MP3 Converter Privacy Policy

This policy covers MP3 Converter for iPhone and iPad, published by Turbo Ventura of Dubai, United Arab Emirates. It is the policy referenced by the app’s App Store listing.

The company and this website are covered by our general privacy policy; where the two overlap, this page is the more specific and it governs the app.

For anything here, write to [email protected].

MP3 Converter opens, converts, edits and plays files that are already on your device, and all of that work happens on the device itself. We run no service you log in to and no server that receives your media. The following never reaches us, and there is no mechanism in the app by which it could:

• Your files — everything you import, convert, record or export.
• Your library: playlists, favourites, recents, playback positions, waveforms, artwork and the tags you edit.
• File names, folder paths and the metadata inside any of it.
• Anything you type in the app, including the Wi-Fi Transfer passcode.

The library index is a database inside the app’s own container, encrypted with a key held in the device Keychain, and it is deliberately not exposed to other apps through the Files app. Deleting the app removes the container and everything in it.

To understand which parts of the app are used and where people get stuck, MP3 Converter sends anonymous usage events through Google Analytics for Firebase, and crash diagnostics through Firebase Crashlytics. Google acts as our processor for both.

What is sent

• Screen views — which screens are opened, and in what order.
• Feature events — that a conversion started and whether it finished, which output format was chosen, that a Studio tool was used, that an import happened, and a coarse reason when something failed.
• Purchase events — which plan was bought or restored, and whether it succeeded.
• Device model, iOS version, app version, language and country, plus a pseudonymous app-instance identifier generated by Firebase on top of Apple’s vendor identifier (IDFV).
• For a crash: the stack trace, the app state at the moment it happened, and the same device fields.

What is never sent

No event carries content of any kind: no file names, no folder paths, no tags, no URLs, and nothing you have typed. We never call Firebase’s user-identifier API, so events cannot be tied to a person or to an account — because there is no account.

Google retains this event data for a bounded period (currently 14 months) and processes it under its own terms. It may derive an approximate location from the IP address of the request; we ask for country-level reporting only and never receive a precise location.

The free version shows advertising supplied by Google AdMob, plus the mediation partners AdMob passes a request to when it does not fill an ad itself: AppLovin, Pangle, Liftoff Monetize, DT Exchange and InMobi. Each of these is an independent controller of the data it receives and has its own privacy policy:

• Google (AdMob)
• AppLovin
• Pangle
• Liftoff Monetize
• DT Exchange (Digital Turbine)
• InMobi

This is the set of partners currently enabled in mediation. If one is added or removed, this section changes with it — that is what section 12 means by a new processor. Premium removes advertising entirely.

What advertising means here

• Nothing plays over your media. No ad interrupts playback or a conversion.
• Rewarded clips are opt-in — a video plays only after you tap to start it, to go past a free allowance.
• Ads appear in place, in the space reserved for them on the screen.

Data the ad partners may receive

To request, show and measure an ad, the ad SDKs may process your device’s advertising identifier (IDFA, only if you allow it), the IDFV, IP address, device and operating-system information, a coarse location derived from that IP address, and your interaction with the ad. This may be used for ad selection, frequency capping, measurement and fraud prevention.

Your choices

• App Tracking Transparency. iOS asks your permission before the advertising identifier may be used to track you across apps and websites. Decline and ads still appear, but non-personalised. You can change the answer at any time in Settings › Privacy & Security › Tracking.
• Consent in the EEA, the UK and Switzerland. Where it is required, Google’s consent form (UMP) is shown before personalised advertising is enabled and your choice is passed to the partners above. It can be reopened from the app’s settings.
• Premium removes advertising on every device signed in to the Apple Account that bought it.

Premium is sold through Apple’s In-App Purchase system using StoreKit. Apple takes the payment and holds the payment details; we never see your card, your billing address or your Apple Account credentials.

What the app keeps on the device is the entitlement itself — which plan is active and when it renews — checked against Apple’s service. We keep no record of who bought what, which is why a lost purchase is recovered with Restore purchases rather than by asking us. Apple provides aggregate sales reports that are not linked to individuals.

Refunds are handled by Apple at reportaproblem.apple.com.

iOS asks before the app may reach anything sensitive. Each request happens only when you use the feature that needs it, and declining one disables that feature and nothing else.

• Photos — only when you import a video or audio file from your library, or export one back to it. The app reads the item you picked and nothing else.
• Microphone — only while you are recording in Studio. Recordings are written straight into the app’s own storage.
• Notifications — to tell you a conversion finished while you are in another app. They are generated on the device; there is no push server.
• Local network — so Wi-Fi Transfer can be reached from a browser on your own network. That server runs only while the app is open, is gated by a passcode, and the transfer happens between your two devices without touching us.
• Tracking — see section 4. Declining does not reduce what the app can do.

MP3 Converter never asks for your location, contacts, calendar or camera.

• Files and library data — on your device until you delete them or remove the app.
• Analytics and crash events — retained by Google for a bounded period, as described in section 3.
• Advertising data — retained by each partner under its own policy.

Because analytics events are not linked to an identity, we cannot look up “your” events to delete them one by one. What you can do is reset the advertising identifier in iOS settings; deleting the app stops any further event being sent.

MP3 Converter is a general-purpose tool and is not directed at children under 13, or the equivalent minimum age where you live. We do not knowingly collect personal data from them and hold no account data by which a child could be identified.

Depending on where you live you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to withdraw a consent you gave, and to complain to your supervisory authority — under the GDPR (EEA and UK), the KVKK (Türkiye), the CCPA/CPRA (California) and the UAE Personal Data Protection Law, among others.

We do not sell personal data and we build no profiles of individuals. To exercise a right, write to [email protected]. Because there is no account, we often cannot match a request to data we can identify as yours — that is a consequence of collecting so little, not a refusal.

Google and the advertising partners named in section 4 operate globally and may process data outside your country, including in the United States, under the transfer mechanisms set out in their own policies, such as the EU Standard Contractual Clauses.

The strongest measure here is structural: data we never receive cannot be leaked by us. Beyond that, the library database is encrypted with a key held in the Keychain, network requests use HTTPS, and the Wi-Fi Transfer server is passcode-gated, foreground-only, and grants destructive operations only when you enable them explicitly.

When this policy changes materially — a new processor, a new category of data — the date at the top changes with it, the App Store privacy labels for MP3 Converter are updated to match, and where the change affects what is collected we ask for your consent again inside the app.

Privacy questions and data requests: [email protected]
Help with the app: [email protected]
Legal notices: [email protected]

Turbo Ventura
Dubai, United Arab Emirates