Privacy Policy

1. Information we collect

Information you provide

• account information, including your email address and legal-policy acceptance;
• profile information, such as display name, username, photo, and bio;
• concert responses, attendance confirmations, ratings and review notes, ticket status, private Plans, group Chat messages, invitation choices, friendships, blocks, and reports;
• account-export and deletion requests; and
• communications you choose to send to support or privacy.

In the iOS app, choosing a profile photo gives Tuno access to the selected image, not your entire photo library. The app resizes and re-encodes it before upload without copying the source photo’s location or other embedded metadata.

Information collected through use

• search terms and filters sent to retrieve concerts; public search results may be cached to serve repeat requests;
• authentication, security, and network information such as login state, IP address, device/browser class, and abuse-prevention results;
• when web analytics is configured, limited product events for important outcomes, such as whether a sign-in request or profile completion succeeded; and
• operational records needed to diagnose failures, enforce limits, run ingestion, and protect the service.

If you enable native notifications, we retain an installation identifier, device delivery token and notification preferences. Apple processes push delivery. Plan Chat notices include sender names and Plan titles by default, or generic copy when you enable private notifications. Friend-request notices use generic copy. Notifications never include message text. You can turn notifications off or choose types in the app’s Settings, mute individual Plans, or change device permission in iOS Settings. Notification source records become eligible for cleanup after one day, delivery records after seven days, and delivery receipts and inactive installations after 30 days. Cleanup runs in bounded batches.

Information from other sources

We receive concert, artist, venue, image, schedule, and ticket-link information from Ticketmaster; basic identity information from Google or Apple if you choose an available provider sign-in option; and public profile or Plan information from other Tuno users who interact with you. Google identity information is limited to the basic profile and email information needed for account access. Apple supplies an account identifier and authorized email address, which may be a private relay address, and may supply your name on first authorization. You can edit the proposed name during setup. We also process provider authorization credentials to establish account access and revoke Apple authorization when your account is deleted.

2. How we use information

We use information to:

• authenticate users and provide requested features;
• show profiles, concert responses, calendars, friends, Plans, and Plan group Chats;
• send one-time sign-in and service-related emails;
• protect users, prevent abuse, enforce limits, and secure Tuno;
• debug, measure, and improve important product flows;
• honor export, correction, block, and deletion choices; and
• comply with law and enforce our Terms.

We do not use the contents of private Plans or Plan Chats, bios, messages to support, or direct identity as passive analytics payloads.

3. Visibility and social features

Your display name, username, photo, bio, public profile, friendship count, and concert activity may be visible according to the feature’s design and your relationships. Private Plan membership and guest details are limited to the people who can access that Plan. Blocking and reporting restrict interactions but cannot remove information another person obtained before the restriction.

A Plan has one group Chat. Every current member, including someone who joins later, can see its full retained history. Chat is stored by Tuno and Supabase so the service can deliver it; it is not end-to-end encrypted or hidden from Tuno’s database. Blocking a member does not hide messages inside a shared Plan. Leaving removes your access but preserves your earlier messages. Organizer removal also revokes access while preserving that member’s earlier messages.

Do not add information to a profile or Plan that you do not want the relevant audience to see.

4. How we disclose information

We may disclose information:

• to other users as needed for public profiles, friendships, concert activity, invitations, and private Plans;
• to service providers that process information for us, including Supabase (database, authentication, storage, server functions, and private real-time Chat delivery), Vercel (web hosting), Resend (transactional email), Cloudflare Turnstile (abuse prevention), and PostHog (limited product analytics);
• to comply with law, lawful process, or valid government requests;
• to protect Tuno, users, and others from fraud, abuse, security threats, or harm; or
• in connection with a financing, merger, acquisition, reorganization, or sale, subject to appropriate protections.

Image hosts, including Ticketmaster, receive network requests when the website or app loads their images. Google or Apple receives the authorization request when you choose its sign-in option. Opening an external ticket or music link sends you to that provider, whose own privacy practices apply. Tuno does not import your music library or request access to your Google Calendar or device calendars. Google receives event details when you choose the “Google Calendar” link; this is an external handoff, not ongoing calendar access.

We do not sell personal information or share it for cross-context behavioral advertising, and we do not use personal information for targeted advertising.

5. Cookies, local state, and tracking choices

Tuno uses cookies or similar browser storage that are necessary for authentication, security, and your theme preference. Turnstile may process browser and network signals to distinguish people from abusive automation, including in the iOS sign-in challenge. When enabled on the website, our PostHog configuration records a small set of explicit outcome events without persistent identifiers, automatic page/tap/scroll capture, or session replay. The iOS app does not currently include a product-analytics or crash-reporting SDK, automatic interaction tracking, or session replay.

The iOS app keeps sign-in credentials and pending authentication or account-deletion recovery information in the device’s Keychain. It stores your appearance preference locally and uses temporary state for requested content and sharing. It does not request your address book or device location. The sign-in challenge uses temporary web storage; Tuno does not pass your email, one-time code, or session credentials into that web view.

Cloudflare describes its use of network and browser signals for security and improvement of bot detection in its Turnstile Privacy Addendum.

Browsers may offer Do Not Track signals. Because there is no universally accepted response standard, Tuno does not respond to DNT as a separate setting. We do not sell or share information for cross-context behavioral advertising, so a Global Privacy Control signal does not change that already-disabled behavior.

6. Retention

We keep account, profile, concert-response, social, Plan, and Plan Chat information while your account is active or as needed to provide the service. Chat messages and deleted-message markers are retained while their Plan exists. Permanently deleting a Plan deletes its complete Chat. Account deletion removes your message bodies and attribution while preserving minimal deleted-message markers in Plans that other members keep. You can request deletion from Privacy & data settings. Operational retention is intentionally bounded: account-export receipts are generally kept for 90 days; reports and relevant social safety evidence for about 180 days; and deletion/control receipts for about 365 days. Task evidence, logs, and backups use separate limited windows appropriate to operations, licensing, security, and recovery. Tuno does not retain normalized provider snapshots.

Apple authorization credentials are encrypted on our servers. If Apple is unavailable during account deletion, a pending revocation record can remain after the Tuno account is removed so we can retry. We erase the retained credentials when revocation completes; completed or missing-token bookkeeping is eligible for routine cleanup after 30 days. Pending revocation credentials do not expire on that same schedule.

Native account exports use a protected temporary file that the app removes after sharing finishes or is dismissed. A copy you choose to save or send through Files or another app is controlled by you and that destination; deleting your Tuno account does not remove those copies. Pending local recovery information is cleared when the related flow finishes, or retired according to sign-out and account-change safeguards. Your local appearance choice survives sign-out.

We may retain limited information longer when reasonably necessary for security, fraud prevention, legal obligations, disputes, or enforcement. Backup copies are removed on their normal rotation.

7. Your choices and privacy rights

You can update profile information, manage concert and social state, block users, delete your own Chat messages while you remain a Plan member, export account information, and request deletion from Tuno’s settings. Your export includes messages you authored, not other members’ message bodies. You may also contact us to ask for access, correction, deletion, or information about our handling of your data.

Depending on where you live, including California, you may have rights to know, access, correct, delete, or receive personal information, and to appeal or limit certain uses. We will not discriminate against you for exercising an applicable privacy right. We may need to verify your request and may retain information that an applicable exception permits or requires us to keep.

Tuno does not currently sell personal information, share it for cross-context behavioral advertising, or offer a financial incentive for personal information. An authorized agent may submit a request where permitted by law, subject to verification of authority.

8. Security

We use administrative, technical, and organizational safeguards designed for the nature of the service, including encrypted network transport and provider-managed encryption at rest. Plan Chat is not end-to-end encrypted, so these safeguards do not make it inaccessible to Tuno’s systems. No online service can guarantee absolute security. Report a suspected vulnerability to security@mytuno.com and do not include unnecessary personal information.

9. Children and teens

Tuno accounts are for people age 13 or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 provided information to Tuno, contact us so we can investigate and delete it where appropriate. A user under the age of legal majority must have a parent or legal guardian review and agree to Tuno’s Terms on the user’s behalf.

10. United States processing

Tuno and its service providers may process and store information in the United States and other locations where they operate. Those locations may have privacy laws different from the laws where you live.

11. Changes to this Policy

We may update this Policy as Tuno changes. We will post the updated version and effective date, provide additional notice when appropriate, and request renewed acceptance when required.

12. Contact

Send privacy questions or requests to privacy@mytuno.com. General support is available at support@mytuno.com.