Privacy Policy

Effective date: 20 August 2026

This policy explains what the Tune Project mobile app (com.thetuneproject.app) does with your information. It covers the app only. Buying tunes happens on the Tune Project website, which runs on Wix and is covered by Wix's own privacy practices.

The app is published by Lauren Abels, doing business as The Tune Project, in Nashville, Tennessee. You can reach me at thetuneprojectbooking@gmail.com about anything in this policy, including a request to see or delete your data.

I am the person responsible for the information described here.

The short version

The app exists to give you the tunes you have already bought, on your phone, including when you have no signal. To do that it needs to know who you are, so it signs you in to your existing Tune Project account and asks my server to look up your purchases.

I do not use advertising. I do not use analytics or tracking software. I do not sell or share your information with anyone for marketing. The app contains no third-party advertising or analytics SDKs of any kind.

You can use the free sample tune without signing in and without giving me anything at all.

What the app collects, and why

Your email address

When you sign in, you are handed to Wix's own hosted login page in a browser window. You type your email and password there, not into the app. The app never sees or stores your password.

Wix returns a set of access tokens to the app. My server then asks Wix "who does this token belong to", and Wix answers with the email address on your account. The app never tells my server who you are — the answer always comes from Wix. This is deliberate: it means nobody can look up somebody else's purchases by claiming to be them.

I use your email address to:

• find your purchases in the Tune Project shop, including any you made as a guest without being logged in;

• label your device in my notifications database, so that signing out removes the right registrations.

Your purchase history

Each time your library loads, my server asks the Tune Project shop for the orders placed against your email address, and returns the tune titles, order numbers, purchase dates, prices, cover images and time-limited download links.

My server does not keep a copy of this. It is assembled for the request and sent straight to your device. It is stored in two places only: at Wix, which is where your order already lives, and in the offline cache on your own phone described below.

Notification tokens

If you turn on any of the notification categories in Settings, your device asks Expo for a push token — an identifier for that specific installation of the app on that specific device — and sends it to my server. I store, in a Cloudflare D1 database:

• the push token;

• the email address of the account signed in on that device;

• which of the four categories you switched on (new tunes, events, seasonal, jam tunes);

• when the row was created and last updated;

• a record of which notifications have already been sent to that device, so you are not told the same thing twice.

A push token is a device identifier, so I keep one only while it is being used. It is deleted when you sign out, when you switch every category off, and automatically when Google reports that the app is no longer installed.

All four categories are off by default. If you never turn one on, no token is ever sent to me.

Your Installation of the app

Each time the app opens it checks whether an update is available. To do that it sends a permanent identifier for that installation of the app to Expo, the service that publishes updates for it.

This happens on every launch, whether or not you have signed in and whether or not you use notifications. It identifies the installation rather than you: it is not your name, not your email address, and it is not linked to them. It is not used for advertising, and it is not an advertising ID.

The identifier belongs to that copy of the app on that phone. It goes when you uninstall, and a fresh one is created if you install again.

The microphone

The tuner listens through your microphone to work out what note you are playing.

No audio ever leaves your device. The tuner analyses the sound on your phone, frame by frame, purely to produce a pitch reading — it keeps the note and discards the sound. Nothing from the tuner is saved, and nothing is sent anywhere.

The microphone is opened only while the tuner is the screen you are looking at and the app is in front of you, and it is closed as soon as you leave it.

Android will ask your permission the first time, and you can refuse or withdraw it at any time in Android Settings without affecting the rest of the app.

What I do not collect

I do not collect your name, your location, your contacts, your photos, your device's advertising ID, or a record of how you use the app. There is no analytics or crash-reporting service in the app.

What is stored on your phone

So that the app works without a signal, it keeps the following in the app's own private storage:

• Your sign-in tokens, in Android's encrypted keystore-backed storage.

• A snapshot of your library — tune titles, prices, order numbers, purchase dates and download links.

• Sheet music you have opened, stored as the PDF itself.

• Your practice settings — metronome tempo, drone, reminder times.

• Recently opened tunes, with the speed and loop you last used, so a reminder can pick up where you left off.

• Anything you have drawn on a score — fingerings, bowings, circles round the bar that keeps catching you out. These stay on your phone. They are never sent anywhere and I never see them.

• Recordings you have played, stored as the audio file itself, at the speed you played them.

None of this is visible to other apps.

Signing out clears your sign-in tokens, the snapshot of your library, the sheet music you have downloaded and your list of recently opened tunes, so the next person to use the phone does not find your tunes on it.

Two things survive signing out, on purpose. Your practice settings, because a tempo and a reminder time are settings for the app rather than anything about you. And anything you have drawn on a score, because it is the one thing here I cannot give back to you if it goes. Drawings are kept separately for each account, so signing in as somebody else on the same phone never shows them.

Deleting your data, from Settings, removes everything listed above from the phone — your drawings and your practice settings included — and deletes your notification registrations from my server. It is the thorough one.

Uninstalling the app also removes everything listed above from the phone. It cannot reach my server, though, so if you want your notification registrations gone at the same time, delete your data before you uninstall.

Who else is involved

I use a small number of services to run the app. Each one is listed here with what it actually receives.

Wix (Wix.com Ltd) receives your login, your account details and your orders. It runs the Tune Project shop and member accounts. Your account already exists there.

Cloudflare (Workers, D1, R2) receives requests from the app, your email address and push token if you enable notifications, and your IP address as part of normal request handling. It runs my server, stores notification registrations, and hosts the tune recordings.

Expo (Expo, Inc.) receives a permanent identifier for your installation of the app, every time the app opens, and your push token and the text of any notification sent to you if you have turned notifications on. It publishes app updates and delivers push notifications.

Google (Firebase Cloud Messaging) receives your push token and notification content, via Expo. It actually delivers the notification to an Android device.

YouTube / Google receives your IP address and standard YouTube player data, when you play a video in the app. Tutorial and channel videos play in the app rather than sending you elsewhere.

I do not sell your information, and none of these services are given it for their own advertising.

About the YouTube videos: the app shows a still thumbnail until you tap play. Only then does a YouTube player load. From that point YouTube may set cookies and collect information as it does on any website, under Google's privacy policy at https://policies.google.com/privacy. If you never tap play, no YouTube player is loaded.

Buying tunes

Tunes are bought on the Tune Project website, not in the app. The purchase happens there, under Wix's payment processing. I never see or handle your card details — not on the website and certainly not in the app.

How long I keep things

• Notification registrations: until you sign out, switch all categories off, or uninstall the app. Then deleted.

• The record of which notifications a device has received: deleted at the same time as the registration it belongs to.

• Your purchases: held by Wix as part of your order history, for as long as your account exists, under Wix's terms and my shop's own retention practice.

• Everything on your phone: until you sign out or uninstall.

My server keeps operational logs (Cloudflare Workers observability) for a short period for debugging. These record request paths and errors. They deliberately never contain your access token.

Your choices and your rights

You can ask me for a copy of the information I hold about you, ask me to correct it, or ask me to delete it. Email thetuneprojectbooking@gmail.com from the address on your account and I will do it. You do not need to live anywhere in particular or cite a law to ask — it is your information.

I do not sell your personal information, and I do not share it for advertising or for anyone else's marketing purposes. There is no advertising in the app, no analytics, and no data broker involved. If you are in California, that means there is nothing for you to opt out of under the "Do Not Sell or Share My Personal Information" right, because no such sale or sharing happens.

Some US states — including California, Colorado, Connecticut, Virginia, and my home state of Tennessee — give residents specific rights over their personal information. Those laws generally apply to businesses much larger than mine, so they may not strictly apply here. I am not going to hide behind that. If you want your information, corrected or deleted, ask and I will handle it, whichever state you live in.

Notifications are opt-in. Every category is off until you switch it on, and switching it off stops it. That is the only consent the app asks for, and you can withdraw it at any time in Settings without contacting me.

Deleting your account

To delete your account and the personal information attached to it, see https://www.thetuneproject.org/delete-account, or email thetuneprojectbooking@gmail.com from the address on your account.

You can also delete everything the app holds from inside the app itself, under Settings, without contacting me.

When you ask, I delete your member account and the notification registrations tied to your email address. Your order records are kept where I am legally required to keep them — tax and accounting law requires businesses to retain records of sales for a set period — and are deleted at the end of that period. Deleting your account means you lose access to the tunes you bought, so I will say so and confirm before doing it.

You can remove everything the app holds on your own device at any time by signing out or uninstalling.

Children

The app is made for adults learning to play the fiddle. It is not directed at children and I do not knowingly collect information from anyone under 13. If you believe a child has given me information, email thetuneprojectbooking@gmail.com and I will delete it. This is what the Children's Online Privacy Protection Act (COPPA) requires, and it is also just correct.

Security

Sign-in tokens are held in Android's encrypted, keystore-backed storage. All traffic between the app, my server, Wix and Expo uses HTTPS. My server never accepts an identity claim from the app — it always verifies with Wix first. The administrative key my server uses to read orders is restricted to an explicit list of read-only operations and is never included in the app itself.

No system is perfect, and I cannot promise absolute security, but I do not collect more than I need, which is the most reliable protection there is.

Changes

If I change this policy I will update the date at the top and, where the change is significant, say so in the app or by email.

Contact

Lauren Abels, doing business as The Tune Project Nashville, Tennessee thetuneprojectbooking@gmail.com