Who runs this
AirSong is a cross-platform music link service operated by Nikolay Bordunenko. This page explains what information passes through it, how it’s used, and how to remove it.
What we collect
- An account identifier from your sign-in provider (Apple or Google), or your Telegram user ID if you use the Telegram Mini App. We never receive your password.
- Your profile. A username and the streaming service you set as default — Spotify, Apple Music, YouTube Music, Yandex Music, or Deezer.
- Your messages and links. The text and music URLs you send in chats. Stored on our server so they can be delivered and displayed across devices.
- A push token. A device-specific token from Apple Push Notification Service or Firebase Cloud Messaging, used only to notify you of new messages.
- Optionally, a Yandex Music OAuth token — only if you explicitly connect Yandex Music in the Profile screen. You can disconnect at any time.
We do not collect advertising IDs, location, contacts, photos, or biometric data.
How it’s used
- Creating your account and signing you in.
- Delivering messages and track previews between you and other AirSong users.
- Resolving a track URL into the equivalent link on the recipient’s preferred service.
- Sending push notifications when you receive a message.
- Diagnosing service issues — server logs may contain timestamps and error messages, retained for no longer than 30 days.
Third parties we talk to
AirSong sends limited information to the following providers to deliver core functionality:
- Apple Sign In / Google Sign In for authentication.
- Apple Push Notification Service and Firebase Cloud Messaging for push delivery.
- Supabase (managed PostgreSQL, EU region) for storing your account, chats, and messages.
- Spotify, Apple Music, YouTube Music, Yandex Music, Deezer public APIs for looking up track metadata. We send only the public track ID or a search string — never your personal data.
- Yandex OAuth only if you explicitly connect your Yandex Music account.
- Expo / EAS for managed push routing.
We do not sell or rent personal information. We do not use your data for advertising. AirSong contains no ads and no in-app purchases.
What other users see
When you start a chat with another AirSong user, your username and the messages and links you send are visible to them. Your account identifier and push token are never exposed to other users.
How long we keep it
We retain your data while your account is active. You can request deletion of your account and all of its data by emailing nicobordunenko@gmail.com. After a valid request, we permanently delete your account record, chats, messages, push token, and any optional OAuth tokens within thirty days.
Security
All traffic between the app and our server is encrypted using HTTPS (TLS 1.2 or higher). Authentication tokens live in your device’s secure storage — Keychain on iOS, Keystore on Android. The database is managed PostgreSQL with access limited to our backend via authenticated credentials.
Children
AirSong is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.
Where the servers live
In the European Union. By using AirSong you consent to the transfer and processing of your data in the EU.
Changes to this page
This policy may be updated over time. The “Last updated” date at the top reflects the most recent revision. Significant changes will be communicated within the app.
Contact
Questions, deletion requests, or anything else: nicobordunenko@gmail.com.