Privacy policy
Last updated: 22 October 2026
MAestro ("the app") is published by E-Path Digital Ltd (company no. 17293554, Suite 2.2 My Buro, 20 Market Street, Altrincham, WA14 1PF, United Kingdom). It is a remote control for a Music Assistant server that you run and choose. This policy covers the MAestro Android phone app and its Wear OS companion.
What the app handles
| Data | Why | Where it goes |
|---|---|---|
| Music Assistant server address | So the app can connect to your server | Stored on your device. Also sent to your paired watch, with the watch token, over Google's encrypted Wear OS Data Layer, so the watch can connect too. |
| Music Assistant username and password | Used once at sign-in, to create an access token | Sent only to your own server, and never stored |
| Access token | To stay signed in | Stored on your device, encrypted with an Android Keystore key. A copy for your watch is sent to your paired watch over Google's encrypted Wear OS Data Layer. |
| Playback information (speakers, tracks, artwork, queue) | To show and control what's playing | Loaded from your own server and kept in memory while the app is in use |
| Your commands and library searches (play, pause, volume, search terms) | To control your speakers and find music | Sent only to your own server |
| Audio, when you use your phone as a speaker ("This phone") | To play music on your phone, in step with your other speakers | Streamed from your own server to your phone while it plays, and not stored |
| Your library in Android Auto | To browse and play music on your car's screen | Shown on your car's display through Android Auto; nothing is sent anywhere else |
| Last selected speaker | To reopen the speaker you used last | Stored on your device only |
What the app does not do
- It does not collect analytics, crash reports, advertising identifiers or location.
- It does not send any data to the developer (E-Path Digital) or to any third party. The only exception is delivery of the server address and watch token between your own phone and watch through Google Play services' Wear OS Data Layer.
- It does not show ads.
Network access
The app connects to the Music Assistant server address you enter or select. For servers outside
your local network it requires https://. On your local network it also allows plain http://,
because many home servers use it; that traffic, including the access token, is not encrypted,
so use https:// if you do not trust your local network. Images such as album artwork are loaded
from your server, or from the addresses your server provides, which may be other websites (for
example, a public cover-art service); the token is only ever sent to your own server.
Data retention and deletion
All data stays on your devices until you choose Sign out or uninstall the app. You can also revoke the app's access at any time by deleting its tokens ("MAestro (…)" and "MAestro Watch") in your Music Assistant web UI under Settings → Profile.
Children
The app is not directed at children and does not knowingly collect data from anyone.
Contact
Questions about this policy or your data: contact@e-path.co.uk.