Tuneliq Privacy Policy
Version 1.0.6 · Effective July 11, 2026
ONEDO INC. ("Tuneliq", "we", "us") respects your privacy. Tuneliq is an AI music greeting card: a gift-giver writes a heartfelt message in our app, our AI turns it into a personalized song, and the song can be written onto a physical card or shared by link or QR code. This policy explains what information we handle and why.
Our promise in one line: We process only the information needed to provide Tuneliq. Your voice recording and files saved on your device stay local by default; to provide accounts, song generation, sharing, purchases, notifications, customer support, security, and product improvement, we and necessary service providers process the relevant information as described below.
1. Who this applies to
- Gift-givers — people who use the app to create and manage songs, usually with an account.
- Card recipients — people who listen from a finished physical card. They need no account, app, or internet connection, and we do not collect information about them through the card.
- People who open a share link — anyone who opens a song shared through a browser. We process limited technical and interaction information about that visit (see §5).
2. Our privacy commitments
- Data minimization. We process only information needed to provide, protect, and improve Tuneliq.
- Local content. Your voice recording and files saved to your device stay on your device by default unless you actively upload, share, or send them.
- Generation processing. Creative input and generation-task data are processed through our service and necessary providers to complete, recover, and support generation tasks.
- Sharing stays under your control. A song becomes available through a share link only when you create that share, and you may revoke it at any time.
- No sale or personalized advertising. We do not sell personal information or use your creations for personalized advertising.
- The physical gift stays with its holder. Once a card is given away, it cannot be remotely locked, erased, or rewritten.
3. Information we process
| Category | What it includes | Why and how we process it |
|---|---|---|
| Account and profile information | Email, sign-in identifier, and basic profile information you provide | Register, sign in, manage your account, and provide support |
| Creative input | Message, recipient details, lyrics, style choices, and other generation instructions | Create, process, recover, and support generation tasks through our service and generation providers |
| Voice recording (optional) | A short recording you add | Processed on your device to combine with the song; not uploaded for song or lyric generation |
| Generation tasks and results | Task status, title, song, lyrics, and related result information | Deliver results, restore task progress, and resolve service issues; selected content is used for sharing only when you create a share |
| Shared song content | Audio, lyrics, title, dedication, and other content you choose to include | Host and deliver the song to anyone who has the share link |
| Share-link activity | Random browser identifier, IP address for security and rate limiting, and interactions such as likes or ratings | Operate the share page, count interactions, and prevent abuse |
| Purchases | Product, transaction, receipt, subscription, and entitlement information | Process purchases and manage subscriptions, credits, and access; payment-card details are handled by the applicable store or payment provider |
| Product analytics and attribution | Pseudonymous account, installation, app, or device identifiers; screens, features, source or campaign, sharing, and purchase events | Understand use, measure acquisition and promotional effectiveness, and improve the service; not used for personalized advertising |
| Crash and diagnostic data | Crash reports, errors, performance data, app and device context, relevant navigation or request context, and masked session-replay samples | Diagnose faults, protect the service, and improve stability |
| Notification data | Notification token, device platform, and delivery status | Send service notifications you allow, such as song-completion alerts |
| Profile avatar (optional) | An image you choose for your account | Store and display it with your account until you replace it or close the account |
| Feedback and support | Feedback, reply email, attachments, and the account, app, device, and diagnostic context needed to investigate the issue | Respond to, investigate, and resolve your request |
We do not: sell personal information; use your creations for personalized advertising; make a song publicly available unless you create a share; or actively collect information about physical-card recipients through the card.
4. How we use information
- Provide accounts, song generation, card writing, sharing, purchases, notifications, and customer support.
- Operate share links and the web player, including security and anti-abuse controls.
- Manage subscriptions, credits, and purchase entitlements.
- Understand use, measure acquisition and promotional effectiveness, and improve the service.
- Diagnose errors, monitor performance, protect the service, and meet legal obligations.
5. Sharing your songs
Sharing is optional and under your control.
- What triggers a share. A song is not published to our sharing service until you create a share for that song. The selected audio, lyrics, title, dedication, and other content you include are then processed so the link or QR code can play the song. Your original generation message is not displayed unless you choose to include it.
- Who can access it. Anyone with the link or QR code can open it without an account. Shares use a long, random identifier and are not publicly listed or searchable through our service. Treat the link like the song itself: anyone who receives or is forwarded the link can play it.
- Share-page interactions. Visitors may leave an anonymous like or rating. We use a random browser identifier and IP address to count interactions, limit abuse, and protect the service. We do not use this information for personalized advertising.
- How to revoke. You may revoke a share from the app. We then remove the shared content from systems we control and stop the link from working. Copies previously downloaded or saved by others remain outside our control.
- Retention. Shared content remains available while the share is active and is removed when you revoke the share or close your account, subject to limited security or legal retention described in §8.
If you do not create a share, your song is not published to the sharing service or made available through a public share link. Generation-task data is still processed as described in §§3 and 8.
6. Service providers
We use only the categories of service providers needed to operate Tuneliq:
| Provider category | Purpose | Information processed |
|---|---|---|
| Generation services | Create lyrics and songs | Creative input, style requirements, and generation-task data |
| Cloud hosting and content delivery | Operate our service and host content you choose to share | Service records, shared content, and share-link activity |
| Authentication | Sign-in and account management | Account and sign-in information |
| Payments and purchase management | Process purchases and manage access | Product, transaction, receipt, and account identifiers |
| Product analytics and attribution | Understand use and measure acquisition or promotional effectiveness | Pseudonymous identifiers, source or campaign information, and app events |
| Crash and performance diagnostics | Detect faults and improve stability | Crash, performance, device, and related diagnostic data |
| Notifications and customer support | Deliver service notifications and handle requests | Notification identifiers, feedback, attachments, and necessary diagnostic context |
We limit information to what is relevant for each service and require providers to protect it under applicable contractual and legal obligations. If our processing changes materially, we will update this policy and provide notice as required by law.
7. Device permissions and local files
Permissions. Camera, photo library, microphone, Bluetooth, notifications, and media or file access are requested only when a related feature needs them. A permission does not by itself mean that all accessible data is uploaded. Information is sent only when needed for the feature you use, such as uploading an avatar, submitting feedback, creating a share, or enabling service notifications.
Voice recording. A voice recording you add is processed on your device and is not uploaded for song or lyric generation.
Profile avatar. If you set an avatar, the selected image is stored with your account until you replace it or close the account.
Feedback attachments. Images you attach to feedback are sent with the feedback and necessary diagnostic context so we can investigate your request.
Saving and sharing files. Files you save to your device or send through the system share sheet are managed by you and by the receiving app under its own policies.
Deletion boundary. Deleting the app, revoking a share, or closing your account does not delete copies already saved, exported, or sent to another person or app.
8. Storage, retention, and deletion
- Local content: Voice recordings and files stored inside the app are managed on your device. Deleting the app generally removes data in its private storage, but not copies saved or sent elsewhere.
- Generation-task data: Retained only as needed to complete and restore tasks, provide support, protect the service, and prevent abuse, then deleted or anonymized.
- Shared content: Retained while the share is active and removed when you revoke it or close your account, subject to limited security or legal retention.
- Account and purchase records: Retained while your account is active and as needed for transactions, tax, security, fraud prevention, and legal obligations.
- Analytics, attribution, crash, and diagnostic data: Retained for limited periods needed to analyze use, diagnose faults, protect the service, and improve it, then deleted or anonymized.
- Feedback and support records: Retained as needed to resolve the request and prevent repeated abuse, then deleted or anonymized.
- Notification identifiers: Retained while valid and needed to provide notifications, then deleted when invalid or no longer needed.
- Account closure: Information associated with your account is deleted or anonymized within 30 days after closure, except records we must retain for transactions, security, fraud prevention, or legal obligations.
9. Your rights
Depending on where you live, you may access, correct, or delete personal information; object to or restrict certain processing; and lodge a complaint. Where processing is based on consent, you may withdraw that consent without affecting earlier lawful processing. You may also revoke a share at any time.
- EU / UK / EEA: We rely on performance of a contract for requested service features, legitimate interests for security, diagnostics, service improvement, and non-personalized measurement, and consent where required. You may complain to your supervisory authority. International transfers use appropriate safeguards, including Standard Contractual Clauses where applicable.
- California: You may request access, correction, or deletion and may opt out of sale or sharing for cross-context behavioral advertising. We do not sell personal information or share it for cross-context behavioral advertising.
- How to exercise your rights: Contact us (§14), or use the in-app account and sharing controls to close your account or revoke a share.
10. Children
Tuneliq is not directed to children below the minimum age in their region. In the United States this is 13; in the EEA it may be 13–16 depending on the country. We do not knowingly collect children's personal information. If we learn that we have done so without valid authorization, we will delete it. Do not include a child's personal information in content you share unless you are authorized to do so.
11. Security
We use reasonable technical and organizational safeguards, including encryption in transit and access controls. No system is completely secure, but we apply data minimization and limit access according to role and service need.
12. International transfers
Information may be processed in countries where we or our service providers operate, including the United States. Where required, we use safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms.
13. Changes to this policy
We may update this policy when our service, data practices, or legal obligations change. We will update the version and effective date and provide additional notice when required by law. The current English version is available at https://tuneliq.com/legal/app-privacy.
14. Contact
- Email: support@tuneliq.com
- Company: ONEDO INC. (Tuneliq)
15. Language
The English version of this Privacy Policy is the controlling version. Translations are provided for convenience only. If there is any inconsistency or ambiguity, the English version prevails. The controlling English version is available at https://tuneliq.com/legal/app-privacy.