Privacy Policy for LinkSync

Effective Date: August 2, 2026

Last Updated: October 5, 2026

In short

LinkSync converts music share links between Spotify and Apple Music. The core app runs entirely on your device and requires no account.

LinkSync also offers an optional Premium subscription that adds a private, synced history of the links people send you. Premium requires signing in with Apple and stores your history in your own account so it can sync across your devices. If you never sign in, LinkSync collects nothing about you — exactly as it always has.

Premium members can also choose to create a profile and add friends. Your profile is private by default: you decide what friends can see, and your link history and the names you give your senders are never shown to anyone else.

This policy covers both.

Who we are

LinkSync is developed and maintained by Alberto Paredes (referred to below as “we,” “us,” or “the developer”). For privacy matters we are the data controller. You can reach us at linksync.app@proton.me.

The free app (no account)

Used without signing in, LinkSync behaves exactly as described in prior versions of this policy:

It stores a few preferences on your device (your default service, your theme, and whether you’ve finished onboarding) using the operating system’s standard storage (UserDefaults on iOS, SharedPreferences on Android). These never leave your device.
To match a link across services it makes unauthenticated HTTPS requests to Spotify’s and Apple’s public lookup endpoints (details in “Third-party services” below). No identifier for you is sent.
It does not create an account, and nothing about you is stored on any server.

You can use LinkSync this way forever. Everything in the next section applies only if you choose to sign in for Premium.

LinkSync Premium (optional account)

When you sign in with Apple and use Premium, we create an account for you and store a history of your conversions so you can see who sends you music and keep that history across devices.

What we collect and store

Account identifier. Signing in with Apple gives us a stable, Apple-provided user identifier that we use as your account key. We request only your name from Apple. We do not ask Apple for your email; if you use Apple’s Hide-My-Email relay, we never receive a real address.
Sender names you enter. When you tag a converted link with the name of the person who sent it, we store that name (a label you type — we do not read your device’s contacts or address book).
Conversion records. For links you convert while signed in, we store the music link, the source and destination service, a search term derived from the link, the time, and whether the sender was confirmed by you or auto-attributed.
Subscription status. To unlock Premium we record whether you hold an active subscription. The purchase itself is processed by Apple (or Google); we do not receive or store your payment card or billing details.
Profile you choose to create. Your username, display name, bio, your sharing settings, and the date you agreed to the community rules. All of these are optional until you use friends.
Friends and blocks. Friend requests you send and receive, who you are friends with and since when, and the people you have blocked.
Reports. If you report someone, we store the reason, any details you write, and a copy of that person’s username, display name, and bio as they were at that moment. If someone reports you, the same copy of your profile is stored.
Notifications. When someone sends you a friend request or accepts yours, we store a notification record (who it is from, what kind it is, when it was created, and whether you have seen it) so the app can show it to you.
Push notification token (only if you allow notifications). If you turn on notifications, your iPhone gives LinkSync a device token from Apple, and we store it with your account so we can send you push notifications. We also store your notification settings (which kinds you want). If you never allow notifications, no token is stored.

What other users can see

Your profile is private by default. Only what you choose to share is shown, and only to the people described here:

Your username can be found by any signed-in LinkSync user who searches for it — that is how friends find you. A username is optional; without one, nobody can find you.
Your display name is shown to people who find you only if you turn on the “Photo, name & bio” sharing setting.
Your bio and stats (how many links you’ve logged and how many senders you have) are shown only to your friends, and only if you turn on those sharing settings.
Never shown to anyone else: your conversion history, the music links you convert, and the names you give the people who send you links. A sender name you type is a private label and is never shown to other users — not even to your friends.
Blocks and reports are private. Someone you block is not told. Someone you report is not told who reported them.
Notifications show your username. When you send someone a friend request or accept theirs, they are notified, and the notification includes your username (for example, “@yourname sent you a friend request”). A push notification can appear on their lock screen. Notifications between you and someone you have blocked are deleted.

To keep LinkSync safe, we review reported profiles and may remove content or accounts that break our Terms of Use.

Where it is stored and who processes it

Your Premium data is stored in a database and authentication service operated on our behalf by Supabase, Inc. as our data processor. Your subscription entitlement is managed through RevenueCat, Inc. When someone files a report, a notification email containing the report (the reason, any details, and the copy of the reported profile) is sent to us through Resend, Inc., an email delivery service. Each acts on our instructions under a data-processing agreement.

In transit: all traffic is encrypted over HTTPS.
At rest: the database is encrypted, and access is protected by security rules so that your private data — your conversion history and sender names — is readable and writable only by your own authenticated account. Other users can see only the profile details described in “What other users can see” above.

What we still do not do

Even with Premium, LinkSync does not:

Show ads or use any advertising identifier or ad network
Use third-party analytics, telemetry, or cross-app tracking of any kind
Access your contacts, calendar, photos, microphone, camera, or location
Sell or rent your data to anyone
Send marketing or promotional push notifications — notifications are only about friend activity, and you can turn each kind off in Settings → Notifications

Premium uses Apple’s “Sign in with Apple.” Apple handles your credentials directly; we never see your Apple password. Apple’s handling of your information is governed by Apple’s privacy policy. We receive only the account identifier described above.

Clipboard access

When you tap the paste button inside LinkSync, the app reads the current contents of your device clipboard so it can process the link you intend to convert. LinkSync does not read your clipboard passively or in the background. The clipboard contents are used only to extract a single music URL and are never stored or transmitted. On iOS 14 and later, your device shows a visual indicator whenever any app reads the clipboard; this is expected each time you tap paste.

Third-party services

Apple (iTunes Search API). When you convert an Apple Music link, LinkSync sends a request to https://itunes.apple.com/lookup?id=<track-id>&country=<storefront>. The storefront is read from the Apple Music URL itself.

Spotify (oembed endpoint). When you convert a Spotify link, LinkSync sends a request to https://open.spotify.com/oembed?url=<the link>. This is Spotify’s public, unauthenticated endpoint. Spotify’s practices are governed by Spotify’s privacy policy.

Supabase (Premium only). Authentication and storage for Premium accounts are provided by Supabase, Inc. See Supabase’s privacy policy.

RevenueCat (Premium only). Subscription entitlements are managed by RevenueCat, Inc. See RevenueCat’s privacy policy.

Apple Push Notification service (only if you allow notifications). Push notifications are delivered to your iPhone by Apple. To send one, we give Apple your device token and the notification’s text (which includes the other person’s username). Apple’s handling is governed by Apple’s privacy policy.

Resend (reports only). When a user files a report, the notification email to us is delivered by Resend, Inc. It contains the report and the reported profile copy, and is sent only to us. See Resend’s privacy policy.

What your IP address reveals. As with any app that makes internet requests, the services above receive your device’s public IP address, which is standard internet infrastructure. How they use it is described in their own privacy policies.

Data retention and deletion

Free app: preferences live only on your device and are removed when you delete the app or clear its data.
Premium: your account data is kept until you delete it. You can permanently delete your account and all associated data at any time from within the app: Profile → Account → Delete account. This removes your account, profile, friendships, blocks, notifications, push tokens, and every conversion record and sender name tied to it. You can also email us at linksync.app@proton.me to request deletion.
Reports: a report is kept as a safety record even after either account is deleted. The link to the deleted account is removed, but the report and the profile copy it contains are kept for up to 12 months, then deleted.
Push tokens: removed from your account when you sign out, when you delete your account, or when Apple tells us the token no longer works (for example, after you delete the app). Turning notifications off in iOS Settings stops delivery immediately.
Backups: deleted data may remain in encrypted backups for up to 90 days before those backups are overwritten.

International transfers

Our processors (Supabase and RevenueCat) are U.S.-based providers. If you access LinkSync from the European Union, United Kingdom, or European Economic Area, your Premium data may be processed outside your home country. Where required, such transfers are covered by Standard Contractual Clauses or equivalent safeguards under our agreements with those processors.

Children

LinkSync is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect information from children. If you believe a child has created a Premium account, contact us and we will delete it.

Your rights

Because Premium means we now hold data about you when you’re signed in, you have rights over it:

Access and portability — ask us for a copy of your Premium data.
Correction — your profile, sharing settings, sender names, and tags are editable in the app; contact us for anything else.
Deletion — delete your account in-app (Profile → Account → Delete account), or ask us to.

European Union / United Kingdom / EEA (GDPR). Our legal basis for processing Premium data is performance of the service you request (your subscription, history, profile, and friends features). We process reports and blocks on the basis of our legitimate interest in keeping LinkSync safe for its users. You may access, correct, delete, restrict, or object to processing, and lodge a complaint with your local supervisory authority. Contact us at linksync.app@proton.me.

California (CCPA/CPRA). We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising. You may request access to or deletion of your information. Contact us at linksync.app@proton.me.

For the free app, these rights are satisfied by default because we hold no data about you.

Changes to this policy

If LinkSync’s behavior changes in a way that affects what information is accessed or how it is used, this policy will be updated and the “Last Updated” date above will change. Material changes will also be noted in the app’s release notes on the App Store and Google Play.

Contact

Questions about this policy or about LinkSync’s privacy practices can be directed to linksync.app@proton.me.