Sonement — Privacy Policy
Last updated: 24 September 2026
The short version
Sonement is local-first. Everyday speaker control stays on your local network. If you choose to link your Sonos account for remote households and announcements, a narrow Sonement cloud service stores the authorisation needed to perform those features and temporarily relays announcement audio. The App has no advertising, analytics, or cross-app tracking. This website uses analytics, as described below.
Who this policy covers
This policy applies to the Sonement app for iPhone, iPad, Mac, Apple Watch, and Apple TV, including its widgets (the "App"), and to this website, sonement.com. The App is developed by codeframe ("we", "us", "our"). Sonement is an independent app and is not affiliated with, endorsed by, or sponsored by Sonos, Inc., Apple Inc., or any music service.
Information we process
Sonement does not require a Sonement username or profile and does not use analytics, advertising identifiers, behavioural tracking, or third-party tracking SDKs. Optional remote access does require server-side processing. When you link a Sonos account, the service stores a revocable Sonement session record and encrypted Sonos access and refresh tokens. When you send a remote announcement, it processes the selected household and player identifiers and temporarily stores the recorded audio so the chosen speakers can retrieve it.
How the App works
Sonement discovers and controls locally available speakers directly over your Wi‑Fi network. Play, pause, volume, grouping, queue and ordinary local playback commands do not pass through a Sonement server. The optional remote-household directory and remote-announcement features use the Sonement cloud broker and the Sonos Control API. Linking those features is optional and can be revoked from Settings.
Remote announcements
A remote announcement is limited by the App to a short voice note and by the broker to one MiB. The recording is stored in private object storage behind an unguessable URL, marked private and no-store, and expires after five minutes. Expired recordings are deleted by scheduled cleanup. The broker records a short per-session send timestamp to enforce abuse-prevention limits; it does not create a listening history or retain announcement audio after expiry.
Information stored on your device
Music-service credentials used for in-app browsing are stored in the Apple Keychain on your device. App preferences, favourites and per-room playback history ("Rewind") are stored locally. The separate Sonement cloud session credential is also stored in the Keychain, while the corresponding Sonos tokens are held encrypted by the broker rather than embedded in the App. You can remove local data by signing out or deleting the App, and revoke the broker session with Unlink Sonos Account in Settings.
Third-party music services
Sonement lets you browse, search, and play music from the services set up on your Sonos system or connected in the App — for example Apple Music, Spotify, TIDAL, and TuneIn. When you connect one of these services, you authenticate directly with that service, and playback streams through your own account with it. Your use of each service is governed by that service's own privacy policy and terms, not by this policy. We do not receive, store, or have access to your listening data from these services. Apple Music access is provided through Apple's MusicKit and is subject to Apple's Privacy Policy. We interact with these services only to the extent necessary to authenticate and to control playback on your behalf, at your direction.
This website
This website uses Google Analytics and Vercel Web Analytics to understand how visitors use it, such as which pages are viewed. Google Analytics sets cookies and receives technical information such as your browser, device type, approximate location and the pages you visit; Google processes it under its own privacy policy. Google Analytics only runs if you accept analytics cookies in the banner shown on your first visit; if you decline, it isn't loaded and no information is sent to Google. You can change your choice at any time with Cookie settings at the bottom of each page. Vercel Web Analytics does not use cookies. Analytics applies only to this website, never to the App.
Children's privacy
Sonement is not directed to children under 13, and we do not knowingly collect personal information from children — or, as described above, from anyone. If you believe a child has provided personal information to a music service through the App, please contact that service directly.
Your privacy rights
We do not sell personal information or use it for advertising or tracking. You can revoke remote access in the App, which deletes the associated broker session. For questions or requests concerning information processed by Sonement, contact us below. Rights provided by applicable privacy law may include access, correction or deletion. Information held independently by Sonos, Apple or another music service remains subject to that service's policy.
Data security
Device credentials are protected by Keychain and app sandboxing. The broker stores Sonos tokens encrypted, authenticates each device with a revocable bearer credential, restricts callback URLs and announcement targets, and applies size, target-count and send-rate limits. No internet service can be guaranteed completely secure, so remote access remains optional and can be revoked at any time.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the "Last updated" date above and post the new version at this address. Your continued use of the App after a change takes effect means you accept the updated policy.
Contact
If you have any questions about this policy, contact us at help@codeframe.com.au.