Last updated: July 16, 2026
Welcome to Tunee (the “Platform”). The Platform is provided and controlled by Vintage Song Technology Limited (“Tunee”, “we” or “us”). We are committed to protecting and respecting your privacy.
For the purposes of applicable data protection laws, the data controller is Tunee. Please read this Privacy Policy carefully, as it describes in detail how we collect, use, disclose, share, sell, store and protect your personal information, as well as what privacy rights you have and how you can exercise them.
By accessing or using our website, services, applications, products and content (that include but are not limited to the Platform) (collectively, the “Services”), you acknowledge that you have read this Privacy Policy ("Policy") and that you understand how we will collect, use and process your personal information. If you do not agree with this Policy in general or any part of it, we recommend that you do not use our Services.
Your use of our Services is at all times governed by our Terms of Service, into which this Privacy Policy is incorporated. Any terms used but not defined in this Privacy Policy shall have the meanings given to them in the Terms of Service.
This Privacy Policy explains, among other things:
If you have any questions about how we use your information, please contact support@tunee.ai.
“Personal Information” means any information that identifies or can reasonably be linked to a particular individual, and also includes information referred to as “personally identifiable information”, “personal data” or “sensitive personal information” under applicable data privacy laws, regulations or rules.
The following table sets out in detail the categories of Personal Information we collect and have collected in the preceding twelve (12) months, the categories of sources from which we collect such information, the purposes for which we use it, and the categories of third parties to whom we disclose consumers’ Personal Information.
| Source of Personal Information | Categories of Personal Information (Examples) | Collection Scenarios and Purposes |
|---|---|---|
| Information You Provide / Information Provided to Us by Third Parties | Contact and Account Information (such as Google ID, Apple ID, email address, account nickname, profile picture, gender, username, and similar information) | Scenario: Account registration Purpose: To create and manage your account, display your profile, and provide customer support |
| Information You Provide / Information Provided to Us by Third Parties | Creation and Activity Information (such as user-generated content, your interactions with Tunee, works you create or upload, and feedback you submit) | Scenario: Creation and interaction Purpose: To enable content creation features and provide content-related services |
| Information You Provide / Information Provided to Us by Third Parties | Customer Service and Support Data (such as contact information, including your email address, descriptions of issues, service records, and communication history) | Scenario: Submitting complaints or contacting customer service Purpose: To respond to inquiries and complaints, provide technical support, resolve product-related issues, and improve our services |
| Information You Provide / Information Provided to Us by Third Parties | Payment and Transaction Data (such as payment information, transaction records, and order information) | Scenario: Payments and transactions Purpose: To process payments, generate orders, issue invoices, and process refunds |
| Information We Automatically Collect When You Use the Services | Device-Related Data (such as device identifiers, device model, operating system, and platform information) | Scenario: Logging in to and using the Services Purpose: To provide and optimize core features, maintain system security and stability, and improve the user experience |
| Information We Automatically Collect When You Use the Services | Platform Operations and Management Data (such as crash logs, statistics, and analytics data) | Scenario: Use of the Services Purpose: To maintain system stability and security, conduct data analysis and research, troubleshoot issues, optimize features and user experience, conduct statistical analysis and satisfaction surveys, and improve service quality |
| Information We Automatically Collect When You Use the Services | Cookies and Similar Technologies Data | Scenario: Use of cookies and similar technologies Purpose: To provide essential features, analyze access to and use of the Services, and optimize the product experience and operational strategies |
| Information We Automatically Collect When You Use the Services | Security and Risk Control Data (such as records of abnormal activities and security verification information) | Scenario: Security and risk control Purpose: To prevent fraud and malicious activities, protect account security, identify unusual login activities, and prevent misuse of the platform |
Tunee hereby discloses the categories of Sensitive Personal Information that we may collect and the corresponding processing practices. The definition and scope of “Sensitive Personal Information” may vary depending on applicable laws and regulations.
Categories of Sensitive Personal Information Collected
Based on the Services we provide and your interactions with Tunee, the following information may constitute Sensitive Personal Information under applicable law:
Account Authentication Information: When you use email login, account recovery, or third-party account login, we may process your email verification code, third-party account identifier, and other information necessary to authenticate your identity and protect your account.
User Recordings and Uploaded Content: When you actively use AI music creation, music transcription, humming, or other content creation features, you may submit recordings, audio files, images, videos, documents, creative prompts, or other content. Such content may contain Sensitive Personal Information depending on the information you choose to provide.
We do not require you to include Sensitive Personal Information in your prompts, recordings, or uploaded content. Please avoid submitting unnecessary Sensitive Personal Information or information relating to other individuals unless you are legally authorized to do so.
We do not use your recordings or uploaded audio files for biometric identification, identity authentication, or the creation of biometric profiles unless we separately notify you and obtain any consent required by applicable law.
We collect and process Sensitive Personal Information only where necessary and permitted under applicable law, including for the following purposes:
Depending on the applicable jurisdiction and the specific processing activity, the legal basis for processing may include:
Where applicable law requires separate or explicit consent for the processing of Sensitive Personal Information, we will provide a specific notice and obtain your consent before carrying out such processing.
We adopt enhanced technical and organizational measures to protect Sensitive Personal Information, taking into account the nature of the information, the processing purposes, the potential risks, and applicable legal requirements. These measures may include:
Secure Transmission and Storage: We use appropriate technical safeguards, including encryption where technically applicable, to reduce the risk of unauthorized access, alteration, disclosure, loss, or misuse.
Access Control: We restrict access to Sensitive Personal Information to authorized personnel and service providers who need such access for legitimate and authorized purposes.
Permission Management: Access rights are assigned according to job responsibilities and the principle of least privilege.
Security Monitoring and Logging: We maintain appropriate security logs and monitoring measures to identify abnormal access, unauthorized operations, and potential security incidents.
Security Assessments: We periodically assess systems and processing activities involving Sensitive Personal Information and take reasonable measures to identify and remediate security vulnerabilities.
Data Minimization: We collect and process only the minimum amount of Sensitive Personal Information reasonably necessary to achieve the purposes described in this Privacy Policy.
Retention Controls: We retain Sensitive Personal Information only for as long as necessary to fulfill the relevant purposes, comply with legal obligations, resolve disputes, or enforce agreements. After the applicable retention period expires, we will delete, anonymize, or otherwise securely dispose of the information, unless continued retention is required or permitted by law.
Service Provider Management: Where third-party service providers process Sensitive Personal Information on our behalf, we require them to process such information only for authorized purposes and to implement appropriate confidentiality and security safeguards.
Although we take reasonable measures to protect Sensitive Personal Information, no method of transmission or storage can guarantee absolute security.
Tunee does not sell Sensitive Personal Information. We also do not use or disclose Sensitive Personal Information for the purpose of inferring characteristics about you, except where separately disclosed and permitted under applicable law.
The availability and scope of these rights may vary depending on the laws applicable to your place of residence.
To exercise any of the rights described above, please contact our Data Protection Officer (“DPO”) through the following channels:
Name: Zhounianbin Email: support@tunee.ai Phone: +852 66628076
After receiving your request, we may take reasonable steps to verify your identity and your authority to submit the request. We will respond within the period required by applicable law.
Where permitted by law, we may refuse or limit a request that is manifestly unfounded, excessive, repetitive, fraudulent, technically infeasible, or likely to adversely affect the rights and freedoms of another person. Where required, we will explain the reasons for our decision.
We will not unlawfully discriminate against you for exercising your privacy rights.
Where necessary to provide specific Services, we may collect sensitive personal information (as that term is defined under the California Consumer Privacy Act (“CCPA”) and its amending statute, the California Privacy Rights Act (“CPRA”)). Except to the extent necessary to provide our Services or as otherwise permitted by the CCPA/CPRA, we do not use or disclose your sensitive personal information for any other purposes. You have the right to limit our use or disclosure of your sensitive personal information for any purposes other than providing the Services or goods you request, unless otherwise required or permitted by law.
To provide the Services to you, we collect and process your Personal Information for one or more of the purposes set out below and/or in Section 8 of this Privacy Policy, including:
A. Business Purposes for Which We Collect Personal Information
(1) To Provide, Customize and Improve the Services
(2) To Communicate With You To respond to correspondence we receive from you, contact you where necessary or upon your request, and send you the latest information about our company or our Services; To send you emails and other communications in accordance with your preferences.
B. Other Lawful Purposes for Processing Personal Information
In addition, the categories of Personal Information described above may be collected, used and disclosed to governmental authorities (including law enforcement) or other relevant parties as necessary to satisfy certain legal requirements and to enforce legal terms, including: To comply with our legal obligations under applicable laws and regulations, court orders or other legal processes (for example, to prevent, detect and investigate security incidents and potential illegal or prohibited activities); to protect the rights, property or safety of you, us (the Company) or others; to enforce any agreements entered into with you; to respond to claims that any posts or other content infringe the rights of third parties; and to resolve disputes.
We will not collect additional categories of Personal Information or use the Personal Information we have collected for materially different, unrelated or incompatible purposes without first providing you with notice or obtaining your consent, unless otherwise required or permitted by applicable law.
We use cookies and similar technologies, such as pixels, web beacons and software development kits (collectively, “Cookies”), so that our servers can recognize your web browser, understand how and when you access and use our Services, analyze trends, understand our user base, and operate and improve our Services. Cookies are small data files (typically text files) that are placed on your computer, tablet, mobile phone or similar device when you access our Services using such devices. We may also supplement information we collect from you with information we receive from third parties, including third parties that have placed their own Cookies on your device.
(1) We Use the Following Types of Cookies:
Necessary Cookies.
These Cookies are essential to provide you with the features or Services you have requested. For example, certain Cookies enable you to log in to secure areas of our Services. If you disable these Cookies, some features and Services may not function properly or may become unavailable.
(2) Disabling Cookies and Similar Technologies
By using the Services and allowing us to place Cookies and similar technologies, you consent to our use of these technologies and to the collection of user activity information generated through them. You may withdraw or modify your consent at any time by changing your browser settings to disable Cookies. However, if you choose to disable this function, your experience with the Services may be affected and some features may not function properly.
Although your browser may allow you to send “Do Not Track” signals, like many websites, our Services are not currently configured to respond to such signals, and we do not use or disclose your information in a way that would require us to recognize “Do Not Track” signals under applicable law.
(1) We will disclose your Personal Information to the categories of service providers and other parties listed in this Section. We do not sell Personal Information, nor do we share it with third parties for marketing purposes. However, under the laws applicable in the region where you are located, some of the disclosures described in this Privacy Policy may be deemed a “sale” of your Personal Information.
(2) We will disclose your information with law enforcement agencies, public authorities or other organizations if legally required to do so, or if such use is reasonably necessary to:
(3) Business Transfers. All Personal Information we collect may be transferred to a third party in the event of a merger, acquisition, bankruptcy, corporate reorganization or other transaction in which a third party assumes control of all or part of our business.
(4) Specific Third-Party Disclosures.
| No. | SDK Name | Developer | Scope of Information Collected | Purpose of Collection | Privacy Policy URL |
|---|---|---|---|---|---|
| 1 | Google Sign-In | Google LLC | Profile picture, nickname, email address, and Google Account identifier | To enable third-party login using a Google Account | https://policies.google.com/privacy |
| 2 | Sign in with Apple | Apple Inc. | Nickname, email address, which may be replaced with a private relay email address, and Apple Account identifier | To enable third-party login using an Apple Account | https://www.apple.com/legal/privacy/data/en/sign-in-with-apple/ |
| 3 | Firebase Crashlytics | Google LLC | Device model, device brand, operating system version, app version, crash stack traces, runtime status, and App Instance ID | To detect, track, and analyze crashes and abnormal events within the app and improve app stability | https://firebase.google.com/support/privacy |
| 4 | Firebase Cloud Messaging (FCM) | Google LLC | Device push notification identifier (FCM Token), device information, and App Instance ID | To deliver push notifications when the app is offline or running in the background | https://firebase.google.com/support/privacy |
| 5 | Firebase Remote Config | Google LLC | Device model, operating system version, language, country or region, app version, and App Instance ID | To remotely configure parameters and deliver feature switches and staged rollout strategies based on factors such as operating system, language, country or region, and app version | https://firebase.google.com/support/privacy |
| 6 | Mixpanel | Mixpanel, Inc. | Device information, including device model, operating system, and language; user event and activity data; and user identifiers | To perform statistical analysis of user activities and optimize the product experience | https://mixpanel.com/legal/privacy-policy/ |
| 7 | OSS SDK | Alibaba Cloud | System name, system version, network connection type, device model, and build ID | To upload files submitted by users to object storage | https://www.alibabacloud.com/help/en/oss/user-guide/compliance-certifications?spm=a2c63.p38356.0.i8 |
(5) We will also disclose your information with any member, subsidiary, parent, or affiliate of our corporate group, only for the purposes set out above, to assist in the improvement and optimisation of the Platform, in order to prevent illegal uses, increase user numbers, development, engineering and analysis of information or for our internal business purposes.
You acknowledge and agree that your information will be collected and stored on our servers located in [Singapore], which may be outside the country or region where you reside. Regardless of where our servers are located, we take steps to ensure that your information is treated securely and in accordance with this Policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your information, for example, by encryption, we cannot guarantee the security of your information transmitted through the Platform.
We take appropriate technical and organizational measures to protect personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction. We maintain these technical and organizational measures and will amend them from time to time to improve the overall security of our systems.
Please note that, websites that link to or are linked from our Website or the Services may collect your personal information. This Privacy Policy does not apply to such third-party services, and we cannot control the activities of those websites. We strongly encourage you to carefully read the privacy policies of any such third-party websites you are directed to before providing any personal information.
| No. | Device Permission | Permission Description | Use Scenario and Purpose | Authorization Method | Can Be Disabled |
|---|---|---|---|---|---|
| 1 | Photos — Read Access | Access photos and local media files stored on the device | To select a local image for changing the profile picture, or select an audio file for upload and AI creation | Permission is requested when the user actively selects an image or file | Yes |
| 2 | Photos — Save / Write Access | Save images and videos to the device’s photo library or download directory | To save AI-generated images or videos, download invoice PDFs, or save shared works locally | Permission is requested when the user actively taps the save or share button | Yes |
| 3 | Media & Apple Music | Access the device’s media library to select audio files | To select audio files from the device’s media library and upload them for AI creation | Permission is requested when the user actively selects an audio file | Yes |
| 4 | Notifications | Display notification messages on the device | To send notifications, provide media playback controls, and notify users when content generation or downloads are completed | Permission is requested upon first launch or when the user actively enables notifications | Yes |
We retain information for as long as necessary to provide the Platform and for the other purposes set out in this Privacy Policy. We also retain information when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing the Platform, and enhancing its safety, security and stability), and for the exercise or defence of legal claims.
The retention periods are different depending on different criteria, such as the type of information and the purposes for which we use the information. For example, when we process your information such as your account information to provide you with the Platform, we keep this information for as long as you have an account. If you violate our Terms of Service, or other conditions or policies, we may remove your account from the Platform or User Content from public view immediately, but may keep other information about you to process the violation.
If you have registered for an account, you may access and update certain personal information that you have provided to us by logging into your online account and using the features and functionalities available there.
In certain circumstances (for example, where you believe such data is inaccurate, our processing is unlawful, or we no longer need to process such data for a specific purpose), you have the right to request that we stop processing the Personal Information we hold about you, except to the extent that we continue to process it for storage purposes only.
Where we rely on your consent to process your Personal Information, you may withdraw your consent at any time by sending us a notice specifying which consent you wish to withdraw, or by using the consent withdrawal features made available within the Services. Please note that withdrawing your consent will not affect the lawfulness of any processing carried out before your withdrawal.
However, please also note that if we stop processing Personal Information on the basis of your consent, we may still use such information again if we have another valid legal ground to do so. For example, where processing is necessary for the performance of a contract, to protect your vital interests or those of another natural person, or where processing is necessary for any other lawful reason provided under applicable data protection laws.
Account Deletion
If you no longer wish to use our Services, you may delete your account information directly through the app or via our web portal. To delete your account within the app, please go to the Account Management Center and select “Delete Account.” You may complete the account deletion process by confirming the pop-up message.
In addition, you may request that we delete any personal information we hold about you on the Platform or delete your account with us via support@tunee.ai, subject to the Terms and conditions of the Platform and applicable laws and regulations.
Once your account is deleted, it will be permanently and irreversibly removed, and cannot be restored under any circumstances. All content and information you have added will likewise be permanently erased and cannot be recovered.
Special Notice to California Residents
If you are a resident of California, the CCPA/CPRA requires us to provide you with the following additional notice. For the purposes of this notice, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined in the California Consumer Privacy Act of 2018 (California Civil Code Sections 1798.100 through 1798.199) and its implementing regulations, in each case as amended or replaced from time to time (the “CCPA”).
The categories of Personal Information that we collect, use and disclose, and that we have collected, used and disclosed in the preceding twelve (12) months, are described in the “The Types of Information We Collect” section above.
Under California’s “Shine the Light” law, California residents may request that we provide a list of third parties to whom we have disclosed certain personal data for their direct marketing purposes. You may submit such a request once per calendar year. Please include in your request sufficient information to verify that you are a California resident and provide your current California mailing address so that we can respond. You may request this information by contacting us using the contact details set out in the “Contact Us” section below. We will respond to your request within thirty (30) days. We are not able to respond to requests submitted through means other than the designated email address.
We will respond to your verifiable consumer request free of charge within forty-five (45) days by providing the requested information, correcting any inaccurate personal information, or deleting your personal information, as applicable. Where reasonably necessary, if we are unable to process your request within forty-five (45) days, we will notify you in writing of the extension within that period, and the extension will not exceed an additional forty-five (45) days.
If you are a California resident and the processing of your personal information is subject to the California Consumer Privacy Act (CCPA) and its amending statute, the California Privacy Rights Act (CPRA), you have certain rights with respect to that information:
a. Right to Receive Notice at Collection.
At or before the time we collect your information, you have the right to receive notice of our practices, including the categories of personal information and sensitive personal information to be collected, the purposes for which such information will be collected or used, whether such information will be “sold” or “shared”, and the length of time we intend to retain such information. You can find these details in this section of, and the sections referenced above in, this Privacy Policy.
b. Right to Know / Access.
You have the right to request a copy of the personal information that we have collected about you during the preceding twelve (12) months. You also have the right to request further information about how we collect, use, disclose or sell such personal information. Please note that a substantial portion of this information is already provided in this Privacy Policy, but you may still submit a formal access request to obtain a complete copy.
c. Right to Correct.
If any personal information we maintain about you is inaccurate, you have the right to request that we correct such information, unless otherwise provided by law or where your correction request falls within a statutory exception.
d. Right to Delete.
You have the right to request that we delete personal information that we have collected from you or about you, subject to certain exceptions under the law (for example, where retention is necessary to comply with legal obligations, to complete a transaction, or for security purposes).
To submit a request to correct or delete your personal information, please contact us using the contact details set out in Section 11 (“Contact Us”) of this Privacy Policy.
e. Right to Opt Out / “Do Not Sell or Share My Personal Information”.
You have the right to opt out of any future “sale” or “sharing” of your personal information, as those terms are defined under the CCPA and CPRA.
Please note that the CCPA defines “sell”, “share” and “personal information” very broadly, and as a result, some of the data disclosures described in this Privacy Policy could be considered a “sale” or “sharing” under those definitions. However, we do not “sell” or “share” your personal information as those terms are defined under the CCPA/CPRA. We only share information with third-party service providers that provide services to us, such as hosting, analytics and customer support. These third parties are contractually restricted to using the information solely on our behalf, in accordance with our instructions, and not for their own purposes. If, in the future, we were to engage in any “sale” or “sharing” of personal information, we would update this Privacy Policy and provide you with an appropriate Opt-Out mechanism.
f. Right to Limit the Use of Sensitive Personal Information.
For data that is classified as “Sensitive Personal Information” under the CPRA, you have the right to request that we limit its use to: providing you with the services or goods that you can reasonably expect, and other specific circumstances permitted by law.
At present, we do not use sensitive personal information for any purposes beyond those described above.
g. Authorized Agent.
You may designate an authorized agent, in writing or through a valid power of attorney, to submit requests to access, correct or delete your personal information on your behalf. We will require the authorized agent to provide proof of authorization before accepting the request, and we may also require you to complete identity verification directly with us.
h. Verification Requirements.
In order to fulfill your requests described above, we are required by law to verify your identity. We typically do so by asking you to submit your request using the email address associated with your account, or by asking you to provide information that matches the information associated with your account.
i. Right to Non-Discrimination.
We will not discriminate against you for exercising any of your rights under the CCPA. This includes not denying you services, not charging you different prices or rates, and not providing you with a different level or quality of services, except where differential treatment is permitted by law (for example, lawful differential pricing).
j. Direct Marketing Disclosures.
We will not disclose your personal information to any third parties for their own direct marketing purposes, as defined under California law.
Virginia Consumer Data Protection Act (VCDPA) Notice
For users located in the Commonwealth of Virginia, we comply with the Virginia Consumer Data Protection Act (VCDPA). You may exercise the following rights under the VCDPA:
The right to confirm whether we process your personal data
The right to access your personal data
The right to correct inaccurate personal data
The right to delete your personal data
The right to data portability
The right to opt out of the processing of personal data for targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects
You may submit a request to exercise your VCDPA rights by contacting our Data Protection Officer using the contact information listed above. We will not discriminate against you for exercising your privacy rights under applicable law.
EEA, UK and Switzerland
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you may have additional rights under applicable data protection laws.
To exercise any of the rights described above, you may contact us via our webform. Before responding to your request, we may require you to verify your identity or provide additional information to ensure that we can properly understand and process your request.
If you are not satisfied with our response, you have the right to contact us for further review. You also have the right to lodge a complaint with the Irish Data Protection Commission (as our lead supervisory authority) or with the supervisory authority in your country of residence, place of work, or place of the alleged infringement.
Data Transfers
Where we transfer your personal data outside of the EEA, the UK, or Switzerland, we ensure that such transfers are subject to appropriate safeguards in accordance with applicable data protection laws, including, where applicable, the use of standard contractual clauses or other legally recognized transfer mechanisms to ensure an adequate level of protection.
Other regions
Your rights and choices
You have rights and choices when it comes to your information. You may be afforded certain rights under applicable laws, which may include the right to access, delete, update, or rectify your data, to be informed of the processing of your data, to file complaints with authorities, and potentially other rights. You may submit a request to exercise your rights.
The security of your information
We take steps to ensure that your information is treated securely and in accordance with this policy. Unfortunately, the transmission of information via the internet is not completely secure. Although we will use reasonable measures to protect your personal data, for example, by encryption, we cannot guarantee the security of your information transmitted via the Platform; any transmission is at your own risk.
We have appropriate technical and organizational measures to ensure a level of security appropriate to the risk of varying likelihood and severity for the rights and freedoms of you and other users. We maintain these technical and organizational measures and will amend them from time to time to improve the overall security of our systems.
Our service is not directed to individuals under 13 years old.We do not knowingly collect personal information from anyone under 13.If we become aware that a person under 13 has provided personal information to us, we will delete such information and terminate the account.If you believe we have collected information from a minor under 13, please contact us at support@tunee.ai .
In order to continuously improve our Services, we may need to amend this Privacy Policy from time to time. If we make any such changes, we will generally notify all users of any material changes to this Policy, by posting an announcement on the Tunee Platform, by sending you an email and/or by using other means. However, you should look at this Policy regularly to check for any changes. We will also update the “Last Updated” date at the top of this Policy, which reflects the effective date of the Policy. Your continued access to or use of the Services after the date of the updated Policy constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you must stop accessing or using the Services.
If you have any questions or concerns, please do not hesitate to contact us via support@tunee.ai.
Vintage Song Technology Limited
UNIT 07 17/F WESTLEY SQUARE NO.48 HOI YUEN ROAD KWUN TONG HK