Last Updated: September 10, 2026
This Privacy Policy ("Policy") describes how ToneForge ("ToneForge"), the operator of the ToneForge mobile application ("ToneForge", "we", "us", or "our"), collects, uses, discloses, retains, transfers, secures, and otherwise processes Personal Information in connection with the ToneForge iOS application and any related services (collectively, the "Services").
ToneForge is a free, AI-assisted music practice companion. By creating an account or otherwise using the Services, you acknowledge that you have read and understood this Policy and our Terms of Service. If you do not agree with this Policy, you must not use the Services.
────────────────────────────────────────
This Policy applies to Personal Information that we process as a business or controller (or analogous role) under applicable data-protection laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the EU General Data Protection Regulation ("GDPR"), the UK GDPR, Canada's PIPEDA, and comparable U.S. state and non-U.S. privacy regimes (collectively, the "Privacy Laws").
This Policy does not apply to (a) information processed by third parties we do not control, including Apple, Google, and OpenAI, except as expressly described below; or (b) information that has been deidentified or aggregated so that it can no longer reasonably be linked to you.
────────────────────────────────────────
"Personal Information" means information that identifies, relates to, describes, or could reasonably be linked with a particular natural person, as defined under applicable Privacy Laws. "Process" means any operation performed on Personal Information, whether or not by automated means.
────────────────────────────────────────
We collect only what the app needs to function. Specifically:
3.1 Account and Authentication Information
You create an account in one of three ways:
Sign in with Apple. We receive an Apple-issued identifier and your email address. If you choose Apple's "Hide My Email" option, we receive only a private relay address and never see your real email.
Sign in with Google. We receive your name, email address, and profile picture URL from Google.
Email and password. Your password is handled entirely by our authentication provider, Supabase, and is stored only as a salted cryptographic hash. We never receive, see, or store your password in plaintext, and we cannot recover it.
3.2 Profile Information
Username, display name, chosen instrument, daily practice goal in minutes, profile photo (if you upload one), your private-profile setting, and whether you identified yourself as a beginner during onboarding.