Privacy Policy

1. Who we are and what this policy covers

Tunely is operated by Blue Cap Collective, LLC (“Tunely,” “we,” “us,” or “our”). This policy explains how we collect, use, disclose, and retain information when you use tunely.com, our native apps, music generation, custom music players, visualizers, playlists, and embedded players (together, the “Service”).

Blue Cap Collective, LLC is responsible for the personal information described here and is its controller where that term applies. You can contact us at [email protected]. Our Terms of Service describe the rules for using Tunely. This policy is a description of our practices; it does not replace consent where consent is required.

2. Information you provide

• Account and profile information: your name, email, handle, biography, profile theme, and account settings. We also store the authentication information needed to secure your account and verify your sign-in methods.
• Apple sign-in information: an Apple-provided account identifier and, when provided, your name and email address, which may be an Apple private relay address. We do not receive your Apple password.
• Music and creative content: prompts, optional lyrics, topic and style selections, personal details you choose to put in a song request, generated songs, titles, and player or visualizer settings.
• Community activity: comments, likes, follows, blocks, playlists, playlist invitations and membership, and contributions to group playlists.
• Communications: messages and attachments you send for support, privacy requests, or content reports and appeals, and information needed to respond.

Avoid including sensitive personal information in prompts, lyrics, profiles, or comments. Include information about other people only when you have permission or another lawful basis to do so.

3. Technical, usage, and purchase information

When you access the Service, our systems and providers may process your IP address, browser or device type, operating system, app version, request times, requested pages or media, referring page information where supplied, and error or diagnostic information. This includes requests to stream audio or load an embedded player.

We store session and authentication records, generation status and usage, account identifiers, purchase and transaction references, credit balances, subscription entitlements, and renewal, cancellation, or refund events. We receive purchase information from our purchase-management providers and the platform that processed the payment.

If you create an account after visiting a creator’s link, we store which creator referred you, the type of link, the song associated with it when applicable, and when you joined. We use this attribution and qualifying purchase records to award referral song credits. Creators can see how many people joined from their links and reward activity, including the purchase type and the link or song that led to it. This activity does not show your name or email, but if few people joined from a creator’s link, the creator may be able to tell who made a purchase.

If you delete your account, its referral attribution is removed. A creator keeps song credits already earned, subject to their original expiry, and reward activity may remain without a link to your account. We retain the associated purchase transaction reference to maintain the reward record and prevent duplicate rewards. Pending rewards are not paid after the referred account is deleted.

If you enable native app notifications or Live Activities, we may process device delivery tokens and activity identifiers to send generation updates. You can manage notification permissions in your device settings.

4. Local audio, cloud songs, and AI processing

Audio imported for the native app’s local visualizer experience is processed on your device. Playing that local audio or rendering a local visualizer export does not by itself upload the file to Tunely. If you share an export through another app or service, that destination handles the copy you send under its own practices.

When you use online music generation, we send your prompts, optional lyrics, and generation settings to third-party AI processing providers to create music, write lyrics, or interpret your request. This may include text generated or rewritten while fulfilling your request.

We store generation records, submitted prompts and lyrics, relevant settings, generated audio and metadata, and player presentation settings to provide your library, playback, customization, and sharing. Songs available through the web are stored and served online; they are not exclusively local to your device.

AI processing providers may retain request data to deliver their services, maintain security, or prevent abuse under applicable contracts and retention policies. Deleting content from Tunely does not guarantee immediate deletion from every provider’s systems.

5. Content checks, reports, and appeals

We use automated tools and human review to assess content for sharing and investigate reports. We send relevant titles, lyrics, vocal transcripts, and other shared text to OpenAI for moderation and assessment against our content rules. Generated song audio may be sent to a transcription provider to identify the sung words. These checks are separate from generating the song and do not upload local visualizer audio by themselves.

We send the content needed for the check, rather than unrelated account details such as your sign-in credentials, purchase history, or account email. Content itself may contain personal information you included. Providers process requests under their applicable data terms, which can differ by service and may include limited retention for security and abuse prevention. See OpenAI’s API data controls for its current practices.

We store content versions or snapshots needed to explain assessments, automated results, the rules applied, sharing restrictions, reports, appeal messages, and review decisions. Authorized reviewers may access the relevant content and audio to investigate. Automated decisions can be wrong; you can request human reconsideration through the appeal or contact options.

A report may include your account or contact details, the reported content, your explanation, and an audio timestamp. We do not identify the reporter to the reported person, except where required by law. We may explain the reported issue so the creator can respond. Avoid including personal information that is not needed to understand the report.

We store blocking relationships to apply interaction and visibility controls while you are signed in. Blocking does not make public content private or prevent someone from seeing it while signed out.

6. Public profiles, sharing links, and playlists

A profile with a handle is public. Your displayed name, handle, biography, theme, public songs, and follower and following counts can be visible to others. Your account email and authentication credentials are not displayed on your public profile.

• Public songs can appear in discovery, profiles, tags, search results, and link previews. Their audio, title, displayed creator details, style tags, and player design may be available to anyone.
• Unlisted songs are accessible to anyone holding the sharing link. That link can be forwarded or posted elsewhere. Unlisted songs are not intended for public discovery, but the link is not a confidentiality guarantee.
• Private songs are restricted to the owner’s account through the Service. We and our providers still process them as needed to deliver and secure the Service.

Comments on public songs are public when comments are enabled, along with the author’s displayed name and handle. Like counts are displayed on eligible songs, and we store who liked a song or followed a creator to maintain those features.

Playlist visibility controls who can open the playlist. Sharing a playlist does not override a song’s own access settings. Group playlist membership and contributions may be visible to people with access to that playlist. Review your settings before sharing and avoid putting confidential information in titles or descriptions.

7. Players embedded on other websites

When a website includes a Tunely player, your browser requests the player and audio from Tunely and our service providers. Those requests include the technical information described above even if you do not have a Tunely account.

Our standalone embedded players do not use Tunely’s signed-in website session or set Tunely session cookies. Public songs and songs reached through valid unlisted links may be embedded when their creator allows it. Shared playlists can include playable, embeddable public songs. The website hosting an embed may separately collect information under its own privacy policy.

Changing sharing settings, disabling a song’s embedding, resetting an unlisted song link, deleting content, or a moderation restriction can prevent future access through the Service. Audio links already issued may keep working for up to five minutes after the change. We cannot recall audio already buffered or copies someone recorded, downloaded, or posted elsewhere.

8. Cookies, browser storage, and analytics

The website uses cookies for sign-in sessions, security, remembering a login when requested, and interface preferences. We also use browser storage to preserve your song draft while you leave for checkout and return. You can clear or block site data in your browser, but doing so may sign you out, discard drafts, or prevent account features from working.

If you allow referral cookies, when you visit a creator’s song, profile, or referral link while signed out, we use an encrypted cookie called tunely_referral to remember the first creator whose link you visited. It stores the creator’s identifier, the link type, a song identifier when applicable, and the visit time. The cookie lasts up to 60 days. If you create an account during that time, we save the referral on your account and remove the cookie. Qualifying purchases during the next 12 months can earn song credits for that creator. Clearing or blocking this cookie before signup can prevent attribution; clearing it after signup does not remove the referral already saved on your account.

Referral cookies are optional. We do not set or use the referral cookie unless you choose Allow. You can decline and continue using Tunely, or change your choice in Cookie preferences. We store your Allow or Decline choice in a separate encrypted preference cookie, together with the time of your choice and the consent version, for up to 180 days, so we can respect it. Declining clears any unclaimed referral cookie; it does not remove attribution already saved on an account.

We use analytics and diagnostic service providers in the native apps to understand feature usage, such as generation, playback, exports, and purchase-flow interactions, together with app and device context. We use these events to improve reliability. Our website and media services also keep operational logs to deliver and troubleshoot the Service.

On the website, we use Fathom Analytics to count page visits. It records the page viewed, the referring site, browser, operating system, device type, and approximate country. Fathom does not use cookies, does not store visitors’ IP addresses, and does not build profiles of individual visitors. We use these totals to understand which pages people visit.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use Tunely website cookies to build advertising profiles. The website does not currently change its behavior in response to “Do Not Track” signals. Essential account and security processing continues when privacy signals are enabled; our no-sale and no-advertising-sharing practices apply to all users.

9. Why we use information

• Provide accounts, authentication, generation, cloud storage, playback, customization, and sharing.
• Maintain libraries, profiles, comments, likes, follows, and collaborative playlists.
• Process purchases, verify entitlements, maintain credit balances, and send requested generation updates.
• Attribute referrals, award earned song credits, and show creators referral counts and reward activity.
• Prevent fraud and free-quota abuse, protect access to private content, assess content for sharing, and investigate security incidents, content reports, and appeals.
• Respond to support and privacy requests, diagnose failures, and improve performance and usability.
• Meet legal obligations, resolve disputes, and enforce our Terms.

Where data protection law requires a legal basis, we rely on performing our contract with you for requested Service features; legitimate interests in operating, securing, and improving the Service where those interests are not overridden by your rights; compliance with legal obligations; and consent where required. You can withdraw consent for processing based on consent without affecting processing that occurred before withdrawal.

10. Who receives information

We share relevant information with the following types of service providers to operate Tunely:

• Hosting and media delivery providers: store account information and content, and process technical request information to deliver web pages, audio, and players.
• AI processing providers: receive prompts, lyrics, generation settings, and related text needed to generate songs. Transcription and content safety providers receive audio or relevant content needed to transcribe vocals or assess compliance with our content rules, as described above.
• Checkout, payment, and purchase-management providers: process payment details and account or transaction information to fulfill purchases and manage credits and subscriptions.
• Sign-in and device platform providers: support account authentication, app store purchases, and generation notifications using identity information, purchase records, or device delivery identifiers as needed for those features.
• Analytics and diagnostics providers: process website page visits, feature usage, app and device context, and error information to help us understand how Tunely is used and improve reliability.
• Email and support providers: process contact details and communications to deliver account messages and respond to your requests.

We also disclose content to other people as directed by your sharing settings and activity. Payment platforms, authentication providers, and websites you visit through links may process information for their own purposes under their policies.

We may disclose information when reasonably necessary to comply with law or legal process, investigate fraud or abuse, protect rights and safety, or establish or defend legal claims. If the business is involved in a merger, acquisition, financing, or sale of assets, information may be disclosed or transferred as part of that transaction, subject to applicable law.

11. Payments and account connections

Payment details are entered with the checkout provider or app store. Tunely does not receive or store your full payment card number. We receive the transaction and entitlement information needed to provide what you bought, reconcile balances, address support requests, and prevent duplicate or fraudulent credits.

For web checkout, we share your Tunely account identifier with our checkout and purchase-management providers so the purchase is credited to the correct account. When you connect an Apple identity or link an eligible app account, we use verified identity and purchase records to associate access with the correct person. Merely using the same email on two accounts does not automatically merge them.

12. How long we keep information

We retain account information, content, and generation records while needed to provide the Service. Retention also depends on the type of information, security and support needs, legal requirements, and resolving disputes or enforcing agreements. We do not promise the same retention period for every category or every provider.

Content-safety records, including assessment results, relevant content snapshots, reports, and appeals, are kept as needed to explain and review decisions, prevent repeated abuse, and meet legal obligations. Their retention depends on the status and seriousness of the matter and whether a dispute or legal requirement remains. A sharing restriction is not a deletion request and does not itself remove these records or the underlying song.

Routine automated checks that approved content keep a copy of it for 30 days. After a report, appeal or review closes, we remove content copies, notes and reporter contact details 12 months later, keeping a minimal record of the decision. When you delete your account, we remove copies of your content from these records right away, except while a report about it is still being reviewed, and reports you filed lose your contact details.

Deleting a web song normally moves it into a 30-day restore window, during which it is unavailable to other listeners. After that window, it is eligible for permanent removal and deletion of its stored audio. Permanently deleting a song or deleting an account skips that restore window. Removal of stored files may take additional time to complete.

For accounts using Apple sign-in, we retain a pseudonymous sign-in identifier and limited generation-usage records after account deletion to prevent repeated free-generation abuse. These records do not contain your name or email, but let us recognize a returning sign-in identity so deleting and recreating an account does not reset its free allowance.

When an email account receives a sign-up promotion, such as a free song after verifying its email, we keep a one-way keyed hash of the email address and the date of the claim for 12 months, including after account deletion. The hash does not contain your email, but lets us recognize the same address so a promotion can only be claimed once.

We keep limited account-deletion records for a 30-day retention window to confirm deletion and handle pending generation or payment updates. These may include a pseudonymous account identifier, deletion date, and summary purchase or generation information. Expired records are removed during cleanup. Purchase-event records may remain with identifying account information removed.

Limited records may remain where needed for legal, accounting, security, or dispute purposes. Backups, logs, cached responses, and provider-held copies may persist under their retention cycles. Deletion from active Tunely systems does not erase copies other people or independent platforms already hold.

13. Your controls and account deletion

You can update your profile and account information, change song and playlist visibility, manage song embedding and comments, reset an unlisted song link, and delete your songs or comments using the available controls. You can manage sign-in methods in account settings and device permissions in your operating system.

To delete your web account, open Settings → Profile and use the account deletion control. Native apps provide an account deletion option where accounts are supported. Contact [email protected] if you cannot access your account or need help.

Account deletion removes associated account records and content from active Service use and starts removal of stored song audio, subject to the limited retention above. It does not automatically cancel an app store subscription; cancel that separately with the platform that bills you. Disconnecting Apple sign-in is different from deleting your Tunely account.

14. Privacy rights and requests

Depending on where you live and which laws apply, you may have rights to know about or access your personal information, obtain a portable copy, correct inaccuracies, request deletion, restrict or object to processing, or withdraw consent. You may also have rights to opt out of sales, advertising-related sharing, or certain uses of sensitive information. We do not sell personal information or share it for cross-context behavioral advertising.

California residents may have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive information, and receive non-discriminatory treatment, to the extent the California Consumer Privacy Act applies. We use account credentials to provide and secure the Service, not to infer sensitive characteristics.

Send a request to [email protected]. Describe the request and the account it concerns. We may ask for information reasonably needed to verify your identity or an authorized agent’s authority. Rights are subject to applicable exceptions, and we will respond within the periods required by applicable law. We will not discriminate against you for exercising applicable rights.

If we deny a request, you may contact us to ask for review or appeal where applicable law provides that right. You may also complain to your local data protection authority, including in the EEA or the UK, where applicable.

15. Security and international processing

We use technical and organizational safeguards designed to protect account information and content. No transmission or storage system is completely secure, and we cannot guarantee absolute security. Protect your credentials and sharing links, and contact us if you suspect unauthorized access.

Tunely and its providers may process information in the United States and other countries whose privacy laws differ from those where you live. Cross-border processing remains subject to applicable legal requirements. Contact us for information about the providers and transfer arrangements relevant to your information.

16. Children and age restrictions

Tunely is not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from children below that age. AI music generation is restricted to people who are at least 18 and have reached the age of majority where they live. If you believe a child has provided information in violation of these restrictions, contact us so we can investigate and take appropriate steps, including deletion where required.

17. Changes to this policy

We may update this policy as our features and practices change. We will post the revised policy and update the date above. For material changes, we will provide additional notice and obtain consent where required by law.

18. Contact

For privacy questions or requests, contact Blue Cap Collective, LLC at [email protected].