Privacy policy

Who we are

Tune Trainer (tunetrainer.ai) is run by [legal name and address to confirm], the controller of your data. For anything about your data, write to hello@tunetrainer.ai.

What we collect

Your account: your email address. If you sign in with Google, Google also shares your name, profile picture and Google account id with our sign-in provider. We make you a username, and you can add a display name.
Your profile, if you fill it in: instrument, whether you sing, your voice range (you can measure it in the app), years of playing, styles and goals, time zone, language, practice days and session length, reminder settings and a profile photo. Your profile photo is stored at a public address, so anyone with that link can see it.
Your practice: your answers and scores, practice sessions and their length, progress, streaks and XP, the results of the opening jam, and the path and practice plan built from them.
Things you write or save: practice notes, feedback on exercises, metronome presets and saved jams. A note you choose to share is shown to other members with your username or display name.
Reminders, if you turn them on: the details your browser gives us to send notifications (an address and keys) and your browser type, plus a log of the reminders we sent.
Emails we send you: your sign-in codes and, once, your Musician Card.
The free tools, if you accept cookies: a random id kept in your browser, and what you do in the tools (for example the tempo or the style you pick). If you later create an account on the same browser, we link them to it.
Usage analytics: which pages you visit and how you use the app (see Cookies and analytics below).
Technical logs: our hosting providers keep server logs, which include IP addresses, for security and to fix errors.

Your microphone

The app only uses your microphone after your browser asks you, and only during the exercises that need it.

Singing and improvisation: the sound is analysed on your device. It is not sent to us.
Rhythm: most exercises listen to your taps on the keyboard or the screen, not to the microphone. The syncopation exercises listen to your claps: each take is sent to our server, analysed, and thrown away straight after.

We don't keep any recording of you.

Why we use it

To run the service you signed up for: your account and sign-in, your exercises, progress and path, your plan and the emails that go with them.
With your consent: analytics cookies, the free tools' statistics and the recording of the first steps (see below), practice reminders, and the microphone.
Because we have a legitimate interest in it: counting visits without cookies, keeping the service secure and fixing errors. You can object to these by writing to us.

Cookies and analytics

Some cookies and browser storage are needed for the app to work: keeping you signed in, your language, the page to return to after signing in, the opening jam and your first exercise before you sign up, and your device settings (microphone and headphones choice, timing calibration, display preferences). These don't need your consent.

We use PostHog, hosted in the European Union, to understand how the app is used. Until you answer the cookie question, and if you decline, PostHog counts your visit without cookies: it can't recognise you from one day to the next or link your visits to your account.

If you accept, PostHog keeps a cookie and local storage to recognise your browser, links your visits to your account (by an internal id, never your email), and records your screen on the first steps: the opening jam, the first exercise and sign-up. Text you type is masked in those recordings. This helps us see where the start is confusing.

The free tools ask this question before you use them, and both answers let you in. You can change your answer at any time with Cookie settings, in your profile menu or at the bottom of the free tools.

These providers process data for us, under contracts that only let them use it to provide their service:

Supabase: database, sign-in and file storage, in the European Union (Ireland).
Vercel: hosting and server functions, including the analysis of syncopation takes (nothing is kept).
Resend: delivery of our emails.
PostHog: usage analytics, in the European Union.
Google: only if you choose to sign in with Google.
The push service of your browser (for example Google, Apple or Mozilla): only if you turn reminders on.
GitHub Pages and jsDelivr: they serve some of the instrument sounds, so they see your IP address when the app loads them.

Vercel and Resend are based in the United States. Where data leaves the European Union, we rely on the safeguards the law provides, such as the EU-US Data Privacy Framework or standard contractual clauses.

How long we keep it

We keep your account and practice data for as long as your account exists. When you delete your account, we delete it with everything in it, your files included. Analytics are kept for the period set in our PostHog project, and server logs for the short period our hosting providers set.

Your rights

You can ask to see the data we hold about you, correct it, delete it (your whole account included), get a copy to take elsewhere, limit or object to how we use it, and withdraw your consent at any time. You can delete your account yourself, at the bottom of your profile page. For anything else, write to hello@tunetrainer.ai from the email address of your account: we answer within one month.

If you think we haven't respected your rights, you can complain to the CNIL (cnil.fr), the French data protection authority, or to the authority of the country you live in.

Children

Tune Trainer isn't designed for children. If you are under 15, ask a parent or guardian before creating an account.

Changes

When this policy changes, we update this page and its date. If a change matters for how we use your data, we'll tell you in the app or by email before it applies.