folders fail reception rather than silently changing location. Previously received lyrics remain and are saved to the receiving location in the background when possible. Unique matching filenames can associate lyrics with existing tracks; ambiguous names require manual choice, without automatically replacing manually selected lyrics. The sender receives only this file’s saved location and association result, not the whole library. Your folder provider may synchronize chosen files under its own rules; this app does not upload them to our servers.
Received files can be filtered by music, lyrics, covers and unlinked lyrics. Search terms, receiving indexes and lyric associations are processed locally without upload to our servers. Large-file search and matching run in the background and only visible rows are created. The Android full and minimal player can show an independent multiline lyrics page or retain visual effects with a lyric preview; preferences are saved separately on device. Local timestamps and your lyric offset determine highlighting; tapping a timed line changes playback position, and following resumes after manual scrolling. Untimed text is displayed without inventing timing, and no lyrics appear when unavailable. The iOS import module supplies a local lyrics view for host integration, which does not constitute a complete iOS player.
10. Lyrics authoring and optional AI
Manual lyrics authoring is local. Sentence and word marks, text and timing edits are saved in private drafts after edits and on backgrounding, for later continuation. Save creates an associated LRC copy without changing source lyrics or audio; export uses the system picker. Clearing data or uninstalling deletes internal drafts and copies; you manage external exports. Listening-record JSON backups exclude drafts and API keys. iOS provides editor, draft, export and recognition components requiring player-host integration, not a complete iOS player.
AI runs only after you select a song, review the API destination and fees, and explicitly send. Audio is locally converted to mono WAV in chunks of about ten minutes or less and sent directly over HTTPS to your configured transcription provider. The provider receives audio, model, timestamp options, API authentication, IP and connection information. Processing, retention, region and fees follow that provider and your account and may involve international transfers. AI is off by default, does not upload the entire library or relay audio through our music servers, and does not find or download music. Local playback, scanning, effects and manual lyrics need no AI or network.
Android encrypts keys with device Keystore; iOS interfaces use device-only Keychain. Keys are excluded from backups, drafts and source exports. Deleting API settings removes the key; cancellation retains it. Requests do not follow redirects or automatically retry potentially billed calls. Temporary WAVs are removed on completion or cancellation; interrupted leftovers are cleared next launch. Completed parts are saved incrementally as drafts without replacing saved lyrics. Singing, accompaniment and reverberation can cause text or timing errors; review results.
Your provider bills your API account; no Baibo or Baiboki credits are spent. Cancellation may still incur processed-audio charges. This app currently has no credit-based audio recognition, credit purchases or account wallet and does not reuse other app products. You must have authorization for audio, lyrics and their use. Keep external backups of important drafts. AI results are editable drafts with no accuracy guarantee; cancellation may not recall uploaded audio or prevent provider charges.