Privacy Policy
Aftersong (“we”, “the app”) saves a photo with the song that was playing and brings it back when that song plays again. This policy says what we collect, why, who can see it, and how to delete it. We wrote it to be read.
What we collect
- Account. When you sign in with an email address or with Apple, we store the email (or the private relay address Apple gives us) and the authentication tokens needed to keep you signed in. Joining an event without signing in creates a guest account: a random ID with no email. “Continue on this iPhone” keeps everything on the device and creates no account at all.
- Memories. The photos and short clips you save, the note you add, the song they are bonded to, and the time you saved them. Personal memories stay on your iPhone unless you are on Pro and turn on backup. Memories you add to an event are uploaded so the other people at that event can see them.
- Events. The name of an event, who is in it, and the settings the host chose.
- An event's cover. A host can give an event a cover picture (a flyer or a photo from their library). It stays on the host's iPhone. It is uploaded only if the host chooses to show it on the event's guest page, and then anyone with its link or poster can see it there. The app removes its location and camera details before it leaves the phone. Taking it off the guest page or removing it deletes it from our server.
- Music. If you connect Apple Music or Spotify, the app reads what is playing and your library or listening history so it can bond songs and bring memories back. Spotify sign-in tokens are stored in the iPhone keychain. We do not keep a copy of your listening history on our servers.
- Sound from the room. When a host taps Listen, or turns on “Listen for song changes” while the music comes from somewhere else, the app uses the microphone for a few seconds at a time, and only while Aftersong is open on the screen. The sound is not recorded, saved or sent to us. Your iPhone turns it into an audio fingerprint, and Apple’s ShazamKit uses the fingerprint to name the song; a fingerprint can’t be turned back into sound. Only the song’s name is kept, with the event’s photos.
- Diagnostics. If the app crashes or hangs, the next launch sends a report: the crash trace, app version, iOS version, and device model. No photos, notes, or song titles are included. Reports are kept for 90 days, then deleted.
- Usage analytics. When enabled, the app sends anonymous events such as “memory saved” or “film made” to TelemetryDeck. There is no advertising identifier, no tracking across apps, and no profile of you.
- Purchases. Whether you have Pro or event tickets, from Apple. We never see your payment card.
Song suggestions and reels use an AI model
Two optional features send content to an AI model through our server:
- Song suggestions from a photo. When you ask for a suggestion, the photo (downsized) and a few words of context go to our server, which asks Google’s Gemini model for a song that fits. The photo is used for that request only; our server does not store it.
- The reel director. When you ask the director to arrange a reel, the clip order, durations, captions, and song titles go to the model. No photos or video are sent.
Both features require an account so we can meter them fairly, and both are off until you tap them. Google processes the request under its own terms for API customers, which do not allow it to use your data to train its models.
How we use information
- To keep your memories, bring them back when their song plays, and back them up if you are on Pro.
- To run events: sync photos to the people at the same event, show who is there, and let the host end it.
- To keep the app working: fix crashes, understand which features are used, and stop abuse.
- To handle support requests you send us.
Who can see what
- Other people at an event can see the photos and notes you add to that event and your display name. They can never see your personal vault.
- Service providers. Supabase (accounts, database, media storage), Apple (sign-in, purchases, Apple Music), Spotify (music), Google (the AI model above), Cloudflare (this website, including its cookieless Web Analytics, which counts page views without identifying you), and TelemetryDeck (anonymous analytics, when enabled). Each only receives what its job needs.
- Nobody else. We do not sell personal information and we do not share it with advertisers.
Your controls
- Leave an event at any time in the app. The host can end an event for everyone.
- Delete a memory and it is gone from this device, from your backup if you have one, and it will not come back when its song plays. A per-memory “don’t bring this back” switch that keeps the memory but stops it resurfacing is on the way.
- Notifications, camera, microphone, photos, and music access are each asked for when first needed and can be changed in iOS Settings.
- Delete your account in Settings → Danger zone. That wipes the app on this device and asks our server to delete your account, your backed-up memories, your event memberships, and the photos you added to events. Events you hosted are deleted for everyone in them, so end or hand off an event you care about before deleting. If the automatic server deletion cannot complete, the app tells you; email support@aftersong.app and we delete it by hand within 30 days.
Retention
Memories and events stay until you delete them or your account. Photos you added to an event stay visible to its members until you remove them, the event is deleted, or your account is deleted. Diagnostics are deleted after 90 days.
Children
Aftersong is not directed at children under 13. Do not use the app if you are under 13.
Changes
If this policy changes in a way that matters, the app will tell you and the date above will move.
Contact
Questions: Support or email support@aftersong.app.