Privacy Policy

Last updated: 29 August 2026

Resonia ("we", "the app") lets approved hosts upload audio tracks and stream them in real-time sync to listeners who join via a room link. This policy explains what information is collected when you host or join a room, and how it is protected.

1. Information hosts provide

To create and manage listening rooms, hosts sign in with their email address to receive a secure 6-digit verification code. We use your email solely to authenticate your session, maintain your active rooms, manage multi-device broadcast connections (up to 2 devices on Free, up to 5 on Pro), and manage Pro subscription status if applicable. We never sell, rent, or use your email for advertising or marketing.

2. Information listeners provide

Joining a room as a listener does not require creating an account or providing an email address. You choose a temporary display name which generates an initial letter badge in the room chat. Your display name is saved in your browser's session storage for the current tab. No listener profile photos or media files are uploaded to our servers.

3. Content you upload

Audio tracks uploaded by a room host (up to 1 GB on Free rooms, or up to 3 GB per room on Pro up to 15 GB total) are stored in secure cloud object storage to enable progressive synchronized streaming to room participants. See our Terms of Service for host responsibilities regarding copyright and licensing.

4. Real-time chat messages

Room chat is text-only. Messages are delivered in real time via encrypted edge WebSocket servers to participants in the room. To protect privacy, listeners who join late or refresh their browser cannot view previous chat messages sent before they entered the room.

5. Abuse prevention and security

To protect our infrastructure and streaming endpoints from automated scripts and denial-of-service attempts, we process IP addresses in edge request logs and temporary database rate-limit counters. These logs are used solely for security and rate limiting and are not linked to your personal identity.

6. Your Rights & Self-Service Account Deletion (GDPR Article 17)

In compliance with GDPR Article 17 (Right to Erasure / "Right to be Forgotten") and global privacy standards, registered hosts have full sovereignty over their data with a 1-click self-service account deletion mechanism:

  • Self-Service Erasure: Hosts can permanently delete their account at any time directly in the dashboard (/rooms).
  • Complete Data Cascade Purge: Deleting an account permanently destroys your email record, all login sessions, verification tokens, and database records from our primary database.
  • Audio Storage Destruction: All audio tracks uploaded to your rooms are immediately purged from cloud object storage with zero retention.
  • Active Broadcast Termination: Any active rooms are gracefully closed and listeners are safely disconnected.

7. Data retention and automatic deletion

Free community rooms and their uploaded audio tracks are automatically and permanently deleted after 24 hours. Pro rooms persist until manually removed by the host. When a host ends a room, the room record and its audio files in cloud object storage are deleted immediately.

8. Infrastructure & service providers

We rely on trusted cloud infrastructure and service providers to operate the service:

  • Cloud infrastructure and content delivery network providers (to securely host data, serve media, and route real-time room sessions)
  • Midtrans: secure payment gateway for Pro subscriptions (processed under PCI-DSS compliance)
  • Public music metadata and lyrics directory services (used only when you open the lyrics panel for a playing song)

We do not sell personal data, nor do we embed third-party advertising tracking cookies or analytics pixels.

9. Local storage preferences

We use your browser local storage and session storage solely to remember your UI preferences: your chosen display name, audio volume level, and sound effects toggle. This data remains on your device and is never shared or tracked.

10. Native Android App, PWA, and device permissions

Resonia offers an optional native Android application (.APK) and Progressive Web App (PWA) installation. The native Android application and PWA request standard foreground media service and notification permissions solely to maintain uninterrupted synchronized audio streaming while your screen is locked and to display live playback controls.

We never request, access, or collect sensitive device data: we do not access your contacts, camera, microphone, device location, photo library, or personal files stored on your device.

11. Children's privacy

Resonia is not directed at children, and we do not knowingly collect personal information from individuals under 13. If you believe a child has provided personal information, please contact us for immediate removal.

12. Changes to this policy

We may update this policy as the platform evolves. Any material updates will be reflected in the "Last updated" date above.

13. Contact

For questions regarding this policy or data inquiries, contact support@resonia.app.

See also our Terms of Service.