Privacy Policy

1. Who we are and what this policy covers

OwlSonic (“OwlSonic,” “we,” “our,” or “us”) is a personal music-library application and related cloud service. It helps users import and organize music, synchronize their libraries, listen to their own collections, and use discovery features such as Wave.

This policy covers the OwlSonic website at https://owlsonic.stream, the OwlSonic desktop and mobile applications, and the related OwlSonic Cloud services. It does not govern independent third-party websites or music platforms.

OwlSonic is a product/brand name, not a statement that a company called OwlSonic has been incorporated. The legal person or organization responsible for this service is:

• Service operator / data controller: Kuzmin VD
• Privacy and support: support@owlsonic.stream

2. Information we process

Account and authentication data. We process the email address you register with, an encrypted password hash (not your plaintext password), account and verification status, login-session and device records, and security-related authentication information. Verification and password-reset emails are sent through an email-delivery provider.

Library and listening data. We process the songs you add to your cloud library, associated titles, artists, albums, artwork, playlists, favorites, editing preferences, music-library changes, listening events, playback statistics, and synchronization data. Custom mood-related settings may also be stored as part of your library.

Uploaded music and derived information. When you upload audio, OwlSonic temporarily handles the source file for processing. The service stores processed audio, converted artwork, track metadata, and content-level musical analysis, which may include similarity embeddings and mood characteristics. Audio processing and analysis may involve a separate processing worker. OwlSonic may deduplicate identical processed audio across user libraries.

Device and technical data. We process an installation identifier, device platform, device name and app version, as well as technical operational records such as request paths, response status, timestamps and request identifiers. Infrastructure providers may also process network information such as IP addresses when delivering or protecting the website or service.

Support communications. If you contact us, we process your email and the information you choose to provide so we can respond.

Optional diagnostics and product analytics. Supported versions of the app include separate optional settings for crash reporting through Sentry and product analytics through PostHog. Product analytics are designed to use anonymous events, such as starting playback, importing music, beginning a Wave session, completing an offline download, or encountering a synchronization error. These features are intended to be disabled unless the respective preference is enabled. Network-level technical information may nevertheless be visible to providers when their services are used.

3. Why we process information

We use information to:

• Create and secure accounts and verify email addresses.
• Store, organize, synchronize and play your personal music library.
• Process uploaded media and generate music-related features such as Wave.
• Keep the service operational, prevent abuse and troubleshoot problems.
• Send essential account messages and answer support or privacy requests.
• Measure product reliability and improve features where optional diagnostics or analytics have been enabled.
• Meet applicable legal obligations and respond to valid legal requests.

Where the General Data Protection Regulation (GDPR) applies, the relevant legal bases may include performance of a contract for core service functions, legitimate interests for proportionate service security and reliability, consent for separately optional diagnostics or analytics where required, and legal obligations when applicable. Any reliance on legitimate interests or consent must reflect the actual production configuration and applicable law.

4. Who receives information

We use infrastructure and service providers to operate OwlSonic. Depending on the deployed configuration, these may include:

• Hosting and database infrastructure for the OwlSonic API and account data.
• Object storage infrastructure for processed audio and artwork.
• Resend for account-verification and password-reset email delivery.
• Audio-analysis workers to process music and compute derived features.
• Sentry, if you separately enable crash reporting on a supported platform.
• PostHog, if you separately enable product analytics on a supported platform.

We do not describe those third-party services as universally active: actual processors, storage regions, and optional SDK settings depend on the production deployment. We do not use your personal music as a general licensed streaming catalog, and we do not sell personal information to advertisers.

If a user chooses a feature involving an external music platform or link, that platform’s own terms and privacy practices also apply. OwlSonic is not necessarily affiliated with, endorsed by, or authorized by that platform.

5. Storage and retention

Account records and personal library state. Account identity, device and session records, personal playlists, listening history, per-user music-library entries, synchronization state and related product records are ordinarily retained while the account exists. They are removed during the account-deletion workflow described below.

Processed audio, artwork and analysis. Under the currently implemented system, processed music files, artwork, track metadata and content-level analysis are retained after an account is deleted, potentially indefinitely. The database link to the deleted account is removed. This design accommodates deduplicated or shared content. Removing the direct account link does not guarantee that the retained content is anonymous: audio or metadata may itself reveal information about the person who uploaded it.

Temporary upload files. Source files held temporarily during ingestion are intended to be removed when processing finishes; stale temporary workspaces are subject to a cleanup process.

Authentication and technical records. Short-lived access credentials and email-verification codes may expire much sooner than their database records are physically removed. Certain operational logs are rotated according to storage limits, so their retention depends on log volume rather than a fixed number of days. Backups or infrastructure snapshots, if enabled, can retain earlier copies outside the active database and may follow separate retention settings.

Some information held independently by email-delivery or other infrastructure providers may follow those providers’ own retention schedules and legal obligations. Where applicable law provides a right to erasure or a shorter retention period, you may contact us to request an individual review; stating the current technical behavior does not override those rights.

6. Account deletion

OwlSonic supports authenticated account-deletion requests. A request requires confirmation using your current password. Once accepted, account access and active sessions are revoked promptly, while deletion of account records and personal library state proceeds asynchronously in the background. There is currently no guaranteed completion-time estimate or automatic completion notification.

Important: As explained in Section 5, deleting an account does not currently delete processed cloud audio, artwork, song metadata, or content-level music-analysis records. The direct account association is removed. Copies stored on your own devices are not deleted by the server-side deletion job; separate application-level behavior must be verified for each supported platform.

See Account Deletion for instructions and how to contact us if you cannot access your account.

7. Security

We use measures such as password hashing, authenticated access controls, private object storage and time-limited media-access links. No internet service can guarantee absolute security. Contact us promptly if you suspect unauthorized access to your account.

8. International processing

OwlSonic may rely on providers or processing infrastructure located outside your country. Depending on applicable law, international transfers may require additional safeguards. Contact us for information about the processing locations and applicable protections for your data.

9. Your rights and choices

Depending on your location and the applicable law, you may have rights to access, correct, delete, restrict or object to certain processing of your personal information, and to request data portability. You may withdraw optional diagnostic or analytics consent through the corresponding app settings where offered. Withdrawing consent does not automatically undo processing already lawfully performed.

To exercise your rights or ask questions, contact support@owlsonic.stream. We may need to verify that a request concerns your account before disclosing or changing account-related information. Where applicable, you may also complain to the relevant data-protection authority.

10. Children

OwlSonic is not designed as a service specifically for children. If you believe information relating to a child has been provided in a manner that violates applicable law, please contact us so the situation can be reviewed.

11. Changes

We may update this policy as OwlSonic evolves. The date above identifies the version of this policy. Where required, we will provide additional notice of material changes.

12. Contact

OwlSonic
Email: support@owlsonic.stream
Operator: Kuzmin VD