Your music.
Your privacy.

Music and your NAS

Gumbo connects to the NAS you choose to read music files, tags and cover images. The current beta uses Synology DSM and File Station. Your NAS receives the sign-in credentials, folder requests and media requests needed to access your library. Its administrator controls access, logging and retention.

Your personal NAS password is stored in your device’s Keychain. Server addresses, account names, chosen folders and library metadata are saved locally so the app can reconnect and display your library. Cover images come from your NAS folders or your music files; Gumbo does not search an external artwork service.

iCloud and family sharing

When iCloud is available, Gumbo uses Apple’s CloudKit service to sync profiles, selected profile photos, favourites, playlists, recent plays, recent searches and settings. Profile records also include roles, dates, an Apple-account association, PIN verification values when a PIN is set, and information needed to reconcile changes. Music files are not uploaded to iCloud by Gumbo.

This data is stored in the app’s private or family-shared iCloud zone. A family invitation link lets its holder join and receive shared profiles and connection details, including the NAS address, account name and music folder.

If you set up Family Access, the selected NAS account’s password is shared in an encrypted CloudKit field. Gumbo does not automatically share your personal NAS password. Use a separate read-only NAS account for family access. Profile PINs and biometric unlock protect the app interface; they do not change the NAS or iCloud sharing permissions.

Optional services and file changes

When you choose Find Suggestions in Advanced Settings, Gumbo sends album and artist names, together with your device’s country or region setting, to Apple’s music catalogue to find matching genres. This optional lookup does not send audio, NAS file paths or credentials. You can enter a genre yourself instead.

You review suggestions before saving. Saving writes tags to the original files on your NAS, so the change affects everyone using those files. Existing genre tags are preserved.

The library owner can use Problem Files to inspect songs and permanently delete selected damaged files after reviewing and confirming. This removes shared originals; removing an offline download only removes a device copy. Other downloaded copies and backups may remain.

On your devices

Gumbo stores its catalogue, covers, preferences and downloaded songs on your devices. Apple TV may purge its cache. Device and NAS backups may retain copies according to your settings and the provider’s policies.

Your paired Apple Watch can receive playlist metadata, playlist colours and the NAS connection details needed to download songs, including the account and password. The password is saved in the Watch Keychain.

Widgets and Apple playback features such as Now Playing, AirPlay and CarPlay receive the metadata or audio needed for the features you use. Face ID and Touch ID are handled by the operating system; Gumbo receives an authentication result, not your biometric templates.

Diagnostics and the beta

Gumbo has no third-party analytics SDK and does not automatically upload its local diagnostic log. That log may contain profile names, server details and errors. You can clear it in Diagnostics, or choose to copy and share it. Device backups may include it.

Apple operates TestFlight and shares beta usage and crash information with the developer, including sessions, installation information and the build you use. Joining through the public link does not by itself show the developer your name or email address. If you submit feedback, Apple and the developer can receive the comments, screenshots, contact information and diagnostics you include.

Feedback is used to investigate problems, improve the beta and respond to your requests. Avoid including passwords or private files in a report. Apple explains its handling and retention in TestFlight & Privacy.

This website

gumbo.one is a static website hosted by Vercel. It has no sign-up form, advertising pixels or analytics scripts, and its own code does not set cookies or use browser storage. Fonts and images are served with the site.

Serving and protecting the site involves processing ordinary web requests, such as your IP address, requested URL, request time and browser information. Hosting and security records are handled through Vercel; this is separate from your music library. See Vercel’s privacy notice for its own processing practices.

Following the beta link takes you to Apple’s TestFlight service. The website does not collect your NAS login or enrol you in the beta itself.

Your choices and retained copies

You can remove downloads, edit or delete eligible profiles, and clear diagnostics in Gumbo. Data can remain in device storage or iCloud until it is removed through the relevant app or Apple controls; iCloud changes and deletions need a connection to reach other devices. Manage iCloud storage and backups through your Apple settings.

You can manage family access in Gumbo and revoke an account’s access on the NAS. Removing a family member does not recall songs or other data already downloaded to their devices. Gumbo cannot remove independent NAS logs, backups or other people’s copies through these controls.

Information you choose to send for support is handled in the feedback or correspondence service used for that request. You can contact the developer to ask about access, correction or deletion of information they hold. Apple and your NAS administrator separately control records held by their services.

Contact and updates

During the beta on iPhone, iPad or Mac, open TestFlight, select Gumbo Music, then choose Send Beta Feedback to contact the developer privately. On Apple TV, or to contact the developer by email, look under Information → App Details in TestFlight. Please mention “Privacy request” when asking about personal information.

This policy will be updated when the app or website’s data handling changes. The date at the top identifies the current version. Apple’s services also have their own privacy policy.