Privacy Policy
Effective date: October 23, 2026
This policy explains what data ToneASAP, formerly known as ToneAdapt (“we”, “us”, “the app”) collects, how it is used, and the choices you have.
1. Information we collect
- Account information — your email address and, if you sign in with Google, your display name and profile photo. Passwords are stored only in securely hashed form.
- Content you create — the gear you add and the tone matches you save.
- Subscription status — payments are processed by Google Play. We never receive your payment card details; we store only your subscription status so the app can unlock Pro features.
- Usage data — basic app-usage events used to improve the app and prevent abuse, including the country your device connects from. Older events are routinely deleted.
- Device identifiers — a push-notification token, so we can send you notifications you have opted into, and the Android advertising identifier, which our subscription provider uses to recognise your device. Neither is used to show you ads.
2. How we use your information
- To provide the app's features and keep your library in sync across devices.
- To generate tone settings — the song and gear details you enter are processed by AI services. These requests never include your name, email, or account identifiers.
- To send essential account emails (confirmations, password reset codes). We do not send marketing emails.
- To manage your subscription and operate the service.
- To send push notifications about your account and subscription, if you allow them. You can turn them off at any time in your device settings.
3. Public content
Tones you save may appear in the app's public Explore feed. Your email address is never shown publicly. Contact us to have any of your tones removed from the feed.
4. Sharing
We do not sell your personal data and we do not show ads. Data is shared only with the service providers necessary to run the app, and where required by law. Those providers are: Supabase (hosting and authentication), Adapty (subscription management — receives your email address, name if provided, purchase history and device identifier), Google Firebase (push notification delivery — receives your push token), Resend (account emails), Cloudflare (network delivery), and AI providers that process the song and gear details you enter, never your identity.
5. Your rights
You can view and edit your profile and content in the app. You can request deletion of your account and associated data at any time — see how to delete your account; you can also delete it yourself from Profile → Delete account in the app. We complete deletion requests within 30 days. Depending on where you live, you may have additional rights under local law — contact us and we will honour them.
To prevent abuse of the free tier, when an account is deleted we keep, for 30 days only, a one-way hash of the email address (not the address itself) together with the number of free matches already used. It cannot be turned back into an email address and is deleted automatically after 30 days.
6. Security
Your data is encrypted in transit and protected by access controls so users can only access their own records.
7. Changes
If we make material changes to this policy, we will update the effective date above. Continued use of ToneASAP after changes take effect means you accept the updated policy.