Privacy Policy

Last updated October 28, 2026

The short version

This policy explains how Tunestone ("Tunestone", "we", "us") handles information when you use the Tunestone website at tunestone.app and the Tunestone apps (together, the "Service").

What we collect

WhatWhy
Your Google account's email address, name, profile picture link and account ID To create your account, sign you in, and show you which account you're using. We get these from Google when you choose "Continue with Google".
What you add to Tunestone: songs (title, writer, years, tuning, capo, notes), ratings and play history, priorities, and set lists To store your repertoire, schedule practice, and sync it across your devices.
When you created your account, last signed in, and last played a song To run the Service, spot problems, and protect it from abuse.
Technical information our hosting and sign-in providers record automatically, such as IP address, browser or device type, and the time of each request To deliver the website securely and keep it working. These logs are kept by our providers for a limited time.

We don't collect your Google password, contacts, files, or anything else from your Google account beyond what's listed above.

Using Tunestone without signing in

You can use Tunestone without an account. In that case your songs and settings are saved only on your device (in your browser's storage or the app's storage) and are never sent to us. Clearing your browser data or deleting the app removes them.

Information saved on your device

Whether or not you sign in, Tunestone saves a copy of your data and a few settings (such as light or dark mode) on your device so it works offline. When you're signed in, the sign-in session is also kept on your device. We don't use advertising or tracking cookies.

How we use information

We don't sell your information, use it for advertising, or use it to train AI models.

Who can see your information

Your songs, plays and set lists are private to your account. Other users can't see them.

The person who runs Tunestone can see a list of accounts with each account's email, name, sign-up and last-active dates, and the number of songs, plays and set lists. We can technically access the rest of your data, but we only do so when you ask for help, to investigate abuse, or when the law requires it.

Service providers we share with

We use a few companies to run Tunestone. They process information only on our behalf and under their own privacy and security commitments:

We may also share information if required by law, to protect the rights and safety of our users or others, or as part of a merger, sale or transfer of Tunestone. In the last case, this policy would continue to apply to your information, or we'd tell you first.

Google user data

Tunestone's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use the email, name and profile picture from your Google account only to sign you in and identify your account, and we don't transfer them to anyone except the service providers listed above.

How long we keep information

We keep your account and data for as long as your account exists. If your account is suspended, your data is kept until it's restored or deleted. When you delete your account in Settings, it and all its songs, plays and set lists are deleted from our database right away. If you ask us by email instead, we do it within 30 days. Copies in our providers' backups and logs may take a short while longer to expire.

Your choices and rights

Depending on where you live, you may have additional rights, such as objecting to or restricting how we use your information. Contact us and we'll help.

Security

Information is sent over encrypted connections (HTTPS). Database rules let each account read and change only its own data. No system is perfectly secure, so we can't guarantee absolute security, but we work to protect your information and will tell you if a breach affects you as required by law.

Where information is stored

Our providers may store and process information in the United States and other countries. Those countries may have different data protection laws than where you live.

Children

Tunestone isn't meant for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has created an account, contact us and we'll delete it.

Changes to this policy

If we change this policy, we'll update the date at the top. If the changes are significant, we'll also let you know in the app or by email before they take effect.

Contact

Questions or requests: support@tunestone.app.