Privacy Policy
Last updated: 2026-04-27
What we collect
- Microphone audio — processed entirely in your browser. It is never transmitted to our servers and never stored. Tuners and pitch detectors run on your device using the Web Audio API.
- Account data — your email and an optional display name, only if you sign in. Anonymous use of all free tools requires no account.
- Subscription state — when you subscribe, PayPal handles all payment data (card, billing address, tax info). We receive only your subscription status (active, cancelled, expired) and the plan you chose.
- Usage analytics— via Google Analytics, with anonymized IP. We log page views, user agent, and custom events tied to tool interactions (e.g. "tuner started", "upgrade clicked").
- Cookies — see our Cookie Policy for the full list.
What we do NOT collect
- We never record, transmit, or store any audio from your microphone. Pitch detection happens locally and the raw audio buffer is discarded immediately.
- We never sell user data. Not to advertisers, not to anyone.
- We never share your email with third parties for marketing purposes.
Why we collect what we collect
Analytics help us understand which tools are useful and where users get stuck so we can improve the product. Account data is used only to deliver the premium subscription you signed up for and to let you sync practice history across devices. Payment data is routed entirely through PayPal for billing — we don't see card numbers and never will.
Third-party services
- Google Analytics — anonymized usage analytics. Google privacy policy.
- PayPal — payment processing for premium subscriptions and lifetime plans. PayPal privacy policy.
- Firebase (Google) — authentication and database for accounts and subscription state. Firebase privacy and security.
- Google AdSense — advertising on the free tier only. Signed-in premium users see no ads. Google privacy policy.
Your rights (GDPR)
If you are in the European Economic Area, you have the right to access, rectify, delete, port, or object to processing of your personal data. To exercise any of these rights, email privacy@tunory.com. We will respond within 30 days.
Your rights (CCPA)
California residents have the right to know what personal information we collect, the right to request deletion of that information, and the right to opt out of the sale of personal information. We do not sell personal information. To make a CCPA request, email privacy@tunory.com.
Children's privacy
Tunory's free tools are usable without an account. Kids Mode is specifically designed for use by children under 13, and is intended to be supervised by a parent or guardian. We do not knowingly collect personal data from anyone under 13. If you believe a child under 13 has provided personal data through Tunory, please email privacy@tunory.com and we will delete it promptly.
Data retention
- Analytics — 14 months (Google Analytics default).
- Account data — kept until you delete your account, after which it is removed within 30 days.
- Subscription records — 7 years, as required by tax and accounting law.
Security
All traffic to Tunory is encrypted in transit via TLS. Account data and subscription records are stored in Firebase, encrypted at rest using Google Cloud's platform encryption. We follow standard industry practices for credential storage, access control, and audit logging — but no system is 100% secure, and we recommend using a strong, unique password for your Tunory account.
Changes
When we update this policy, we will change the "Last updated" date at the top. For material changes that affect how we handle your data, we will notify you by email if you have an account.
Contact
For privacy questions or to exercise any rights described above, email privacy@tunory.com. Tunory is operated by Yalintech.