OnAir

Privacy Policy

OnAir (Android app) and OnAir Host (PC program), by Apolonio Serafim da Silva Segundo.

In effect since November 14, 2026.

Summary

This is the Privacy Policy of OnAir (the Android app, package br.com.a3sitsolutions.noar; called NoAr in Portuguese) and of the OnAir Host (the PC program, which uses the name NoAr), developed by Apolonio Serafim da Silva Segundo, an individual (the “developer”). It also covers this website, which is on the domain a3sitsolutions.com.br.

  • In this version (0.1.0), the product has no account or login, no developer server, shows no ads, includes no third-party components that collect data, does no usage analytics and sends no crash reports.
  • The app and the host send nothing to the developer or to the internet. What exists stays on your tablet and your PC.
  • Tablet and PC talk over the local network, unencrypted in this version. Use it only on a network you trust.
  • This policy applies even though the product collects no personal data: it explains what is stored, where, and how to erase it.

In effect since November 14, 2026.

Who we are

Developer and person responsible for this policy: Apolonio Serafim da Silva Segundo, an individual, Brazil. This is the name under which the app and the host appear in the stores.

Privacy contact: apolonio.serafim@hotmail.com

The developer does not receive the app's or the host's data, so does not act as controller or processor of it. The developer processes only the data of people who get in touch (see “Who contacts support”) and this website's access logs.

Data on the tablet

Stored only on the device:

  • The list of paired PCs: identifier, name, address, port and program (OBS or Streamlabs).
  • The pairing token of each PC, encrypted (AES-GCM, with a key held in the Android Keystore).
  • A random identifier for this tablet, created by the app.
  • Your preferences: vibration, language and the like.

The device name is sent to the OnAir Host on the paired PC so it appears under “Paired tablets”. Android backup is turned off for the app, so this data does not go to Google's cloud that way.

Data on the PC

The host stores, in its data folder (%APPDATA%\NoAr on Windows; ~/Library/Application Support/NoAr on macOS; ~/.config/noar on Linux):

  • The PC identifier and name.
  • Paired tablets: identifier, name, a hash of the token (not the token), dates.
  • The preferred program (Automatic, OBS or Streamlabs).
  • The scene, Mixer and Deck setup for each program.
  • The OBS WebSocket server password, when you type it on the tablet. It is kept in a local file, unencrypted today, only on your PC.
  • Operation logs, in the logs folder (up to 4 files of 1 MB), with tablet names, the PC name and local network addresses.

The host talks to OBS or Streamlabs only inside the PC itself. The host settings page only opens on the PC itself.

What we do not collect

The app and the host do not collect or send: name, e-mail, phone, location, contacts, photos, microphone, camera, advertising identifiers, usage data, crash reports or the content of your broadcast. There is no sign-up. For Google Play, this matches declaring that the app does not collect or share user data.

Local network and permissions

OnAir works over your local network. The host listens on port 4460 and announces itself on the network by mDNS (_noar._tcp), with the PC name, so the tablet can find it. The tablet uses the local network to find the PC and talk to it. That is why the app asks for these Android permissions:

  • INTERNET and ACCESS_NETWORK_STATE: to open the connection to the PC and know the network state. The app does not talk to servers on the internet.
  • CHANGE_WIFI_MULTICAST_STATE: to receive the PC's mDNS announcement (discovery on the local network).

The app also keeps the screen on during operation and uses vibration for touch feedback (configurable). On Android versions that treat local network access as a separate permission, the app uses it only to find the PC and talk to it.

The conversation between tablet and PC is not encrypted

This version has no TLS. Someone on the same network who knows what to look for could observe the traffic between tablet and PC. Use OnAir only on a network you trust. Pairing by code stops another tablet from controlling the program without your authorization.

Sharing

We share data with no one, because we do not receive it. In this version, the app and the host include no third-party analytics, advertising or crash-reporting libraries. The data passing between the tablet, the host and OBS or Streamlabs stays on your PC and your network.

Retention, deletion and revocation

The data stays with you, and you decide for how long. How to erase it:

  • On the tablet: in Settings › PCs, Forget this PC; or uninstall the app, or clear its data in Android settings.
  • On the PC: uninstall the host and delete the data folder. Uninstalling removes the firewall rule and the automatic start, but does not delete the data folder.
  • Revoking a tablet's access: on the host page, under Paired tablets, Revoke.
  • Logs keep at most 4 files of 1 MB: the oldest are replaced.

Account deletion: does not apply, because the product has no accounts.

Security

The pairing token on the tablet is encrypted with a key in the Android Keystore, and the host stores only its hash. Pairing requires a 6-digit code shown on the PC, valid for 2 minutes, for one tablet, and invalidated after 5 mistakes. The host only opens its settings page on the PC itself. Known limits of this version: unencrypted communication (no TLS) and the OBS WebSocket password in an unencrypted local file.

This website

This website uses no cookies, no analytics, and no third-party fonts, scripts or any other external resource. As on any website, the web server records each request (IP address, date and time, requested page, browser). We use these logs only for security and to keep the service running. Retention period: up to 90 days.

Who contacts support

If you write to support or to the privacy contact, we process what you send (e-mail, name, the description of the problem and any logs you attach) to answer and fix the issue. Basis: your request and the legitimate interest in helping you. We keep the history as long as needed for the support and to meet legal obligations. Host logs can contain tablet names and addresses of your network: review them before sending.

Your rights (GDPR and LGPD)

Because the product does not send data to the developer, the data in the app and the host is under your direct control. For the data the developer does process (support contact and website access logs), the Brazilian General Data Protection Law (LGPD, Law 13,709/2018) and, for people in the European Union, the GDPR give you the right to:

  • confirm whether we process your data and access it;
  • correct incomplete or outdated data;
  • ask for deletion, anonymization or blocking of data;
  • ask for portability;
  • know with whom data was shared (no one, today);
  • withdraw consent where it is the basis for processing, and object to processing;
  • complain to the Brazilian data protection authority (ANPD) or to the authority in your country.

Write to apolonio.serafim@hotmail.com. We will answer within the time the law sets.

Children

OnAir is a tool for people who stream live and is not directed at children. We do not knowingly collect children's data and, in any case, the app collects no one's data.

Changes to this policy

This policy describes the current version. If the product changes (for example with ads, third-party components or a feature that uses the internet), the changes will be published on this page, with a new effective date, before they take effect. The date at the top of this page is the current version's: November 14, 2026.

Privacy contact

Apolonio Serafim da Silva Segundo, an individual, Brazil.
Privacy contact: apolonio.serafim@hotmail.com