Privacy Policy

We collect the following categories of information:

• Account information: your email address and authentication identifiers, handled through our authentication provider (including optional Google sign-in).
• Profile information: details you add, such as a display name and avatar.
• Tone requests and results: the inputs you submit (for example song, artist, style, gear, pickups, and monitoring) and the generated tone outputs, including saved tones and recent generations.
• Feedback: ratings (such as thumbs up/down), optional comments, and app-wide feedback you choose to send.
• Usage and billing status: generation and save counts, plan and subscription status, and related records. Payments are handled by our payment processor; we do not store full payment-card numbers.
• Technical and log data: information generated automatically when you use the Service, such as request metadata, approximate timing, device/browser information, and IP-derived data used for security, rate limiting, and diagnostics.

We use information to:

• provide, operate, maintain, and secure the Service;
• generate tone outputs from your inputs and deliver your results;
• enforce plan limits, process subscriptions, and prevent abuse or fraud;
• respond to feedback and support requests;
• send you our newsletter and occasional product updates, unless you have opted out;
• analyze and improve the Service, including the quality of generated tones; and
• comply with legal obligations and enforce our Terms.

To operate the Service we share information with third-party providers (processors) that act on our behalf. Importantly, when you generate a tone, the inputs you submit (and related context) are transmitted to third-party AI providers — currently large-language-model providers such as Google (Gemini) and/or OpenAI — so they can produce the output. That data is processed under those providers’ own terms and privacy practices, which we do not control.

Our key providers include:

• AI model providers (e.g., Google, OpenAI) — generate tone outputs from your inputs.
• Authentication, database, and hosting providers — store your account, profile, tones, feedback, and usage data, and run the application.
• Payment processor — handles checkout, subscriptions, and billing; it receives the information needed to process your payment.
• Music-metadata sources — when you search for or generate a tone for a song, song and artist terms may be sent to a music-metadata service to retrieve details and cover artwork.
• Analytics provider (Google Analytics) — receives pseudonymous usage data about how you interact with the Service so we can measure and improve it.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with processors as described here, to comply with law, or in connection with a business transfer.

Where the GDPR or UK GDPR applies, we process personal data on these bases: performance of our contract with you (to provide the Service); our legitimate interests (to secure, maintain, and improve the Service and prevent abuse); your consent (where requested, such as optional features); and compliance with legal obligations.

For our newsletter, we rely on our legitimate interest in telling existing customers about the Service they signed up for, and on your consent where you gave it to us directly. You can withdraw at any time from the Account page or the unsubscribe link in any marketing email, and doing so does not affect your account or anything else we have already done with your data.

We use strictly necessary cookies to keep you signed in and to operate core features (session cookies set by our authentication provider). You can control cookies through your browser, but disabling essential cookies may break sign-in and other functionality.

We also use Google Analytics 4, a Google service, to measure how the Service is used (for example, pages viewed and product interactions such as tone generations) so we can improve it. Google Analytics sets first-party analytics cookies and processes usage data — including device information, approximate (IP-based) location, and a pseudonymous identifier derived from your account, which lets us recognise the same account across devices — in order to provide analytics services to us.

We instruct Google Analytics to deny advertising storage, advertising user data, and advertising personalisation, and we do not use Google Analytics data for advertising, remarketing, or building advertising audiences. We do not sell your information.

Your choices. If you are in the European Economic Area, the United Kingdom, or Switzerland, we do not set analytics cookies at all unless you agree when asked. Everywhere else, analytics is on by default and you can turn it off at any time. Either way you can change your decision whenever you like using the Cookie preferences link in the footer of every page. Refusing analytics does not limit your access to the Service in any way.

We also honour the Global Privacy Control (GPC) and Do Not Track browser signals worldwide: if your browser or extension sends either, we treat it as an opt-out and do not enable analytics cookies unless you later opt in here yourself. You may additionally use Google’s opt-out browser add-on (tools.google.com/dlpage/gaoptout).

We keep information for as long as needed to provide the Service and for legitimate business or legal purposes. In particular: recent generations are intended to remain available for a short window (about one hour) before they drop out of your recent-generations view; saved tones persist until you delete them; and account and profile data persist until you delete your account. Some records (such as billing and security logs) may be retained longer where required by law. When you delete your account from the Account page, it is disabled immediately and scheduled for permanent deletion after a 30-day grace period, during which you can reactivate it by signing back in. On permanent deletion we delete your associated personal data (including saved tones) and de-identify any analytics we retain, subject to those legal retention needs.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the use of your personal information, and to object to certain processing. You can:

• view and edit your profile, and manage or delete saved tones, in the app;
• turn our newsletter on or off at any time on the Account page, or use the unsubscribe link in any marketing email;
• delete your account from the Account page, which removes associated personal data subject to legal retention; and
• contact us at contact@dialmytone.com to exercise any right.

For California residents: we do not sell or “share” personal information as those terms are defined under the CCPA/CPRA, and we will not discriminate against you for exercising your rights. We will verify requests as required by law.

We use reasonable technical and organizational measures — including encryption in transit, access controls, and database row-level security — to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

We and our providers may process and store information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers. By using the Service, you understand your information may be transferred to and processed in such locations.

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you are under 18, you should use the Service only with the involvement of a parent or legal guardian; as explained in our Terms, we ask you to confirm your age at sign-up but we do not otherwise verify it. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

If you have questions or requests regarding this Policy or your personal information, contact us at contact@dialmytone.com or through our Contact page.