Our mission
No cloud watching your library. Because there is no cloud at all.
Quartermaster is a pure client. Your stack, your keys, your data: they never leave the devices you own. Privacy here is not a setting you switch on. It is the architecture.
Most apps in this space need a server: to watch your library, to push you a notification, to sync your settings. That server is also where your data piles up, where it can be logged, leaked, sold, or switched off. We took a different path: no server at all. The trade-off is real, and we are honest about it. What you get back is the certainty that nobody is in the middle.
We run no servers.
No backend, no account system, nothing of ours in the middle. There's nowhere for your data to phone home to, because there's no home to phone. The app talks only to the services you run.
We collect nothing.
No analytics, no trackers, no crash reporter that phones home. Not in the app, not on this page. We couldn't sell your data if we wanted to, because we never receive it.
Your keys stay in the Secure Enclave.
Hardware-backed iOS storage. Your API keys are sent only to the matching service you configured, as part of talking to it, and never to us.
Even your notifications stay yours.
With no server of ours, instant alerts run through a push service you control: a self-hosted ntfy, or Pushover. The content never touches anything we run.
Everything is computed on your device.
Dashboards, statistics, your taste profile, the Year in Review: all worked out locally from what your own servers tell the app. None of it leaves your phone.
Privacy first, always.
Apply for the beta