Privacy Policy

Information we handle

Account information. If you sign in, we receive your email address and an account identifier. Apple or Google sign-in may also provide a name, profile image, or relay email, depending on your choices. We store authentication and profile information so you can access your account.

Your music data. Tone Ninja stores the tones, patch settings, imported files, names, tags, notes, Live Sets, Song Packs, Gig Packs, and related content you create or choose to import. Libraries stay on the device unless the account has a Plus subscription, which syncs supported library content to our cloud service; the app indicates when cloud sync is unavailable.

AI and voice inputs. When you choose an AI feature, we process the description, refinement request, relevant tone or amp settings, and rig context you submit. A YouTube matching request sends the URL and selected clip range to an audio analysis service. If you use voice features, microphone audio and resulting transcripts are processed to provide transcription or conversation. These features may send the relevant inputs to OpenAI through our backend.

Purchases and service data. We receive subscription status, product and transaction identifiers, and related billing records from purchase providers. We do not receive your full payment card number. Our services also process information such as account or request identifiers, request times, app or device details, and IP addresses or hashed IP addresses for authentication, security, troubleshooting, and AI usage limits.

Device verification. Free tone generations are limited per device. To enforce that, the app asks Apple (DeviceCheck, on iPhone and iPad) or Google (Play Integrity, on Android) to confirm the request comes from a genuine copy of Tone Ninja on a real device. Apple or Google then keeps a small flag for that device recording that its free generations were used. On Android the request carries a one-way hash of your account identifier, not your email address, and Google processes device and app information for Play Integrity under its own terms.

Anonymous usage statistics. Once a day, the app sends a random identifier it created for this installation (not a hardware or advertising identifier), the platform, app version, the number of tones in the library, the generation of the amp last connected, and whether you are signed in. With the same identifier, the app also counts when it shows a Plus offer or plan prices, which feature showed it, and whether a purchase or restore was started, cancelled, failed or completed. These are sent without your account credentials and are not linked to your account. You can turn them off in Settings.

Amp connections. When you choose to connect an amp or MIDI adapter, the app uses Bluetooth or USB permissions and exchanges device information and MIDI messages needed for that feature. Amp control happens between your device and the connected hardware; cloud library sync is a separate feature.

Tuner. When you open the tuner without a Katana:GO, it listens through your microphone to find the pitch you play. That audio is analysed on your device as it arrives and is never recorded, stored, or sent to us or anyone else.

How we use information

We use this information to operate accounts, save and sync libraries, generate and refine tones, transcribe voice requests, connect compatible hardware, deliver purchases, provide support, prevent abuse, and maintain the service.

Improving Automated Tone Generation. When you use Automated Tone Generation, we may use your tone request, the amp and rig settings sent with it, the tones it builds, and whether you keep them to test and improve that feature. We do not use the rest of your library, imported files, or voice recordings for this. If you never use Automated Tone Generation, none of your tones are used.

We may send sign-in codes, account notices, purchase messages, and onboarding emails. You can ask us to stop nonessential emails using the contact address below. Our in-app event helper does not currently send events to an analytics vendor, and we do not use an advertising SDK. Purchase providers may process service data under their own notices.

Who receives information

We share information with service providers as needed for the features you use: Supabase for authentication, data storage, sync, and backend functions; OpenAI for selected AI and voice processing; our audio analysis host for YouTube matching; Apple and Google for sign-in, app purchases, and device verification; RevenueCat for subscriptions; and Resend for onboarding emails and account notices. OpenAI does not use what we send it to train its own models. Providers process information under their own terms and privacy notices as well as our service arrangements.

We may also disclose information when required by law, to protect users and the service, or as part of a business transfer. We do not sell personal information or use Tone Ninja data for targeted advertising.

Legal bases where required

Where privacy law requires a legal basis, we process information to provide the features you request and perform our agreement with you; to meet legal obligations; and for legitimate interests such as securing, supporting, and improving Tone Ninja when those interests are not overridden by your rights. Before your first Automated Tone Generation request, the app asks your permission to send it, and we rely on that permission where the law requires consent. We do not treat agreement to these terms alone as a substitute for a separate consent that is required by law.

Where information is stored and for how long

Guest library data is stored on your device. Signed-in account and synced library data is stored with our cloud provider. Information may be processed in the United States and other countries where our providers operate. Where a transfer requires additional safeguards, we will put them in place before relying on that transfer.

We keep account and synced library information while your account is active. You can delete your account in the app: Settings → your email → Manage → Delete Account. Your account is suspended right away and can be restored for 30 days by signing in and choosing Restore Account; signing in alone does not cancel deletion. After that deadline, the next nightly deletion job permanently removes your account, your cloud library and files, and identifying usage and billing records in our database; it may take longer if a service is unavailable. We also ask RevenueCat to delete its customer record and, for Sign in with Apple accounts, revoke the Apple sign-in token. Backups expire through our provider’s backup rotation, and Apple, Google, and other providers keep records they need under their own terms. To prevent repeat referral rewards, we keep a one-way hash of an email address that received a referral free month. We keep usage, security, and billing records only as long as reasonably needed for those purposes. Deleting the app does not delete a signed-in cloud account; deleting local app data can remove a guest library. Guest libraries, exported files, and tones stored on your amp are not part of your account.

Your choices and rights

You can use guest mode for local library features, choose whether to sign in and whether to subscribe to Plus for cloud sync, turn off anonymous usage statistics in Settings, decline microphone or Bluetooth access, and stop using optional AI features. You can manage device permissions in your operating system settings. Tone Ninja provides library import and export tools so you can keep copies of supported content.

To delete your account, use Delete Account in the app; we email a confirmation and reminders before the recovery deadline. Deleting your account does not cancel an App Store or Google Play subscription, which you manage in your App Store or Google Play subscriptions. To request access, correction, export, or deletion help for information associated with your account, email support@toneninja.app from the address linked to your account. You can also ask us to delete some or all of your data without deleting your account. Email support@toneninja.app from the address linked to your account and tell us what to delete. Tell us if you also want to stop nonessential emails or object to a use of your information, including leaving your requests out of improving Automated Tone Generation. We may need to verify your identity and may retain information where the law allows or requires it. Where consent is required, you may withdraw it for future processing. Depending on where you live, you may have additional privacy rights and the right to contact a local regulator.

Security and children

We use access controls and other reasonable measures to protect information. No storage or transmission system is perfectly secure.

Tone Ninja is not directed to children. If you believe a child has provided us personal information without appropriate permission, contact us so we can review and delete it where required.

Changes and contact

We may update this policy as Tone Ninja changes. We will post the revised policy with a new effective date and give additional notice when required.

For privacy questions or requests, contact ESG Ventures LLC in Arizona, United States, at support@toneninja.app.