Privacy Policy

Last Updated: April 17, 2026

1. Information We Collect

1.1 Anonymous Account and Session Information

When you start using Tuneo, we may create an anonymous account and session so the app can function without requiring a traditional sign-up flow. This may include an internal user ID, session tokens, refresh tokens, install identifier, app identifier, country or region information, platform information, and related timestamps.

1.2 Content You Provide for Music Generation

When you use Tuneo’s core creation features, we may collect and process the content you submit to generate music, such as:

• Text prompts and song descriptions
• Lyrics that you write or submit
• Style, model, singer voice, recording, or other generation settings
• Task identifiers, generation status, and generated output metadata
• Generated audio files and related delivery URLs when needed to provide your result and history

1.3 Purchase and Subscription Information

If you purchase a subscription or other in-app product, we may receive and process transaction-related data needed to validate your purchase and unlock paid features. This may include product identifiers, transaction identifiers, signed transaction information, signed renewal information, subscription status, expiration data, and credits balance information.

1.4 Feedback and Support Information

If you send feedback through Tuneo, we may collect the content of your message, complaint category, related task identifier, app version, submission time, and your internal user ID so we can investigate and respond.

1.5 Device, App, and Usage Information

We may collect limited technical information to operate, secure, and improve the app, such as app version, operating system version, device model, language or region settings, network or request diagnostics, feature usage events, and task lifecycle events.

1.6 Advertising and Attribution Information

With your permission where required by Apple’s AppTrackingTransparency framework, Tuneo may access the device advertising identifier (IDFA) and share limited attribution or app event information with Meta/Facebook for advertising measurement and attribution. If you do not grant permission, Tuneo will not access IDFA for tracking.

1.7 Saved Content on Your Device

If you choose to export or save generated results, Tuneo may request permission to save content to your device media library or open the iOS share sheet so you can distribute content using other apps or services you choose.

2. How We Use Information

We use collected information to:

• Provide anonymous sign-in, session continuity, and account state
• Generate AI music and deliver your requested outputs
• Maintain your generation history and user status
• Process, validate, restore, and manage subscriptions and in-app purchases
• Measure app performance, stability, attribution, and feature adoption
• Detect abuse, fraud, misuse, and service errors
• Respond to feedback, troubleshoot issues, and improve the service
• Comply with legal obligations and enforce our terms

3. AI Processing and Third-Party Providers

Tuneo uses AI technology to generate music from user-provided inputs. To provide these features, your prompts, lyrics, selected creation settings, technical task metadata, and related generation content may be processed on our backend and, where necessary, by carefully selected third-party providers that help us operate the service.

3.1 Third-Party AI Providers

For Tuneo’s current music-generation workflow, our backend may route generation requests to third-party AI music providers, including providers such as Mureka and Volcengine, depending on system availability and configuration. These providers may receive the content required to generate your requested output, such as prompts, lyrics, style selections, and technical task parameters.

3.2 Other Service Providers

We also use service providers that help us deliver the app, including:

• Supabase for backend infrastructure, authentication, data storage, and media delivery
• Apple for in-app purchases, subscription processing, and in-app review features
• Meta/Facebook for advertising attribution, app event measurement, and related analytics when permitted

3.3 Provider Use Limitations

We require service providers to process information for legitimate business purposes related to delivering Tuneo, such as hosting, payments, AI generation, analytics, attribution, and support. We do not sell your personal information. We do not use Tuneo’s current core workflow to collect biometric identifiers or face data.

4. Legal Bases and Consent

Depending on where you live, we rely on one or more of the following legal bases to process information: your consent, performance of our contract with you, our legitimate interests in operating and improving Tuneo, and compliance with legal obligations. By submitting prompts, lyrics, or other generation inputs through Tuneo, you authorize us and our service providers to process that content to deliver the requested output.

5. Sharing of Information

We may share information in the following situations:

• With hosting, infrastructure, analytics, payment, attribution, and AI generation providers as described in this Privacy Policy
• With Apple to process purchases, validate subscriptions, restore entitlements, and provide platform functionality
• With Meta/Facebook for attribution and measurement if you authorize tracking where required
• With advisors, auditors, insurers, or legal authorities where necessary to protect rights, investigate misuse, or comply with law
• In connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable confidentiality and legal requirements

We do not sell your personal information for money. We do not disclose your content to unrelated third parties except as described in this Privacy Policy or with your direction.

6. Data Retention

We retain information for as long as reasonably necessary to provide Tuneo, maintain security, preserve account continuity, comply with law, resolve disputes, and enforce our agreements. Retention periods may vary by data type.

• Session and authentication data: retained for login continuity, security, and token refresh handling until replaced, expired, or no longer needed.
• Prompts, lyrics, task records, generation metadata, and generated outputs: may be retained while associated with your account history and service operations, and may remain in backups for a limited period before deletion or overwriting.
• Purchase and subscription records: retained as required for accounting, fraud prevention, tax, and legal compliance.
• Feedback and support records: retained as needed to investigate issues, improve the service, and maintain support history.

You may request deletion of personal data associated with your account. We will review and process verified deletion requests within 30 days unless we are required or permitted to keep certain information by law.

7. Data Security

We use reasonable technical and organizational safeguards to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, authentication controls, secure transport, and restricted operational access. However, no method of electronic transmission, storage, or processing is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

Tuneo and its service providers may process or store information in countries other than your own. By using Tuneo, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection laws than those in your place of residence.

9. Your Rights and Choices

Depending on your jurisdiction, you may have rights to request access to, correction of, deletion of, restriction of, or portability of your personal information, or to object to certain processing. You may also have the right to withdraw consent where processing is based on consent.

You can also manage certain choices directly through your device or the app, including:

• AppTrackingTransparency settings for tracking and IDFA access
• Device permissions for saving exported content
• Deletion of locally saved outputs from your own device

To exercise privacy rights or request deletion, contact us using the email in Section 12 and include enough information for us to identify your request, such as your Tuneo user ID if available.

10. Children’s Privacy

Tuneo is not directed to children under the age of 13, or the equivalent minimum age in the relevant jurisdiction, and we do not knowingly collect personal information from such children. If you believe a child has provided personal information to Tuneo, contact us so we can investigate and delete the information where appropriate.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in Tuneo, applicable law, or our data practices. When we do, we will post the updated version here and revise the “Last Updated” date above. Material changes may also be communicated through the app or by other appropriate means.

12. Contact Us

If you have questions about this Privacy Policy, want to request deletion, or want to exercise privacy rights, contact us at:

Email: [email protected]