Privacy and Security
Sona runs on your computer and talks to Apple, and to the services you connect. It has no server of its own.
What Sona stores
Section titled “What Sona stores”| What | Where |
|---|---|
| Settings, your themes | The config folder |
| Library copy, history and caches | The data and cache folders |
| Logs, the saved queue | The state folder |
| Apple Music sign-in, Last.fm and ListenBrainz sign-ins | Your system keyring |
Sona makes every folder readable by you only. Troubleshooting lists where they are. Sona never stores your Apple Account password: it uses it for one exchange with Apple.
Your sign-in
Section titled “Your sign-in”Sona keeps your Apple Music token in the system keyring: the Secret Service on Linux (GNOME Keyring or KWallet), the Keychain on macOS, the Credential Manager on Windows. If the keyring is not working, Sona stores the token in a file only you can read and warns you that it is unencrypted. Sona moves it into the keyring when one is available. Signing out deletes the token.
Private listening
Section titled “Private listening”Private listening keeps plays out of your Apple history, scrobbles and Discord.
Widevine
Section titled “Widevine”Apple Music’s songs are protected with Widevine, Google’s software. Sona downloads it from Google on first start, checks its signature, and runs it in a separate, sandboxed helper process that has no network access and cannot write to your files. Sona does not bundle, modify or extract anything from it.
Report a vulnerability
Section titled “Report a vulnerability”Report it privately: Report a vulnerability. Do not open a public issue. The security policy says what to include, and docs/security-review.md holds the threat model.