Privacy policy
Shoal makes free, open-source Android apps. We don't run accounts, we don't sell anything, there are no ads and no tracking. This page explains, in plain words, what the apps keep, what they send and to whom.
Who we are
Shoal is an independent open-source project maintained by its contributors on GitHub (github.com/ShoalApps). For anything about your data, open an issue there or contact the maintainer through GitHub. For UK and EU data-protection law, the project maintainer is the data controller for the optional error reports described below; nothing else reaches us.
What stays on your phone
Your settings, watch and listening history, subscriptions, queues and sign-ins are stored only on your device, inside each app. Shoal (the manager) can share your sign-ins with the other Shoal apps on the same phone; that hand-off is protected by Android so only apps signed with Shoal's key can read it. None of this is sent to us.
Services the apps talk to
To work, each app connects directly to the service it shows, the same way a web browser would. Those services see your IP address and what you ask for, under their own privacy policies.
| App | Connects to |
|---|---|
| Swordfish | YouTube / Google. Only while those features are on: SponsorBlock, DeArrow and Return YouTube Dislike (they receive the ID of the video you're watching). |
| Pufferfish | YouTube Music / Google. For lyrics: BetterLyrics, LRCLIB and NetEase Cloud Music (they receive the song's title, artist and length). |
| Clownfish | YouTube, TikTok and Instagram, each in its own tab. |
| Blobfish | Bluesky and your Bluesky data server; X (x.com) if you use the X tab. |
| Anglerfish | Reddit (reddit.com). |
| Shoal | GitHub, to check for and download Shoal app updates; the sign-in pages of the services you choose to sign in to. |
Apps without Shoal installed check GitHub for updates themselves (you can turn this off in Settings). Opening a link like "Support Shoal" opens that website in your browser.
Optional error reports
If you agree when asked (or turn on Send error reports in Settings), an app sends a report when it crashes or hits an error, so we can fix it. Reports go to Sentry (Functional Software, Inc., USA), which stores them for us.
- A report contains: the error and where in the code it happened, the app and its version, the Android version, the phone's make and model, and a short trail of the app's own recent steps.
- It never contains: your name, accounts, sign-ins, messages, posts, what you watch, search for or listen to, screenshots, or anything you type. The apps tell Sentry not to keep your IP address or any user details.
- Legal basis: your consent. It's off unless you say yes, and you can turn it off at any time in Settings; reports stop straight away.
- How long: reports are kept for up to 90 days, then deleted. Sentry may process data outside the UK/EU under its standard contractual safeguards.
Children
The apps aren't aimed at children under 13. They don't knowingly collect anything from anyone; the optional reports carry nothing personal.
Your rights
Under UK and EU law you can ask what we hold about you, and have it corrected or deleted. Because reports carry nothing that identifies you, we usually can't link one to you, but tell us roughly when and on what phone an error happened and we'll delete matching reports. You can also complain to your data-protection authority (in the UK, the ICO).
Changes
If this policy changes, we'll update this page and the date above. If a change affects error reports, the apps will ask again before sending any.