TorricPrivacy policy
In short
Torric has no email, phone number or password, and no ads, analytics or advertising tracking. Your identity is a key made on your phone. Music moves between listeners’ phones, peer to peer, so other listeners see your IP address while you share or fetch a track.
What stays on your phone
Your device key, in the phone’s secure keystore. Your library, the music cached for playing and sharing, your settings, and a copy of the records you’ve signed. Your private messages, group chats and Nearby talks, and the keys that open them. The recovery phrase is shown to you once and never stored or sent.
What our servers keep
If you make an identity: its public key, your handle and bio, each device’s public key and name (the phone’s make and model) with when it was added and last seen, and the totals of music each device shared and fetched, which set your sharing ratio.
What you do in the app: tracks you upload (their details and link, not the audio), posts and replies, likes, reposts, follows, blocks and mutes, mentions, groups you’re in, playlists (private ones too, so your devices stay in step), and reports you send. Many of these are kept as records signed by your key.
Listening without an identity sends nothing about you beyond the requests themselves.
What’s public
Your handle, bio, posts, follows, likes and reposts, public playlists and uploads, under your handle, and how much music you’ve shared and fetched (your sharing ratio). Each of your devices also publishes the public keys others need to send it private messages. Public signed records can be copied by anyone running a Torric mirror, and checked by anyone, since they’re signed. Blocks, mutes and private playlists aren’t shown to others.
Private messages and group chats
They’re end-to-end encrypted: only the people in a conversation can read it. Each message waits on our servers, encrypted, for up to 72 hours until the recipient’s phone fetches it. It’s filed under a tag that changes daily and that only the people in the conversation can work out, and it’s posted without saying who sent it, so we can’t read it or tell who it’s from or for. To stop the mailbox being flooded, we count how many messages each IP address posts per hour, keep that count under a one-way hash of the address, and delete it within three hours.
Who’s in a group is sent only to its members, inside encrypted messages. With Nearby on, the same encrypted messages are also handed to phones around you, which pass them on without being able to open them.
Nearby
Nearby is off until you turn it on. It uses Bluetooth, and Wi-Fi Direct to move tracks, to reach phones around you with no internet. Phones in range see a nickname you choose and an ID that changes every 15 minutes, never your handle. Anything in the nearby public channel can be read by anyone in range, and is passed on by the phones around for up to six hours. Nothing in Nearby goes to our servers.
In a private talk your handle is shown only when you choose “Show who I am”, or automatically to people you chose to remember. If you turn on carrying tracks for others, your phone fetches and stores tracks from the catalog that people nearby ask for, within a quarter of your storage, and shares them.
Peer to peer
When your phone shares or fetches a track, the phones it connects to, the trackers that introduce them (ours and public ones) and the BitTorrent DHT see your IP address and which tracks you’re sharing or fetching. That’s how peer-to-peer works, and it’s outside what we can hide. Our tracker holds this only in memory, to connect peers, and doesn’t store it.
Who runs it
Torric is made by Prastavna, in India, which is responsible for the data described here.
Our servers run on Cloudflare, which keeps short-lived request logs (including IP addresses) for a few days, so we can find faults.
Other services the app contacts, each of which sees your IP address: Expo’s update service, checked when the app starts, which also receives a random ID for this install; GitHub Pages and jsDelivr, which host the signed file telling the app where our servers are; public BitTorrent trackers and the DHT; and mirrors of the catalog, which other people may run.
We don’t sell your data, share it with anyone beyond the above, or use it for advertising.
Deleting your identity
Account → Delete identity erases it for good, from every device: your handle, profile, device names, posts, likes, follows, playlists, sharing totals and signed records. Your uploads leave the catalog and search, and their details are erased; only each one’s info hash is kept, so our tracker keeps refusing it. Tracks you added to a group’s playlists stay with the group. Mirrors are told to drop your records. The handle stays reserved for 30 days so nobody can pose as you, and your recovery phrase stops working: the identity’s public key and its devices’ public keys and dates are kept, marked deleted, only so they can’t be used again. Reports you sent and moderators’ decisions are kept. Music other people already saved on their phones is theirs, and stays there.
Without an identity, uninstalling the app removes everything it kept.
Children
Torric isn’t meant for children under 13.
Contact and changes
Questions about this policy, or about data we hold on you: contact@torric.app.
When this policy changes, the date below changes with it. Last updated 2026-10-14.