Airtake

Privacy Policy

Effective date: 13 October 2026

Last updated: 15 October 2026

This policy explains what personal data the Airtake app and the website www.airtake.app handle, why we use it, who receives it, how long we keep it, and what you can do about it.

In short

  • You can use Airtake with an anonymous account. If you choose Apple or Google sign-in, that provider may give us an account identifier and email address.
  • When you make a song, the name and the moment you type are sent to AI providers to write and sing the song.
  • Your songs and clips stay private until you post or share them.
  • You can delete a clip, a post or your whole account inside the app.
  • We don't sell your data. We don't show ads, and we don't track you across other companies' apps or websites.

1. Who we are

Airtake is provided by Alparslan Köprülü, an individual developer (sole proprietor, not a company), Kahramanmaraş 46800, Türkiye ("we", "us").

We are the data controller (in Turkish law, "veri sorumlusu") for the personal data described here. The controller is a natural person.

We have not appointed a data protection officer, because one is not required at our size. Send every privacy question or request to support@airtake.app.

We have not yet appointed a representative in the EU or the UK.

2. What we collect

2.1 Your account

  • Anonymous account ID. Firebase Authentication creates it the first time you open the app. It is not linked to your name, email or phone number.
  • App integrity check. Firebase App Check uses Apple App Attest / DeviceCheck or Google Play Integrity to confirm that requests come from a genuine copy of the app.
  • Free-trial check. To stop the same device from claiming free offers again and again, we may keep a record made from a salted one-way hash of a device identifier. We never store the raw identifier. This record may be kept for this purpose after you delete your account.
  • Optional linked sign-in. You can link the anonymous account to Apple or Google so your creations and credits can follow you to another device. Firebase receives the provider account identifier and, when the provider supplies it, your email address. Airtake does not offer password sign-in.

2.2 Making a song and clip

  • The name you type (the person the song is about). Saved with your creation, so the app can show it in My videos and use it for remixes and re-styles. Sent to the AI providers to write and sing the song. Shown in the clip as on-screen text.
  • The moment you type (what happened). Saved with your creation so you can see the creation details and use it for remixes and re-styles. It is also sent to the AI lyrics provider to write the song. Some clip looks show the moment as on-screen text, so it can stay visible inside that video and inside a post if you publish it.
  • Your choices. Occasion (for example birthday or roast), music style, song language and clip look.
  • Generated lyrics. Saved with your creation.
  • Song audio. The short song excerpt the clip uses. Deleted automatically after about 24 hours.
  • Finished clip and cover image. Kept in your private storage until you delete them or your account.
  • Creation details. Status, length, watermark, credits charged, error codes and times.

Please don't type private or sensitive details about anyone (for example health, an address or a phone number) into the name or the moment.

The current app lets you choose a photo for your profile picture. The selected photo is uploaded, checked for unsafe content and stored as your public avatar. Airtake does not currently upload your voice or accept general media uploads. A planned creation feature ("Star in it", 18+ only) is not available yet; we will update this policy before it launches.

2.3 Feed and social features

  • Profile. An automatic handle (for example airtake_k3x9q2), display name, bio, optional profile photo and counts of followers, following and posts. Profiles can be seen by other Airtake users.
  • Posts. When you post a clip, we save its caption (up to 150 characters), occasion, look, song language, visibility, counts of likes and shares, and times.
  • Visibility. You choose Public, Followers or Only me for each post. Roast songs start as Followers.
  • Public posts are public media. The clip and its cover image are copied to public storage, and anyone with the link can open them. Media of Followers and Only-me posts stays private: the app shows it only to people allowed to see the post, through short-lived signed links.
  • Likes and follows. Who liked which post, and who follows whom. Other users can see these.
  • Blocks. The people you block. Only you can see your block list.
  • Reports. When you report a post: the post, your account ID, a reason code and the time. The person you report is not told who reported them.
  • Notifications inbox. When someone likes your post or follows you, we save a notification in your inbox with their profile and the post.
  • Comments and replies. The text you post, author and mention identifiers, likes, moderation state and times. Comments are checked for prohibited content before other people see them.
  • Direct messages. Message text, shared-post references, participants, request/acceptance state, read times and mute state. Messages are checked for prohibited content before delivery. A human sees message content only if a conversation participant reports it; that report can include a snapshot of recent messages.

Anyone who can see your post can watch it, and may save it or share it.

2.4 Purchases, subscriptions and credits

  • Purchase and subscription status. Apple or Google take the payment. Our subscription processor, RevenueCat, tells us your status. We use your anonymous account ID as your RevenueCat ID. We never receive your card or bank details.
  • Credits. Your credit balance and a record of each credit added, spent or returned.
  • Offers and rewards. Gift-wheel results, offer windows and use of the free clip.

2.5 Notifications

  • Push token. A Firebase Cloud Messaging token, your platform (iOS or Android), app language, and a one-way hash of the token used as an install ID.
  • What we send. "Your song is ready", likes, follows and reminders. Offers and new looks are sent only if you switch them on (they are off by default).

You can change each type in Settings → Notifications, or turn notifications off in your phone's settings.

2.6 App analytics, crash reports and performance

  • Usage events (Google Analytics for Firebase). Screens viewed and actions such as starting a creation, choosing a look, opening the paywall, buying, sharing, liking, following, reporting and deleting. Events are linked to your anonymous account ID. We never log the name, the moment or captions.
  • Crash reports (Firebase Crashlytics). Crash details, device model, system version, app version and your anonymous account ID.
  • Performance (Firebase Performance Monitoring). App start time, network timing and similar technical measurements.
  • Remote settings (Firebase Remote Config). The app downloads settings such as which offer or catalog to show.

We do not use advertising identifiers. The iOS app does not use the IDFA, and the Android app blocks the advertising ID permission. We do not track you across other companies' apps or websites.

2.7 Support

If you email support@airtake.app, we receive your email address and whatever you write.

2.8 Server logs

Our servers log technical events (for example "creation ready" or "render failed"). Logs contain a short one-way hash of your account ID, item IDs, error codes and timings. They do not contain the name, the moment, lyrics, captions or media.

2.9 Device permissions

  • Selected photos and saving. Airtake opens the system photo picker only when you choose a profile photo, and receives only the item you select. It also adds a finished clip to your library when you tap Save; it does not browse the rest of your library.
  • Notifications. Only if you allow them.

The app does not use your camera, microphone, location or contacts.

3. AI processing

Airtake makes content with artificial intelligence. This is what is sent, and to whom:

  • Writing the lyrics. The name, the moment, the occasion, style and language (and, for a remix, the previous lyrics) go to Anthropic's Claude model.
  • Singing the song. The lyrics, a music-style description and a voice type go to Mureka's music model.
  • How we reach them. We reach these models through Eachlabs and fal.ai (fal.ai routes lyrics requests through OpenRouter). If one route is unavailable, the request automatically goes through the other.
  • Making the clip. Our own render service on Google Cloud Run puts the song, lyrics, name and look together. No outside AI provider sees this step.

Before your first song, the app shows a card that names these providers and asks you to agree. You can't create a song without agreeing.

These providers process the data only to generate the output we ask for, under their own terms. We do not use your inputs or outputs for advertising, and we do not sell them.

Every clip is labeled as AI-generated, on screen and in its file metadata. Clips made without Pro also carry a "Made with Airtake" watermark.

AI output can be wrong, odd or unexpected. Automatic checks block some words and names, but they are not perfect. You can report a post at any time.

4. Why we use your data (legal bases)

EU and UK law (GDPR) and Turkish law (KVKK, Law No. 6698) require a legal basis for each use.

  • Running your account and the app: performance of our contract with you.
  • Making your song and clip: performance of the contract, and your explicit consent on the AI card.
  • Sending your inputs to AI providers abroad: your explicit consent on the AI card, and the safeguards in section 6.
  • Feed features (posts, likes, follows, blocks, notifications inbox): performance of the contract.
  • Moderation, reports and safety: our legitimate interest in a safe service, and legal obligations.
  • Purchases, subscriptions and credits: performance of the contract, and legal obligations for financial records.
  • "Song ready", like and follow notifications: performance of the contract. You can switch each one off.
  • Offer and new-look notifications: your consent (you switch them on).
  • App analytics, crash reports and performance: our legitimate interest in understanding and fixing the app. The data is linked only to an anonymous ID and is never used for ads. You can object by emailing us.
  • Website analytics: your consent in the cookie banner.
  • Free-trial check and abuse prevention: our legitimate interest in preventing fraud and abuse.
  • Support: performance of the contract and our legitimate interest in answering you.
  • Legal claims and compliance: legal obligations, and establishing or defending legal claims.

We do not make decisions about you based only on automated processing that have legal or similarly significant effects. One automatic rule exists: a post reported by three different people is hidden from feeds until a person reviews it.

5. Who we share data with

We share personal data only with service providers that process it for us, and only as needed:

  • Google (Firebase and Google Cloud: Authentication, Firestore, Cloud Storage, Cloud Functions, Cloud Tasks, Cloud Run, Analytics, Crashlytics, Performance Monitoring, Remote Config, Cloud Messaging, App Check, Cloud Logging). Hosting, database, storage, background tasks, clip rendering, analytics, crash reports and notifications. Our servers run in the United States.
  • Eachlabs and fal.ai (with OpenRouter on the fal.ai route). Gateways to the AI models. They receive the name, the moment, your choices and the lyrics.
  • Anthropic. Its Claude model writes the lyrics.
  • Mureka. Its music model sings the lyrics.
  • Cloudflare. Hosts the website, delivers media files (Cloudflare R2), and forwards email sent to support@airtake.app.
  • RevenueCat. Subscription and purchase status. It receives your anonymous account ID and store receipts.
  • Apple and Google. App stores, payments, refunds and push delivery, under their own privacy policies.

We may also disclose data if the law requires it or to answer a valid legal request; to protect the rights, safety or property of users, the public or us; or to a buyer or successor if Airtake is transferred (we will tell you first).

We do not sell your personal data, and we do not share it for cross-context behavioral advertising (as those terms are defined in California law).

6. International transfers

We are based in Türkiye. Our main infrastructure is in the United States, and our AI and other providers may process data in the United States and other countries. Your data is therefore transferred outside Türkiye, and outside the EU/EEA or UK if you live there.

  • EU, EEA and UK users: we rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses (and the UK addendum), or the EU–US Data Privacy Framework where a provider is certified.
  • Türkiye: transfers are made under KVKK Article 9, using the safeguards it provides (such as standard contracts) or, where the law allows, your explicit consent.

You can ask us for information about these safeguards.

7. How long we keep data

  • Account: until you delete it.
  • Moment text, name, lyrics and creation details: until you delete that creation or your account. The moment can also remain visible inside a finished clip if its look shows it on screen.
  • Song audio excerpt: about 24 hours.
  • Finished clip and cover image: until you delete them or your account.
  • Posts and post media: until you delete the post or your account. A public post hidden after reports disappears from feeds, but its media file can stay reachable by its link until the post is deleted.
  • Likes, follows, blocks, profile, profile photo and notifications: until you remove them or delete your account.
  • Comments and direct messages: until they are deleted under the controls described in the app, their post or conversation is deleted, or an involved account is deleted. A reported-message snapshot is kept for up to 90 days for moderation.
  • Reports you filed: kept after account deletion with your former account ID, the post ID and the reason code (no content), as long as needed to handle the report and keep the service safe.
  • Credit balance and credit history: until you delete your account.
  • AI consent record: until you delete your account.
  • Free-trial device record: as long as needed to prevent repeated free trials. It can remain after account deletion.
  • Duplicate-request records: 7 days.
  • Push token: until it changes or you delete your account.
  • Purchase records: RevenueCat, Apple and Google keep their own records under their own retention rules.
  • App analytics events: no longer than 14 months.
  • Crash reports: about 90 days.
  • Server logs: normally about 30 days.
  • Support emails: as long as needed to help you, and no longer than 2 years after your last message, unless the law requires longer.
  • Backups: deleted data can remain for a limited time in our providers' technical backups and logs before it is overwritten.

8. Deleting your data

Delete a clip: use the clip's menu in My videos. This deletes the creation, its song and clip files, and its post if you posted it. You can't delete a clip while it is still being made.

Delete a post: use the post's menu. This deletes the post, its media and its likes. The clip stays private in My videos.

Delete your account: Settings → Account → Delete account. This permanently deletes your creations and their files, your posts and their media, your comments, your conversations and messages, your likes, your follows (both ways), your profile, handle and profile photo, your notifications, your credits and credit history, your consent record, your blocks and push tokens, and your Firebase login. If you linked Apple or Google, the app also removes the provider link as described during deletion.

Account deletion does not:

  • cancel a subscription. Cancel it in your App Store or Google Play settings, or you may keep being charged;
  • delete reports you filed about other people's posts (see section 7);
  • delete the free-trial device record (see section 2.1);
  • delete data already sent to analytics, crash reporting, RevenueCat, Apple or Google. That data expires under the retention in section 7. You can ask us to request earlier deletion;
  • remove copies of clips that you or others already saved, shared or downloaded.

Unused credits are lost when you delete your account.

If you can't use the app, email support@airtake.app. Tell us your handle or your account ID (shown in Settings). We may ask for details that show the account is yours.

9. Your rights

Everyone

You can ask us to access, correct, delete or export your data, and you can withdraw your consent at any time. Withdrawing consent does not affect processing that already happened. Email support@airtake.app. We answer within 30 days, and we may ask you to show that the account is yours.

EU, EEA and UK (GDPR)

You have the right of access, rectification, erasure, restriction, data portability and objection (including to processing based on legitimate interests), and the right to withdraw consent. You can complain to your local data protection authority.

Türkiye (KVKK)

Under KVKK Article 11 you have the right to:

  • learn whether your personal data is processed, and request information about it;
  • learn the purpose of the processing and whether the data is used for that purpose;
  • know the third parties in Türkiye or abroad that receive it;
  • ask for incomplete or wrong data to be corrected;
  • ask for your data to be deleted or destroyed under KVKK Article 7;
  • ask that third parties who received your data are told about a correction or deletion;
  • object to a result against you that arises only from automated analysis;
  • claim compensation for damage caused by unlawful processing.

How to apply: email support@airtake.app, or send a written application to our postal address in Kahramanmaraş (we give the full address on request). We answer free of charge within 30 days. If you are not satisfied with our answer, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

California and other US states

You have the right to know what personal information we collect and why, to delete it, to correct it, and not to be discriminated against for using these rights. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you. You can use an authorized agent.

10. Age limit

Airtake is not for anyone under 16. Do not use Airtake if you are under 16. Airtake includes moderated comments and direct messages. The planned "Star in it" creation feature will be for adults (18+) only.

We do not knowingly collect personal data from anyone under 16. If we learn that a user is under 16, we delete the account. If you believe someone under 16 uses Airtake, email support@airtake.app.

11. Security

  • All traffic to our services is encrypted in transit (HTTPS).
  • Your clips and songs are stored privately. Only your account can open them, through short-lived links.
  • Database rules deny access by default. You can read only your own private data.
  • Every server function checks the app's integrity (App Check) and your login.
  • Provider and payment keys are kept in Google Secret Manager and never sent to the app.
  • Logs replace your account ID with a one-way hash and never contain what you type.

No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.

12. The website (www.airtake.app)

  • The website is hosted on Cloudflare. Cloudflare processes your IP address and request details to deliver and protect the site.
  • Analytics only with your consent. Google Analytics loads only after you accept analytics cookies in the cookie banner. If you decline, it does not load. Advertising signals are always off. You can change your choice at any time in the footer. Google Analytics cookies (for example _ga) last up to 2 years unless you clear them.
  • The site does not set advertising cookies.
  • Our internal admin page uses Google reCAPTCHA Enterprise to protect our team's sign-in. The public pages do not load it.

13. Changes to this policy

We may update this policy. We will change the "Last updated" date. If a change is significant, we will tell you in the app before it takes effect, and ask for your consent again where the law requires it.

14. Contact

Alparslan Köprülü (Airtake), Kahramanmaraş 46800, Türkiye

Email: support@airtake.app

Website: www.airtake.app