Privacy Policy

1 Information you give us

• Account: your email address, which we use to send your sign-in codes, and the username you choose. A profile photo too, if you add one.
• Your taste: the artists and genres you pick. From these and your swipes we build a taste profile, a set of numbers that describes the kind of sound you like.
• Searches: the songs and artists you search, the moods you type, the playlists you share with us, and the filters and settings you use, like Energy or Underground.
• Activity: your Discover swipes, saved songs, journal entries, Song of the Day picks, the picks you like, the people you follow, artists you ask us to add, and the thumbs up or down you give suggestions.
• Purchases: what you buy (Premium, search packs or swipe packs), your subscription status and your remaining balances. Apple handles the payment, so we never see your card details.
• Messages: emails you send us, and our replies.

2 Information collected automatically

• How you use the app: events like opening the app, running a search, playing a preview, or saving or opening a song, including the song or mood involved. We record these with your account ID and email address so we can understand how Attune is used.
• Device and network: your device type, operating system, app version, language, time zone and IP address. Our analytics provider uses the IP address to estimate your city and country.
• Crash reports: when the app crashes or hits an error, a report with technical details, such as your device model, operating system, app version and what the app was doing. These reports aren't linked to your account.
• Notification token: if you allow notifications, a token that lets us send them to your phone.
• Random IDs: the app creates a random ID on your phone that's saved with your thumbs up and down, and our analytics provider uses its own random ID until you sign in.
• Server logs: our servers and hosting providers keep standard logs, such as IP addresses and the time of each request, to keep Attune running and secure.

3 Apple Music and Spotify

Connecting either one is optional. You can disconnect in the app at any time, and remove Attune's access in your Apple or Spotify account settings.

• Apple Music: if you allow access, the app can read your playlists and add songs and playlists to your library when you ask it to. This happens between your phone and Apple.
• Spotify: if you connect Spotify, the app can read and change your playlists and Liked Songs, change playlist covers, see what's playing and control playback, and read your Spotify user ID and country. The app talks to Spotify directly from your phone, and your Spotify sign-in stays in your phone's secure storage. It never reaches our servers.
• Playlists you share: when you paste a playlist link or pick a playlist to analyze, we read the songs in it from Spotify or Apple Music.

4 What we don't collect

We don't collect your precise location, your contacts or your advertising ID, and Attune doesn't use your microphone or camera. Attune only uses photos you choose: a profile photo, which we store, or a playlist cover, which goes straight to Spotify.

5 How we use your information

Statistics. We combine information across users into statistics that don't identify anyone: for features like Trending and "Top liked today", for suggestions based on what listeners with similar taste liked, and to understand and grow our business. We may share these statistics with partners.

What we don't do. We don't sell your personal information, share it for targeted advertising, or show ads in Attune. We don't track you across other companies' apps or websites.

6 How we use AI

Some features use an AI model from Anthropic to suggest songs and to write the short reason shown with each one. To do that, we send Anthropic the music details involved, which can include:

• the song or artist you searched, and the songs we matched to it
• the mood you typed
• the songs in a playlist you shared

We never send your email address, username or account ID. Anthropic processes this only to answer our request, and under its commercial terms it doesn't use it to train its models. Please don't type personal details, like names or contact information, into the mood box.

7 Who can see or receive your information

Other people on Attune

Your username and profile photo are public, and so are your Song of the Day picks, the picks you like, who you follow and who follows you. Anyone using Attune can see them. Profile photos are stored at a web address that anyone with the link can open.

Other people can't see your email address, searches, swipes, saved songs or journal.

Companies that help run Attune

These providers process information for us so we can run Attune:

Apple and Spotify handle your information under their own privacy policies. Apple processes your App Store purchases, and song previews and artwork load straight from Apple, which sees your IP address. Spotify receives the requests you make through a connected Spotify account.

We also look up public music information, like song details, artwork and listener counts, in music databases. Those lookups contain nothing about you.

When the law requires it

We may share information if we believe in good faith that the law or a valid legal request requires it, or that it's needed to protect someone's safety, to protect our rights or our users, or to stop fraud or abuse.

If Attune changes hands

If we're involved in a merger, acquisition, financing, or sale of all or part of our business, your information may be transferred as part of that deal. The new owner will have to respect this policy, or we'll tell you before your information falls under a different one.

With your permission

Otherwise, we only share your information when you ask us to or agree to it.

8 How long we keep it

9 Your choices and rights

In the app

• Change your username or photo, and edit your taste, from your Profile.
• Remove saved songs and unfollow people at any time.
• Turn notifications off in your phone's Settings.
• Disconnect Apple Music or Spotify.
• Delete your account: Profile, then Delete Account. Your account, profile, taste, swipes, saved songs, journal, Song of the Day picks, likes, follows and balances are removed from our database right away, and from backups within 30 days. Your past searches stay, with nothing linking them to your account. Analytics data isn't removed automatically: it expires within a year, or email us and we'll delete it sooner. Deleting your account doesn't cancel a subscription, so cancel that in your Apple ID settings first.

By email

Email heyattune@gmail.com from the address on your account to:

• get a copy of your information
• correct information that's wrong
• delete your information, including analytics data
• object to, or ask us to limit, how we use it
• withdraw a permission you gave us

We'll reply within 30 days. We may need to confirm the request comes from you, and sometimes the law lets or requires us to keep certain information, which we'll explain. If we turn down your request, reply to ask us to reconsider, and we'll answer within 60 days. Using these rights won't change how we treat you.

EU, UK and Switzerland

We rely on these legal bases to use your information:

• Contract: to run your account, the features you use and your purchases.
• Legitimate interests: for analytics, crash reports, security, statistics and improving Attune. You can object to these.
• Consent: for notifications, Apple Music and Spotify connections, and photos you pick. You can withdraw consent at any time.
• Legal obligations: for tax records and legal requests.

You also have the right to data portability, and to complain to your local data protection authority. Attune is based in the US and stores your information there. When information is transferred out of the EU, UK or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses.

California and other US states

Depending on where you live, US state laws give you the rights listed above: to know about, access, correct and delete your information, and not to be treated differently for using those rights. In the last 12 months we collected identifiers (email address, username, account and device IDs, IP address), commercial information (purchases), app activity, approximate location, photos you upload, content you add, and inferences (your taste profile). We got them from you, your device and the services you connect. We use them for the purposes in section 5 and disclose them to the providers in section 7.

We don't sell or share personal information, as California law defines those terms, and haven't in the last 12 months. We don't use sensitive personal information to infer things about you. You can use an authorized agent to make a request, and we'll ask for proof that you gave them permission. Attune doesn't track you across other apps or websites, so we don't change anything in response to Do Not Track signals.

10 Children

Attune is not meant for children. You must be at least 13 to use it, or older if the law where you live requires it. We don't knowingly collect information from children under 13. If you believe a child under 13 has an account, email heyattune@gmail.com and we'll delete it.

11 Security

We protect your information with encryption in transit, access rules in our database, and sign-in codes instead of passwords. Spotify sign-ins are kept in your phone's secure storage. No system is perfectly secure, so we can't guarantee that your information will never be accessed without permission. If a breach affects your information, we'll tell you as the law requires.

12 Changes to this policy

We'll post any changes here and update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.

13 Contact us

HeyAttune, Inc. · Massachusetts, USA