Privacy Policy

1. What We Collect

Attune collects only what is necessary to provide the service:

• Account information: Email address and display name when you create an account (via email/password or Google OAuth).
• Session history: Your chosen work mode, mood, duration, and time of day for each session — used to personalize future suggestions.
• Subscription data: Plan type and status. Payment processing is handled entirely by Stripe — we never see or store your card number.
• Usage metrics: Monthly session count (for free tier limits).

2. What We Don't Collect

• We do not use cookies for tracking or advertising.
• We do not sell, rent, or share your personal data with third parties for marketing.
• We do not record or analyze your audio playback content.
• Guest users can use Attune without creating an account — no personal data is collected in guest mode.

3. Third-Party Services

Attune uses the following third-party services:

• Supabase: Authentication and database hosting. Your data is stored securely with row-level security policies. Supabase Privacy Policy
• Stripe: Payment processing for Pro subscriptions. Stripe Privacy Policy
• Vercel: Hosting and privacy-friendly analytics (page views, performance — no personal identifiers). Vercel Privacy Policy
• Plausible: Privacy-focused, cookie-free web analytics. No personal data is collected. Plausible Data Policy
• Google: OAuth sign-in only (if you choose to sign in with Google). We receive your name and email — nothing else. Google Privacy Policy

4. Data Storage & Security

Your data is stored in Supabase (hosted on AWS) with row-level security policies ensuring you can only access your own data. All connections use HTTPS/TLS encryption. We apply security headers including Content Security Policy, HSTS, and X-Frame-Options.

5. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your account and all associated data
• Export your data

To exercise any of these rights, contact us at support@attuneaudio.app.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data (profile, session history, subscription records) is permanently deleted via cascading database policies.

7. Children's Privacy

Attune is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be indicated by updating the “Last updated” date at the top of this page. Continued use of Attune after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this privacy policy? Reach us at support@attuneaudio.app.