Privacy Policy

Musink is run by Samuel Adorni, an individual developer based in Italy, who is the data controller for the personal data described here. You can reach us at support@astrall.app.

• Account data: your email address and password (stored only as a hash by our authentication provider). If you sign in with Apple or Google, we receive the name, email address and profile picture that the provider shares.
• Profile: username, display name, bio, profile picture and cover image.
• What you do in the app: posts, comments, reposts, likes, comment upvotes, the people you follow and your favourite artists.
• Notifications we create for you (for example when someone likes your post) and, if you allow notifications, your push token.
• A per-user counter of music searches, used only to prevent abuse.

Musink uses no analytics, no advertising and no tracking of any kind.

Your profile, posts, comments and reposts are public to other Musink users. Your likes, follows and favourite artists are not listed publicly, but the people involved are notified (for example, the author of a post you like sees your name) and totals such as like counts are public.

When you search for music, our server sends the search text to Spotify and stores the public catalogue information it returns (artists, albums, tracks). Spotify does not receive your identity or account information.

• to provide the service: your account, your profile, the feed and the social features (performance of a contract)
• to protect the service from abuse (legitimate interest)
• to send push notifications, only if you allow them (consent, which you can withdraw in iOS Settings)

• Supabase: database, authentication and image storage, hosted in the European Union
• Spotify: music search, without personal data
• Google and Apple: sign-in
• Apple: delivery of push notifications, which contain the name of the other user and, for comments, the comment text

Some of these providers may process data outside the European Union. In that case the transfer is covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Your login session is kept in the iOS Keychain and your push token in the app's local settings.

Your data is kept until you delete it or your account is deleted. Deleting a post or comment removes it from the service.

You can ask to access, correct, delete or export your data, to restrict or object to its use, and withdraw your consent at any time.

To delete your account and all its data, write to support@astrall.app from the email address of the account: we delete it within 30 days.

You can also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it).

Musink is not meant for children under 14 and we do not knowingly collect their data.

If we change this policy we will update the date at the top of this page and, for important changes, tell you in the app.