Last updated: June 29, 2026
Uki makes a music app for people who want to own their music. This policy explains what we collect, why, who we share it with, and the choices you have. Uki is operated by Open Shore, LLC (“Uki,” “we,” “us”).
Uki is intended for a general audience but is not directed to children under 13. You must be at least 13 years old (or the minimum age of digital consent in your country, if higher) to create an account or use account-based features.
Your email address, and a securely hashed password if you choose password sign-in. We assign you an account identifier. Authentication is provided by Supabase.
Music you capture, import, or rip; album metadata and cover images; mixtapes; wishlists; and notes you add. Audio you upload or rip is stored in our cloud storage so it can sync and stream to your devices. If you use record identification, the photo you take of a cover is sent to our assistant service to identify the release.
Records of what you own and your order history (amounts, dates, artist payouts, status). Payments are processed on the web by Stripe; we never receive or store your full card number.
Play events and counts, radio listening sessions and subscriptions, and preferences, used to power features like recommendations and to sync your experience across devices. Not used for advertising.
When you use Spin, we send your prompt and relevant context (such as references to tracks in your library, and any image you provide) to our assistant relay, which uses Anthropic's Claude model to respond. You can opt into an on-device assistant that runs entirely on your device and sends nothing to us.
If the app hits an error we may send a crash/error report (message, stack trace, page, device/browser type) to our error-monitoring provider (Sentry). Reports are sampled and fingerprint-normalized to strip identifiers.
If you connect Dropbox or Google Drive to import music, we access only the files you choose (and, if you enable mirroring, write copies back to a Uki folder). Access tokens are encrypted on your device. You can disconnect at any time.
We share data only with providers that process it on our behalf:
Metadata lookups (Discogs, MusicBrainz, Cover Art Archive) and radio stream providers receive no personal data, only anonymous queries or stream URLs.
We keep your data while your account is active. When you delete your account, we delete your audio files and remove your account; associated records are deleted or de-identified. Some records may be retained where required for legal, tax, or fraud-prevention reasons.
Passwords are hashed; connected-service tokens are encrypted on your device; data in transit is encrypted (HTTPS). No system is perfectly secure, but we work to protect your information.
We use providers that may process data in other countries. Where required, we rely on appropriate safeguards for such transfers.
We'll update this policy as the app evolves and post the new date above. Material changes will be communicated in-app or by email.
Questions or requests: [email protected].