astra-mobile/PRIVACY.md

Privacy Policy — Astra

Last updated: July 30, 2026

Overview

Astra is a local-first music player. It does not require an Astra account and does not include advertising, analytics, behavioral tracking, or crash-reporting SDKs.

Most Astra data stays on your device. Optional features connect only when you choose to use them, as described below.

Data stored on your device

Astra stores your selected library folders, indexed music metadata, playlists, playback history, preferences, cached album and artist artwork, lyrics, and optional service configuration on your device. Artist images downloaded from a provider or chosen from a local file remain available offline until Astra's app data is cleared or the app is uninstalled.

Passwords, session keys, and paired-desktop control tokens are stored using Android-backed secure storage. Other app data is stored in Astra's local database and files.

Optional network features

Depending on the features you enable, Astra may send data to the following destinations:

• Lyrics providers: Track title, artist, album, and duration may be sent to LRCLIB or XLRCDB to find lyrics.
• Deezer artist images: If you enable automatic artist images or manually search Deezer, Astra sends the artist name to Deezer. The selected image and its provider identifier are stored locally. Automatic downloads default to Wi-Fi or Ethernet and can be disabled in Settings.
• Remote music servers: If you add a Subsonic-compatible or Jellyfin server, Astra sends connection details, credentials, catalog requests, and playback requests directly to the server you configured.
• Scrobbling services: If you enable Last.fm-compatible scrobbling, ListenBrainz, or another configured destination, Astra sends track and playback information to that service.
• Paired Astra Desktop: If you pair a desktop, Astra exchanges remote-control, library-sync, playlist, favorite, queue, and playback data directly with that paired desktop.
• External links: Opening repository, community, license, support, or other web links transfers you to the selected website or app.

Those services may receive ordinary connection information such as your IP address and may handle data under their own privacy policies. Astra does not control user-selected servers or third-party services.

Astra permits connections to local servers over either HTTP or HTTPS because many self-hosted music servers are available only on a private local network. You choose the server and connection method.

Permissions

Astra may request:

• Folder and file access through Android's system picker, so you can choose music folders and import or export supported files.
• Camera access only when you open a QR-code scanner for desktop pairing, EQ presets, or Signal sharing.
• Notification access for playback controls, library scans, and paired-desktop sessions. Scan notification access is requested only after you tap its explained permission button; scans can still run if it is skipped or denied.
• Local-network and internet access for optional servers, scrobbling, lyrics, sharing, and desktop features.

Astra does not request microphone access.

Data retention and deletion

Local data remains until you remove it in Astra, clear Astra's app data, or uninstall the app. Disconnecting an optional service removes its locally stored credentials where the feature provides that action, but it does not delete data already received by that service. Use the service's own controls for that data.

Children's privacy

Astra is not designed for or directed to children. Astra does not knowingly collect children's personal information through an Astra account or telemetry service because neither exists.

Changes to this policy

This policy may change as Astra's features change. The updated policy will be published at this URL with a revised date.

Contact

For privacy questions, contact: contact@novaml.ai