Last updated: July 20, 2026
Welcome to Tunee (the “Platform”). The Platform is provided and controlled by Vintage Song Technology Limited (“Tunee”, “we” or “us”). We are committed to protecting and respecting your privacy.
For the purposes of applicable data protection laws, the data controller is Tunee. Please read this Privacy Policy carefully, as it describes in detail how we collect, use, disclose, share, sell, store and protect your personal information, as well as what privacy rights you have and how you can exercise them.
By accessing or using our website, services, applications, products and content (that include but are not limited to the Platform) (collectively, the “Services”), you acknowledge that you have read this Privacy Policy ("Policy") and that you understand how we will collect, use and process your personal information. If you do not agree with this Policy in general or any part of it, we recommend that you do not use our Services.
Your use of our Services is at all times governed by our Terms of Service, into which this Privacy Policy is incorporated. Any terms used but not defined in this Privacy Policy shall have the meanings given to them in the Terms of Service.
This Privacy Policy explains, among other things:
The types of information we collect
How We Use Your Personal Information
How We Use Cookies and Similar Technologies
How We Disclose Your Information
How We Store and Protect Your Information
How Long We Keep Your Information
Your Privacy Rights and How to Exercise
Additional Rights for California Residents
Children’s Personal Information
Changes to This Privacy Policy
Contact Us
If you have any questions about how we use your information, please contact support@tunee.ai.
“Personal Information” means any information that identifies or can reasonably be linked to a particular individual, and also includes information referred to as “personally identifiable information”, “personal data” or “sensitive personal information” under applicable data privacy laws, regulations or rules.
The following table sets out in detail the categories of Personal Information we collect and have collected in the preceding twelve (12) months, the categories of sources from which we collect such information, the purposes for which we use it, and the categories of third parties to whom we disclose consumers’ Personal Information.
| Categories of Sources of Personal Information | Categories of Personal Information (Examples) | Scenarios and Purposes of Collection | Categories of Third Parties to Whom We Disclose This Personal Information |
|---|---|---|---|
| Information You Provide to Us or That Is Provided to Us About You by Third Parties | Contact and Account Information (e.g., Google ID, Apple ID, email address, account nickname, profile picture, gender, username, etc.) | Scenario: Account registration Purpose: to create and manage your user account, display your profile, and provide customer support. | - Service Providers - Business Partners - Parties You Authorize, Access or Authenticate |
| Information You Provide to Us or That Is Provided to Us About You by Third Parties | Creation and Activity Information (user-generated content, your interactions with Tunee, works you generate or upload, feedback you submit to us, etc.) | Scenario: Creation and interactions Purpose: to enable creative features and content services. | - Service Providers - Business Partners - Parties You Authorize, Access or Authenticate |
| Information You Provide to Us or That Is Provided to Us About You by Third Parties | Customer Service and Support Data (contact information such as email address, description of your issue, service records, communications history) | Scenario: Complaints and contacting customer service Purpose: to respond to your inquiries and complaints, provide technical support, resolve product issues, and improve our Services. | - Service Providers - Business Partners - Parties You Authorize, Access or Authenticate |
| Information You Provide to Us or That Is Provided to Us About You by Third Parties | Payment and Transaction Data (payment information, transaction records, order information) | Scenario: Payments and transactions Purpose: to process payments, generate orders, issue invoices, and handle refunds. | - Service Providers (in particular our payment processing partners, currently Stripe, Inc.) |
| Information We Collect Automatically When You Use the Services | Device-Related Data (e.g., IP address, location information, unique device identifiers, browsing history, mobile carrier, time zone, device model, screen resolution, operating system, platform information) | Scenario: Logging in and using the Services Purpose: to provide and optimize core features, ensure the security and stability of our systems, and improve the user experience. | - Service Providers - Business Partners - Parties You Authorize, Access or Authenticate |
| Information We Collect Automatically When You Use the Services | Platform Operation and Management Data (system logs, usage records, crash logs, statistical and analytics data) | Scenario: Using the Services Purpose: to maintain system stability and security, conduct data analysis and research, troubleshoot and fix issues, optimize features and user experience, carry out statistical analysis and user satisfaction surveys, and improve the quality of our Services. | - Service Providers - Business Partners - Parties You Authorize, Access or Authenticate |
| Information We Collect Automatically When You Use the Services | Cookie and Similar Technologies Data (as defined in Section 3 of this Privacy Policy) | Scenario: Use of cookies and similar technologies Purpose: to provide essential service features, analyze visits and usage, and optimize product experience and operational strategies. | - Service Providers - Business Partners - Parties You Authorize, Access or Authenticate |
| Information We Collect Automatically When You Use the Services | Security and Risk Control Data (login logs, records of abnormal activities, security verification information, risk scoring data) | Scenario: Security and risk control Purpose: to prevent fraud and malicious activities, protect account security, detect abnormal login activities, and prevent misuse of the Platform. | - Service Providers - Business Partners - Parties You Authorize, Access or Authenticate |
Where necessary to provide specific Services, we may collect sensitive personal information (as that term is defined under the California Consumer Privacy Act (“CCPA”) and its amending statute, the California Privacy Rights Act (“CPRA”)). Except to the extent necessary to provide our Services or as otherwise permitted by the CCPA/CPRA, we do not use or disclose your sensitive personal information for any other purposes. You have the right to limit our use or disclosure of your sensitive personal information for any purposes other than providing the Services or goods you request, unless otherwise required or permitted by law.
To provide the Services to you, we collect and process your Personal Information for one or more of the purposes set out below and/or in Section 8 of this Privacy Policy, including:
A. Business Purposes for Which We Collect Personal Information
(1) To Provide, Customize and Improve the Services
To enable, or where appropriate restrict, your access to and use of our Services;
To create and manage your account and profile;
To process orders and other transactions, issue invoices and handle billing;
To provide you with the products, Services or information that you request;
To correct errors or bugs and improve our Services, including through testing, research, internal analytics and product development;
To provide you with Services, such as content related to your settings and preferences;
To make your information available to other users in accordance with the privacy settings you choose for the relevant information;
To show you content similar to content you have liked or interacted with (for example, by commenting on or viewing it), content in your region and content posted by users you follow;
To personalize the content you receive and provide you with customized content that may be of interest to you;
To analyze and manage our Services, including for system administration, customer service, security, fraud detection, verification of account ownership, archiving and/or backup purposes;
To achieve other purposes that are described to you at the time your Personal Information is collected and/or that are compatible with the original purpose of collection and permitted under applicable data privacy laws; and
To track your activity on our websites to verify that you are not a bot and to optimize our Services.
(2) To Communicate With You
To respond to correspondence we receive from you, contact you where necessary or upon your request, and send you the latest information about our company or our Services;
To send you emails and other communications in accordance with your preferences.
B. Other Lawful Purposes for Processing Personal Information
In addition, the categories of Personal Information described above may be collected, used and disclosed to governmental authorities (including law enforcement) or other relevant parties as necessary to satisfy certain legal requirements and to enforce legal terms, including: To comply with our legal obligations under applicable laws and regulations, court orders or other legal processes (for example, to prevent, detect and investigate security incidents and potential illegal or prohibited activities); to protect the rights, property or safety of you, us (the Company) or others; to enforce any agreements entered into with you; to respond to claims that any posts or other content infringe the rights of third parties; and to resolve disputes.
We will not collect additional categories of Personal Information or use the Personal Information we have collected for materially different, unrelated or incompatible purposes without first providing you with notice or obtaining your consent, unless otherwise required or permitted by applicable law.
We use cookies and similar technologies, such as pixels, web beacons and software development kits (collectively, “Cookies”), so that our servers can recognize your web browser, understand how and when you access and use our Services, analyze trends, understand our user base, and operate and improve our Services. Cookies are small data files (typically text files) that are placed on your computer, tablet, mobile phone or similar device when you access our Services using such devices. We may also supplement information we collect from you with information we receive from third parties, including third parties that have placed their own Cookies on your device.
(1) We Use the Following Types of Cookies:
a. Necessary Cookies.
These Cookies are essential to provide you with the features or Services you have requested. For example, certain Cookies enable you to log in to secure areas of our Services. If you disable these Cookies, some features and Services may not function properly or may become unavailable.
(2) Disabling Cookies and Similar Technologies
By using the Services and allowing us to place Cookies and similar technologies, you consent to our use of these technologies and to the collection of user activity information generated through them. You may withdraw or modify your consent at any time by changing your browser settings to disable Cookies. However, if you choose to disable this function, your experience with the Services may be affected and some features may not function properly.
Although your browser may allow you to send “Do Not Track” signals, like many websites, our Services are not currently configured to respond to such signals, and we do not use or disclose your information in a way that would require us to recognize “Do Not Track” signals under applicable law.
(1) We will disclose your Personal Information to the categories of service providers and other parties listed in this Section. We do not sell Personal Information, nor do we share it with third parties for marketing purposes. However, under the laws applicable in the region where you are located, some of the disclosures described in this Privacy Policy may be deemed a “sale” of your Personal Information.
(2) We will disclose your information with law enforcement agencies, public authorities or other organizations if legally required to do so, or if such use is reasonably necessary to:
comply with legal obligations, processes or requests;
enforce our Terms of Service and other agreements, policies, and standards, including investigation of any potential violation thereof;
detect, prevent or otherwise address security, fraud or technical issues; or
protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction).
(3) Business Transfers. All Personal Information we collect may be transferred to a third party in the event of a merger, acquisition, bankruptcy, corporate reorganization or other transaction in which a third party assumes control of all or part of our business.
(4) Specific Third-Party Disclosures.
Category: Account Info
SDK / Service Name: Google Sign
Collection / Use Purpose: Used for Google One Tap sign-in
Business Function / Scenario: First-time registration; sign-in
Personal Data Involved: Profile photo, display name, email address
Privacy Policy: https://policies.google.com/privacy
Category: Account Info
SDK / Service Name: Apple ID Sign-In
Collection / Use Purpose: Use Apple ID to sign in to the app
Business Function / Scenario: First-time registration; sign-in
Personal Data Involved: Profile photo, display name, email address
Privacy Policy: https://www.apple.com/legal/privacy/data/en/sign-in-with-apple/
Category: Analytics
SDK / Service Name: Mixpanel
Collection / Use Purpose: 1) Analyze user behavior and product usage; 2) Optimize features and UX; 3) Compile usage statistics and trends; 4) Retention and conversion analysis; 5) A/B testing and feature evaluation; 6) Generate reports and insights
Business Function / Scenario: 1) Page view & feature-usage tracking; 2) User path analysis; 3) Event tracking (e.g., clicks, sign-ups, purchases); 4) Segmentation & profiling; 5) Funnel conversion analysis; 6) Retention statistics
Personal Data Involved: User identifiers (user ID, anonymous/distinct ID, device ID); account info (username, email, registration time—if you choose to send it); device info (model, OS & version, app version, screen size); network info (IP address, carrier, network type – Wi-Fi/mobile); geolocation based on IP (country, city); browser info (type, version, language), time zone
Privacy Policy: https://mixpanel.com/security-privacy/
Category: Community Forum
SDK / Service Name: Discourse
Collection / Use Purpose: 1) Provide community forum features (posts, comments, interactions); 2) User authentication & account management; 3) Content display & community moderation; 4) Behavior analysis & UX improvements
Business Function / Scenario: 1) Forum browsing and content publishing; 2) User registration/sign-in (incl. SSO if enabled); 3) Topic discussions, comments, DMs (if enabled); 4) Notifications
Personal Data Involved: Basic info (username, nickname, avatar, email); account info (user ID, login credentials); content info (posts, comments, uploaded images/attachments); behavioral info (browsing history, likes/favorites, reading duration); device info (IP address, browser type, OS, device identifiers); cookies & similar tech
Privacy Policy: https://www.discourse.org/privacy
Category: Security & Risk Control
SDK / Service Name: Castle.io
Collection / Use Purpose: 1) Detect and prevent fraud & account takeover; 2) Identify suspicious sign-ins and anomalous activity; 3) Protect account security; 4) Block bot attacks & abuse; 5) Risk scoring & security decisions
Business Function / Scenario: 1) Login security checks; 2) Registration risk detection; 3) Protection for sensitive actions (e.g., password change, payments); 4) Anomaly detection & blocking; 5) MFA triggers
Personal Data Involved: Device fingerprint, device ID, browser info, IP address, network type, ISP info; behavioral signals (mouse movement, typing patterns, touch behavior, page interactions); session info (session ID, timestamps, request headers); account info (user ID, email—encrypted/hashed); event info (login attempts, registration, transactions)
Privacy Policy: https://castle.io/privacy
Category: Error Monitoring
SDK / Service Name: Sentry
Collection / Use Purpose: 1) Monitor and log app errors/crashes; 2) Trace performance issues and bottlenecks
Business Function / Scenario: 1) Crash monitoring & reporting; 2) JavaScript error capture; 3) Failed network request tracing; 4) Performance metrics (page load, API response time)
Personal Data Involved: User identifiers; device & environment info; network info; error and performance data
Privacy Policy: https://sentry.io/privacy/
Category: Device / Crash Data
SDK / Service Name: Firebase (Crashlytics)
Collection / Use Purpose: Capture, track, and analyze app crashes to improve stability
Business Function / Scenario: Used alongside Google sign-in flow
Personal Data Involved: RFC-4122 UUID (to de-duplicate crashes); Crashlytics Installation UUID; Firebase Installation ID (FID); Firebase Session ID; crash timestamp; app package identifier & full version; OS name & version; device model, CPU architecture, RAM & disk; per-thread instruction pointers; method/function names (if available at runtime); exception class & message (if thrown); fatal signal name & code (if any); each loaded binary image name/UUID/size/base address; app background state; screen orientation at crash; proximity sensor state
Privacy Policy: https://firebase.google.com/support/privacy
Category: Cloud Storage
SDK / Service Name: Alibaba Cloud OSS (Ali-OSS)
Collection / Use Purpose: 1) Store and manage user-uploaded files; 2) Provide file download & access; 3) Backup & archiving; 4) Static hosting & CDN acceleration; 5) Ensure data security & reliability; 6) Access control
Business Function / Scenario: Document storage; data backup & archiving
Personal Data Involved: User-uploaded file contents (images, videos, documents); file metadata (filename, size, format, upload time); file access path (Object Key)
Privacy Policy: https://www.alibabacloud.com/help/en/legal/latest/alibaba-cloud-international-website-privacy-policy
Category: Human Verification
SDK / Service Name: AliyunCaptcha
Collection / Use Purpose: 1) Identify and block bots & malicious attacks; 2) Verify human users; 3) Prevent spam sign-ups and abusive logins
Business Function / Scenario: CAPTCHA during login
Personal Data Involved: Device & environment info, network info, behavioral characteristics, verification data
Privacy Policy: https://www.alibabacloud.com/help/en/legal/latest/alibaba-cloud-international-website-privacy-policy
Category: Payments
SDK / Service Name: Stripe
Collection / Use Purpose: Process online payments and transactions
Business Function / Scenario: Online payments for goods and services
Personal Data Involved: Payment information; account & identity information; transaction data; device & technical information
Privacy Policy: https://stripe.com/privacy
(5) We will also disclose your information with any member, subsidiary, parent, or affiliate of our corporate group, only for the purposes set out above, to assist in the improvement and optimisation of the Platform, in order to prevent illegal uses, increase user numbers, development, engineering and analysis of information or for our internal business purposes.
You acknowledge and agree that your information will be collected and stored on our servers located in [Singapore], which may be outside the country or region where you reside, and that these servers may be accessed by our support and engineering teams and/or our affiliates around the world. Regardless of where our servers are located, we take steps to ensure that your information is treated securely and in accordance with this Policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your information, for example, by encryption, we cannot guarantee the security of your information transmitted through the Platform.
We take appropriate technical and organizational measures to protect personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction. We maintain these technical and organizational measures and will amend them from time to time to improve the overall security of our systems.
Please note that, apart from the information disclosed in this Privacy Policy, the Platform DOES NOT know your account credentials for your Google, Apple or other email accounts, as these third parties communicate with the Platform only via specific encrypted tokens.
Please note that, websites that link to or are linked from our Website or the Services may collect your personal information. This Privacy Policy does not apply to such third-party services, and we cannot control the activities of those websites. We strongly encourage you to carefully read the privacy policies of any such third-party websites you are directed to before providing any personal information.
We use the following criteria to determine the period for which we will keep your information:
Our contractual obligations and rights in relation to the information involved;
Legal obligation(s) under applicable law(s) and regulations to retain data for a certain period of time;
Statute of limitations under applicable law(s);
Our legitimate business purposes; and
Disputes or potential disputes.
After you have terminated your use of our Services, we can store your information in an aggregated and anonymous format. Notwithstanding the foregoing, we can also retain any personal information as reasonably necessary to comply with our legal obligations, allow us to resolve and litigate disputes, and to enforce our agreements.
If you have registered for an account, you may access and update certain personal information that you have provided to us by logging into your online account and using the features and functionalities available there.
In certain circumstances (for example, where you believe such data is inaccurate, our processing is unlawful, or we no longer need to process such data for a specific purpose), you have the right to request that we stop processing the Personal Information we hold about you, except to the extent that we continue to process it for storage purposes only.
Where we rely on your consent to process your Personal Information, you may withdraw your consent at any time by sending us a notice specifying which consent you wish to withdraw, or by using the consent withdrawal features made available within the Services. Please note that withdrawing your consent will not affect the lawfulness of any processing carried out before your withdrawal.
However, please also note that if we stop processing Personal Information on the basis of your consent, we may still use such information again if we have another valid legal ground to do so. For example, where processing is necessary for the performance of a contract, to protect your vital interests or those of another natural person, or where processing is necessary for any other lawful reason provided under applicable data protection laws.
In addition, you may request that we delete any personal information we hold about you on the Platform or delete your account with us via support@tunee.ai, subject to the Terms and conditions of the Platform and applicable laws and regulations.
(1) Special Notice to California Residents
If you are a resident of California, the CCPA/CPRA requires us to provide you with the following additional notice. For the purposes of this notice, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined in the California Consumer Privacy Act of 2018 (California Civil Code Sections 1798.100 through 1798.199) and its implementing regulations, in each case as amended or replaced from time to time (the “CCPA”).
The categories of Personal Information that we collect, use and disclose, and that we have collected, used and disclosed in the preceding twelve (12) months, are described in the “The Types of Information We Collect” section above.
Under California’s “Shine the Light” law, California residents may request that we provide a list of third parties to whom we have disclosed certain personal data for their direct marketing purposes. You may submit such a request once per calendar year. Please include in your request sufficient information to verify that you are a California resident and provide your current California mailing address so that we can respond. You may request this information by contacting us using the contact details set out in the “Contact Us” section below. We will respond to your request within thirty (30) days. We are not able to respond to requests submitted through means other than the designated email address.
We will respond to your verifiable consumer request free of charge within forty-five (45) days by providing the requested information, correcting any inaccurate personal information, or deleting your personal information, as applicable. Where reasonably necessary, if we are unable to process your request within forty-five (45) days, we will notify you in writing of the extension within that period, and the extension will not exceed an additional forty-five (45) days.
(2) If you are a California resident and the processing of your personal information is subject to the California Consumer Privacy Act (CCPA) and its amending statute, the California Privacy Rights Act (CPRA), you have certain rights with respect to that information:
a. Right to Receive Notice at Collection.
At or before the time we collect your information, you have the right to receive notice of our practices, including the categories of personal information and sensitive personal information to be collected, the purposes for which such information will be collected or used, whether such information will be “sold” or “shared”, and the length of time we intend to retain such information. You can find these details in this section of, and the sections referenced above in, this Privacy Policy.
b. Right to Know / Access.
You have the right to request a copy of the personal information that we have collected about you during the preceding twelve (12) months. You also have the right to request further information about how we collect, use, disclose or sell such personal information. Please note that a substantial portion of this information is already provided in this Privacy Policy, but you may still submit a formal access request to obtain a complete copy.
c. Right to Correct.
If any personal information we maintain about you is inaccurate, you have the right to request that we correct such information, unless otherwise provided by law or where your correction request falls within a statutory exception.
d. Right to Delete.
You have the right to request that we delete personal information that we have collected from you or about you, subject to certain exceptions under the law (for example, where retention is necessary to comply with legal obligations, to complete a transaction, or for security purposes).
To submit a request to correct or delete your personal information, please contact us using the contact details set out in Section 11 (“Contact Us”) of this Privacy Policy.
e. Right to Opt Out / “Do Not Sell or Share My Personal Information”.
You have the right to opt out of any future “sale” or “sharing” of your personal information, as those terms are defined under the CCPA and CPRA.
Please note that the CCPA defines “sell”, “share” and “personal information” very broadly, and as a result, some of the data disclosures described in this Privacy Policy could be considered a “sale” or “sharing” under those definitions. However, we do not “sell” or “share” your personal information as those terms are defined under the CCPA/CPRA. We only share information with third-party service providers that provide services to us, such as hosting, analytics and customer support. These third parties are contractually restricted to using the information solely on our behalf, in accordance with our instructions, and not for their own purposes. If, in the future, we were to engage in any “sale” or “sharing” of personal information, we would update this Privacy Policy and provide you with an appropriate Opt-Out mechanism.
f. Right to Limit the Use of Sensitive Personal Information.
For data that is classified as “Sensitive Personal Information” under the CPRA, you have the right to request that we limit its use to: providing you with the services or goods that you can reasonably expect, and other specific circumstances permitted by law.
At present, we do not use sensitive personal information for any purposes beyond those described above.
g. Authorized Agent.
You may designate an authorized agent, in writing or through a valid power of attorney, to submit requests to access, correct or delete your personal information on your behalf. We will require the authorized agent to provide proof of authorization before accepting the request, and we may also require you to complete identity verification directly with us.
h. Verification Requirements.
In order to fulfill your requests described above, we are required by law to verify your identity. We typically do so by asking you to submit your request using the email address associated with your account, or by asking you to provide information that matches the information associated with your account.
i. Right to Non-Discrimination.
We will not discriminate against you for exercising any of your rights under the CCPA. This includes not denying you services, not charging you different prices or rates, and not providing you with a different level or quality of services, except where differential treatment is permitted by law (for example, lawful differential pricing).
j. Direct Marketing Disclosures.
We will not disclose your personal information to any third parties for their own direct marketing purposes, as defined under California law.
Our service is not directed to individuals under 18 years old.We do not knowingly collect personal information from anyone under 18.If we become aware that a person under 18 has provided personal information to us, we will delete such information and terminate the account.If you believe we have collected information from a minor under 18, please contact us at support@tunee.ai.
In order to continuously improve our Services, we may need to amend this Privacy Policy from time to time. If we make any such changes, we will generally notify all users of any material changes to this Policy, by posting an announcement on the Tunee Platform, by sending you an email and/or by using other means. However, you should look at this Policy regularly to check for any changes. We will also update the “Last Updated” date at the top of this Policy, which reflects the effective date of the Policy. Your continued access to or use of the Services after the date of the updated Policy constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you must stop accessing or using the Services.
If you have any questions or concerns, please do not hesitate to contact us via support@tunee.ai.
Vintage Song Technology Limited
UNIT 07 17/F WESTLEY SQUARE NO.48 HOI YUEN ROAD KWUN TONG HK