Privacy Policy

1. Introduction

Welcome to Tunzo ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our data practices for the Tunzo music player application (the "App").

By using Tunzo, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the App.

2. Information We Collect

2.1 Information You Provide Directly

When you use Tunzo, we collect the following information through Google Authentication:

• Name: Your display name associated with your Google account
• Email Address: Your email address associated with your Google account
• Google Authentication Token: A unique identifier provided by Google to authenticate your account

2.2 Information Stored Locally on Your Device

The following data is stored exclusively on your mobile device using local storage and is never transmitted to our servers:

• Liked Songs: Your list of favorite tracks
• Playlists: Custom playlists you create
• App Preferences: Settings such as theme, playback quality, and other customization options
• Music Files: Audio files stored on your device that you access through the App
• AI Interaction Data: Your conversations with the AI assistant and AI-generated insights

2.3 Information We Do Not Collect

Tunzo does NOT collect:

• Your music files or audio content
• Your location data
• Your device contacts
• Your browsing history
• Any personally identifiable information beyond what is provided through Google Authentication
• Analytics or tracking data about your app usage patterns

3. How We Use Your Information

3.1 Information Stored in Our Database (Firestore)

The limited information we collect (name, email, and Google authentication token) is used solely for:

• Account Management: Creating and maintaining your user account
• Authentication: Verifying your identity when you log in to the App
• User Support: Responding to your inquiries and providing customer support
• Service Improvements: Understanding general usage patterns to improve the App (in aggregate, anonymized form only)
• Security: Detecting and preventing fraudulent activity or unauthorized access

3.2 Local Data Usage

Data stored locally on your device is used to:

• Provide personalized music recommendations
• Remember your preferences and settings
• Enable offline playback functionality
• Power AI features such as song insights and intelligent suggestions
• Maintain your playlists and liked songs

4. Data Storage and Security

4.1 Cloud Storage (Firestore)

Your name, email, and Google authentication token are securely stored in Google Cloud Firestore, a cloud-hosted NoSQL database. We implement industry-standard security measures including:

• Encryption in transit using HTTPS/TLS protocols
• Encryption at rest for all stored data
• Strict access controls limiting who can view or modify your data
• Regular security audits and updates
• Compliance with Google Cloud Platform security standards

4.2 Local Storage

All other data is stored locally on your device using secure local storage mechanisms provided by your operating system. This data is protected by your device's security features, including device encryption and access controls.

4.3 Data Retention

We retain your account information (name, email, authentication token) for as long as your account remains active. If you delete your account, we will permanently delete your information from our servers within 30 days, except where we are required to retain it for legal or regulatory purposes.

5. Data Sharing and Disclosure

5.1 Third-Party Sharing

5.2 Service Providers

We use the following third-party services to operate the App:

• Google Firebase: For authentication and cloud database services (Firestore). Google may process your data in accordance with their Privacy Policy.
• Google AI (Gemini): For AI-powered features such as song insights and recommendations. AI processing occurs in real-time and does not permanently store your queries or interactions.

These service providers have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency), including to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing in connection with the App
• Protect the personal safety of users or the public

6. Your Rights and Choices

6.1 Access and Control

You have the following rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you
• Correction: You can update or correct your account information at any time through the App settings
• Deletion: You can request deletion of your account and associated data
• Data Portability: You can request a copy of your data in a structured, machine-readable format

6.2 Local Data Management

Since most of your data is stored locally on your device, you have complete control over it. You can:

• Clear your liked songs, playlists, and listening history at any time through the App
• Uninstall the App to remove all locally stored data
• Manage app permissions through your device settings

6.3 Account Deletion

To delete your account and all associated data from our servers, please contact us at the email address provided in the "Contact Us" section below. We will process your request within 30 days.

7. Children's Privacy

Tunzo is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we discover that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction. By using Tunzo, you consent to the transfer of your information to Google Cloud servers, which may be located in various countries around the world.

We take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy, regardless of where it is processed.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the new Privacy Policy in the App
• Updating the "Effective Date" at the top of this Privacy Policy
• Sending you a notification through the App or via email (for significant changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the App after any changes indicates your acceptance of the updated Privacy Policy.

10. AI Features and Data Processing

Tunzo uses Google's Gemini AI to provide intelligent features such as song insights, recommendations, and chat assistance. Here's how AI features work:

• Real-Time Processing: AI queries are processed in real-time and are not permanently stored by us or Google
• Local Context: The AI uses information from your local device (such as currently playing songs) to provide personalized responses
• No Training Data: Your interactions with the AI are not used to train or improve AI models
• Privacy-Focused: AI features are designed to work with minimal data transmission

11. Security Measures

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it, including:

• Secure authentication using Google's OAuth 2.0 protocol
• Encrypted data transmission using industry-standard SSL/TLS protocols
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis
• Secure cloud infrastructure provided by Google Cloud Platform

However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

12. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (note: we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR), including:

• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing
• Rights related to automated decision-making and profiling

To exercise these rights, please contact us using the information provided below.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

15. Consent

By using Tunzo, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with this Privacy Policy, please do not use the App.