Shiver.fm Privacy Policy
Effective: October 25, 2026
View the Shiver.fm Terms of Use
This Privacy Policy explains how Resolutely Human LLC ("Resolutely Human," "we," "us," or "our") handles information when you use the Shiver.fm mobile application and related services (the "App"). Shiver.fm is a local creator tool for making short narrated Moments around passages of songs played through the official embedded YouTube player.
The short version
The current version has no user accounts, public profiles, publishing, social features, cloud synchronization, first-party analytics, or first-party advertising. Saved Moments, unfinished drafts, Moment settings, custom descriptions or metadata overrides, and voiceover recordings are stored locally on your device. The App uses online services for YouTube search and playback, as described below.
Information stored locally
- Saved Moments, drafts, settings, and descriptions. Saved Moments, unfinished drafts, Moment settings, custom descriptions, and metadata overrides are stored locally on your device. We do not receive this locally stored creative work through ordinary creation and playback.
- Voiceover recordings. If you grant microphone permission and record an introduction or closing reflection, the recording is stored locally on your device. We do not receive or listen to these recordings through ordinary creation and playback. Recording stops, and the App stops using the microphone, when you leave the recording screen.
- YouTube video IDs and metadata. The App stores the YouTube video ID for the selected song and retrieves YouTube metadata when needed. The App does not persist untouched YouTube-provided titles and channel names as permanent local metadata, although user-created overrides may be stored.
- No YouTube downloads. The App does not download or store YouTube music or videos.
- Device backups. Local information may be included in device backups managed by Apple or other backup services, depending on your device settings.
YouTube API Services
Shiver.fm uses YouTube API Services: the YouTube Data API for search and video details, and the official embedded YouTube player for playback. By using Shiver.fm, you agree to be bound by the YouTube Terms of Service. Google's handling of information is described in the Google Privacy Policy.
Shiver.fm does not ask you to sign in with a Google or YouTube account and does not access your Google or YouTube account data.
YouTube search, video details, and our supporting service
When you search for music, your search query is transmitted to Shiver.fm's search service and the YouTube Data API so results can be returned.
When needed, for example when you choose a video, preview a Moment, open My Moments, or replay a saved Moment, the App sends YouTube video IDs to Shiver.fm's search service, which asks the YouTube Data API for each video's current details: its title, channel, length, and whether it is available, can be embedded, is live or upcoming, or is made for kids. The App uses these details to show the video's current title and channel and to check that the video can be played. It keeps them in memory only and does not save them with your Moments.
- Our application logs. Our application logs do not record raw search text or YouTube video IDs. They record limited operational information, such as query length, the number of videos looked up, outcome, result count, and response time. Our application logs do not record request IP addresses. Our application operational logs are generally retained for approximately seven days.
- In-memory rate limiting. Our service temporarily uses IP addresses in memory for rate limiting, generally for approximately one minute.
- Railway platform logs. Our hosting provider, Railway, records IP addresses and user agents in HTTP platform request logs for all requests, including successful requests. These platform logs record request paths without query strings, so they do not include search text or video IDs, and are generally retained for approximately seven days.
Embedded YouTube player
Shiver.fm uses YouTube API Services and the official embedded YouTube player. The player communicates directly with Google/YouTube and may contact Google advertising domains when loaded, even before you interact with it.
YouTube may display advertisements, collect device and interaction information, and store or access cookies or similar identifiers that may persist across sessions. Google independently determines how it processes information collected through its services. Shiver.fm does not control Google's collection, advertising, or other processing practices. Google's handling of information is described in the Google Privacy Policy and YouTube Terms of Service.
Support, feedback, and TestFlight
Shiver.fm does not automatically collect or transmit its own diagnostics. You may voluntarily provide support emails, feedback, screenshots, recordings, descriptions, or other materials. We use those materials to respond, investigate issues, evaluate feedback, and improve Shiver.fm.
If you use Shiver.fm through Apple's TestFlight, Apple may collect TestFlight installation, crash, usage, device, and feedback information and share applicable information with the developer according to Apple's terms and your settings. Apple's handling of TestFlight information is described in Apple's TestFlight privacy information.
How we use information
We use the limited information described above to:
- provide YouTube search results and operate the App;
- protect the search service from abuse and excessive traffic;
- diagnose errors, maintain reliability, and improve Shiver.fm;
- respond to feedback, support requests, or legal obligations; and
- understand whether supporting services are functioning as expected.
We do not sell personal information, use our own data for targeted advertising, or use personal information to train artificial intelligence models. This does not limit or describe Google's independent advertising-related processing through the embedded YouTube player.
Third-party service providers
Shiver.fm relies on third parties to provide limited functions. These providers may process information under their own terms and privacy policies:
- Google/YouTube. Shiver.fm uses YouTube API Services. Searches and video-detail lookups are submitted to the YouTube Data API, and music and video playback occurs through YouTube's embedded player. Google independently determines how it processes information collected through its services. See the Google Privacy Policy and YouTube Terms of Service.
- Railway and infrastructure providers. We use hosting and network providers to run the search service. Railway's platform request logs are described above. Infrastructure providers may process technical information on our behalf to provide, secure, and maintain the service.
- Apple/TestFlight. Apple distributes beta builds through TestFlight and may collect and share installation, device, crash, usage, and tester-feedback information according to Apple's terms and settings.
- Support providers. If you contact us by email or another support channel, the relevant communications provider may process the information needed to deliver and store that message.
We require service providers acting on our behalf to protect information consistently with this policy and applicable law. Third-party services that determine their own purposes and methods of processing, including Google/YouTube and Apple, are governed by their own terms and privacy policies.
Storage, deletion, and retention
Saved Moments and voiceover recordings remain in the App's local storage until they are deleted, the App is deleted, or another device or software event removes them. Deleting a saved Moment deletes its associated locally stored voiceover recordings. Discarding an unfinished draft deletes its associated recordings. Deleting Moments or recordings in Shiver.fm does not affect anything stored by YouTube.
Orphaned voiceover recordings become eligible for automatic cleanup after approximately seven days and are cleaned up when My Moments is subsequently opened. When version 1.0 of the App first opens, it deletes Moments and recordings created with earlier pre-release versions.
Deleting the App removes its locally stored information, although older device backups may still contain copies. Local App information may be included in device backups managed by Apple or another backup service depending on your settings.
Our application operational logs are generally retained for approximately seven days. Railway platform request logs are generally retained for approximately seven days. Information you voluntarily send for support or feedback is retained while needed to respond, investigate issues, evaluate feedback, or meet legal obligations, and then deleted or anonymized when no longer reasonably necessary unless law requires longer retention. Apple-managed TestFlight information is subject to Apple's retention practices and settings.
You can stop microphone access at any time in iOS Settings. You can delete local Moments and drafts inside the App and remove remaining local App data by deleting the App. To request deletion of information you sent directly to us, contact us using the address below.
Security
We use reasonable administrative and technical safeguards appropriate to the current local-only product. No method of storage or transmission is completely secure, and you should not use Shiver.fm to record information you would be uncomfortable storing on your device or sending to the third-party services described in this policy.
Children
Shiver.fm is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, please contact us so we can take appropriate action.
Your privacy rights
Depending on where you live, you may have rights concerning personal information we hold about you, including rights to access, correct, delete, or receive a copy of certain information. Because the current version has no accounts and most creative data remains only on your device, we generally cannot identify or retrieve that local data. You may contact us to exercise applicable rights regarding information you sent directly to us. We will not discriminate against you for exercising a privacy right.
International use
Our services are operated from the United States. If you use the App from another country, information processed by the online services described above may be transferred to and processed in the United States or other countries where service providers operate.
Changes to this policy
We may update this Privacy Policy as Shiver.fm changes. We will post the revised policy at https://shiver.fm/privacy and change the effective date. If a change materially affects how we handle personal information, we will provide additional notice when appropriate.
Contact
Resolutely Human LLCprivacy@shiver.fm