Privacy Policy

We collect the following categories of information:

• Account information: your email address and authentication identifiers, handled through our authentication provider (including optional Google sign-in).
• Profile information: details you add, such as a display name and avatar.
• Tone requests and results: the inputs you submit (for example song, artist, style, gear, pickups, and monitoring) and the generated tone outputs, including saved tones and recent generations.
• Feedback: ratings (such as thumbs up/down), optional comments, and app-wide feedback you choose to send.
• Usage and billing status: generation and save counts, plan and subscription status, and related records. Payments are handled by our payment processor; we do not store full payment-card numbers.
• Technical and log data: information generated automatically when you use the Service, such as request metadata, approximate timing, device/browser information, and IP-derived data used for security, rate limiting, and diagnostics.

We use information to:

• provide, operate, maintain, and secure the Service;
• generate tone outputs from your inputs and deliver your results;
• enforce plan limits, process subscriptions, and prevent abuse or fraud;
• respond to feedback and support requests;
• analyze and improve the Service, including the quality of generated tones; and
• comply with legal obligations and enforce our Terms.

To operate the Service we share information with third-party providers (processors) that act on our behalf. Importantly, when you generate a tone, the inputs you submit (and related context) are transmitted to third-party AI providers — currently large-language-model providers such as Google (Gemini) and/or OpenAI — so they can produce the output. That data is processed under those providers’ own terms and privacy practices, which we do not control.

Our key providers include:

• AI model providers (e.g., Google, OpenAI) — generate tone outputs from your inputs.
• Authentication, database, and hosting providers — store your account, profile, tones, feedback, and usage data, and run the application.
• Payment processor — handles checkout, subscriptions, and billing; it receives the information needed to process your payment.
• Music-metadata sources — when you search for or generate a tone for a song, song and artist terms may be sent to a music-metadata service to retrieve details and cover artwork.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with processors as described here, to comply with law, or in connection with a business transfer.

Where the GDPR or UK GDPR applies, we process personal data on these bases: performance of our contract with you (to provide the Service); our legitimate interests (to secure, maintain, and improve the Service and prevent abuse); your consent (where requested, such as optional features); and compliance with legal obligations.

We use strictly necessary cookies to keep you signed in and to operate core features (session cookies set by our authentication provider). We do not use third-party advertising or cross-site tracking cookies. You can control cookies through your browser, but disabling essential cookies may break sign-in and other functionality.

We keep information for as long as needed to provide the Service and for legitimate business or legal purposes. In particular: recent generations are intended to remain available for a short window (about one hour) before they drop out of your recent-generations view; saved tones persist until you delete them; and account and profile data persist until you delete your account. Some records (such as billing and security logs) may be retained longer where required by law. When you delete your account from the Account page, we delete or de-identify associated personal data, subject to those legal retention needs.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the use of your personal information, and to object to certain processing. You can:

• view and edit your profile, and manage or delete saved tones, in the app;
• delete your account from the Account page, which removes associated personal data subject to legal retention; and
• contact us at ommy@dialmytone.com to exercise any right.

For California residents: we do not sell or “share” personal information as those terms are defined under the CCPA/CPRA, and we will not discriminate against you for exercising your rights. We will verify requests as required by law.

We use reasonable technical and organizational measures — including encryption in transit, access controls, and database row-level security — to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

We and our providers may process and store information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers. By using the Service, you understand your information may be transferred to and processed in such locations.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

If you have questions or requests regarding this Policy or your personal information, contact us at ommy@dialmytone.com.