Tunessa Privacy Policy

Effective date: 4 November 2026

Tunessa is an instrument tuner, metronome and practice log for Android, published by Atakli Store. It tunes guitars, basses, ukuleles, violins and more than 30 other instruments through your phone's microphone, keeps time with a metronome and, if you want, logs how long you practice. It works offline, has no ads and needs no account. This policy explains what happens to your data when you use the Tunessa app and the website tunessa.web.app.

1. The short version

• Sound from the microphone never leaves your phone. The tuner listens only while the Tune screen is open and the app is in front. Sound is processed in real time on your device, held only in short-lived working memory and discarded right away. It is never recorded, stored or transmitted, not to us and not to anyone else.
• Your practice log stays on your phone. Practice sessions, piece names, notes, weekly goals, setlists, custom tunings and settings are stored on your device and never uploaded to us.
• No account. Tunessa has no sign-up and no login. We do not ask for your name, email address or phone number.
• No ads. The app contains no advertising software and does not use the Android Advertising ID.
• Only one sensitive permission: the microphone, asked for when you first open the tuner, after a short explanation. No location, camera, contacts, photos or storage permissions.
• Usage statistics, crash reports and remote settings are off until you turn them on. This is the same for everyone, everywhere. There are two switches, "Share anonymous usage statistics" and "Send crash reports". While both are off, the app does not contact Google Analytics, Crashlytics, Remote Config or any other Firebase service. Separately, Google Play's billing component, which the app needs to offer and check purchases, sends Google technical diagnostics about its connection to Google Play (no sound, no practice data). The app's switches do not control this (section 4.4).
• Purchases go through Google Play. The app checks your Pro status with RevenueCat using a random, anonymous ID (section 4.4). We never see your card or payment details.
• We do not sell or share your personal data, we do not use it for advertising and we do not build profiles about you.

2. Who is responsible

Tunessa is published by Atakli Store ("we", "us", "our"), the developer shown on the Google Play listing. We are the data controller for the data described in this policy. Contact: ataklistore@gmail.com.

3. The microphone and data that stays on your device

3.1 How the microphone is used

The tuner needs to hear your instrument. This is how it works:

• Permission on request. Tunessa asks for Android's microphone permission only when you open the tuner, after a card that explains why. You can say "Not now" and still use reference tones, the metronome and the practice log. You can withdraw the permission at any time in Android Settings → Apps → Tunessa → Permissions.
• Only while the Tune screen is visible. The microphone input opens when the Tune screen is on screen and the app is in front, and it closes as soon as you switch to Tempo or Practice, leave the app, turn the screen off or take a call. Tunessa never uses the microphone in the background and has no background service that can use it. Android shows its microphone indicator whenever the microphone is on, so you can check this yourself.
• Processed in real time, on the device. Short slices of sound are analyzed in the phone's working memory to find the pitch, and are then overwritten within a fraction of a second. Sound is never recorded, never saved to a file and never transmitted. There is no feature that records or plays back your playing, and the app has no network connection for sound.
• What is kept. Only the result you see, such as the note and how many cents it is off, is shown on screen. The app counts how often a string locks in tune (a number, used to decide when it may ask for a rating, section 4.5). It does not keep a history of the pitches you played.

3.2 What is stored on your phone

Tunessa stores the following only in the app's private storage on your phone:

• your practice log: date, start time and length of each session, the instrument, the tempo, and, only if you type them, a piece name and a short note; your weekly goal;
• setlists (song names, tempo, meter and accents) and custom tunings you create;
• settings such as reference pitch, note names, instrument and tuning, sensitivity, metronome sound and meter, theme, language, accessibility options and your privacy choices, plus a few counters the app uses itself (for example when it was installed).

We have no access to this data, and the app does not send it to us or to any service provider. Charts and weekly totals are calculated on your phone.

• Language. Tunessa reads your phone's language to pick default note names (for example C D E or Do Re Mi). This stays on your phone.
• Metronome in the background. If you start the metronome and "Keep playing in the background" is on, Android shows a media notification with play, pause and tempo controls while it plays. This uses a media playback service that only plays the click; it never uses the microphone. No other notifications are sent, and there are no push notifications.
• Vibration for the in-tune cue and beat haptics happens on the phone only.
• Exports and sharing. When you export your practice log as a CSV file, it goes only to the folder or app you choose (with "Save to device" or "Share"). When you share a setlist, it is sent as text to the app you choose. What happens there is governed by that app's or service's own terms.

3.3 Android backup and phone-to-phone transfer

Tunessa allows Android Auto Backup, so your practice log is not lost when you change phones:

• Android backs up Tunessa's practice log, setlists and custom tunings, and may include its settings, to your own Google account, together with your other app data. This is done by the Android operating system, not by Tunessa, and you control it in Android Settings → Google → Backup (on some phones Settings → System → Backup). No sound is ever stored, so there is none to back up.
• On Android 9 and later, when your phone has a screen lock (PIN, pattern or password), the backup is end-to-end encrypted with a key based on your screen lock. Neither we nor Google can read it. Without a screen lock, the backup is encrypted by Google but not end-to-end.
• When you set up a new phone with Android's device-to-device transfer, the same data can be copied directly to the new phone.
• We never receive these backups. To delete them, see our data deletion page.

4. Data processed by the app and its service providers

Some functions need small amounts of technical data to be sent from your device to our service providers. None of it contains sound, pitches or frequencies you played, piece names, notes, setlist names or anything you type.

4.1 Anonymous usage statistics (your choice): Google Analytics for Firebase

Tunessa has the switch "Share anonymous usage statistics" in Settings → Privacy & data. It is off for everyone, in every country, until you turn it on, either when the app asks you or later in Settings. Only then does the app start Firebase and send usage events to it. If you leave the switch off, or turn it off later, the app sends no events; events that happen before you turn it on are kept only in the phone's memory and discarded.

If the switch is on, the app sends usage events such as "a tuner session ended", "a tuning was selected", "a metronome session ended", "a practice session was saved", "a CSV file was exported", "the Pro screen was shown" or "a purchase finished". Event details are limited to fixed values, yes/no values and ranges: for example the instrument and tuning from Tunessa's built-in catalogue (such as "guitar, standard"; never the name of a custom tuning), the tuner view (needle, strobe, makam, maqam, Sa), the session length as a range ("2 to 10 minutes"), the reference pitch as a range, the tempo as a range, the meter (such as "7/8"), the subdivision, the number of songs or rows as a range, which setting was changed (not its value), which Pro feature or plan was involved and the result of a purchase. Events never include sound, pitches or frequencies you played, piece names, notes, setlist names, custom tuning names, dates or anything you type.

Google Analytics also receives an app instance ID, device model, operating system version, app version, language, country and approximate location (region or city) derived from your IP address. It does not receive the Advertising ID or the Android ID. Google Consent Mode tells Google that ad storage, ad user data and ad personalization are always denied.

4.2 Crash reports (your choice): Firebase Crashlytics

Crash reports have their own switch, "Send crash reports", in Settings → Privacy & data, also off until you turn it on. When it is on and the app crashes or hits an error, Crashlytics receives the technical stack trace, a short error context, the device model, operating system and app version, free memory and disk space, the device orientation, recent usage events (only if usage statistics are on) and a random Crashlytics installation ID. Crash reports never include sound or anything you typed.

4.3 App settings (optional, off by default): Firebase Remote Config and Firebase Installations

So that we can adjust settings without a full app update (for example the length of the free strobe preview, the free number of setlist songs and named pieces, the order of plans on the Pro screen, whether a one-time offer is shown, when the app may ask for a rating, or a pitch-detection fine-tuning value), the app can download a small configuration file from Firebase Remote Config when it starts, at most about every 12 hours. This uses the usage statistics switch: while it is off, the app uses settings built into the app and does not contact Remote Config. When it is on, Firebase receives a random Firebase installation ID, the app's package name and version, your country and language codes, time zone, and operating system and SDK versions, and processes your IP address. A change of the switch takes effect for remote settings at the next start. We may use Remote Config to compare two versions of a screen. Remote settings can only make the free version more generous, never less; they never change your data, and they never change the prices or subscription terms shown to you, which come from Google Play.

4.4 Purchases: Google Play Billing and RevenueCat

• Google Play processes all payments under the Google Play Terms of Service and Google's Privacy Policy. Google provides us with order information (order number, product, price, currency, country, purchase date and status), but not your card details or your name. If a renewal payment fails, Google Play may show you a message in the app about it.
• Google Play billing diagnostics. The Google Play Billing Library, Google's component inside the app that connects to Google Play to offer and check purchases, sends Google technical diagnostics about that connection each time it connects (usually when the app starts or returns to the screen), for example which billing requests were made and their result codes, the library and app version and device and operating system information. It never includes sound, pitches, your practice log or anything you type. This is part of Google Play's purchase system, is handled under Google's Privacy Policy and happens whether or not the usage statistics and crash report switches are on, because purchases cannot work without the billing component.
• RevenueCat, Inc. helps us show prices, confirm and restore purchases and work out which features you have unlocked. The app contacts RevenueCat when it starts and when you open the Pro screen, buy or restore, whether or not you share usage statistics, because it is needed to sell Pro and to keep Pro working for buyers. RevenueCat receives a random, anonymous app user ID that it creates for your installation, Google Play purchase tokens and receipts, product IDs, purchase, renewal and expiry dates, price and currency, store country, app version and device operating system. It also processes your IP address while handling these requests. RevenueCat does not receive your name, your email address, sound or your practice log. We use this data to provide Pro, to handle offers and payment problems, to prevent fraud and to understand sales in aggregate.

4.5 Ratings, support and the website

• In-app review. After strings have locked in tune several times over a few days, the app may ask Google Play to show its rating dialog, at most once every 90 days. Any rating or review you write is handled by Google Play. We do not learn whether you rated.
• Email support. If you write to ataklistore@gmail.com, we receive your email address and whatever you include in your message. "Contact" in the app only opens your email app with our address. We use your message only to answer you. Please do not send us recordings or personal documents. Our email is provided by Google (Gmail).
• Website. tunessa.web.app uses no cookies, no analytics and no trackers, and it loads nothing from other websites. It is served by Google Firebase Hosting, which processes your IP address and browser information in its server logs to deliver the pages and keep the service secure.

5. Why we use data and our legal bases

Microphone sound is processed only on your device to provide the tuner you opened; it is not collected by us. Under KVKK (Türkiye) the bases above correspond to Article 5(2)(c) (contract), 5(2)(ç) (legal obligation), 5(2)(f) (legitimate interest) and explicit consent under Article 5(1) for optional statistics and crash reports. Under LGPD (Brazil) they correspond to Article 7, items V (contract), II (legal obligation), IX (legitimate interest) and I (consent).

6. Who receives data

We share data only with the service providers named above, who process it on our behalf or under their own terms to provide their services:

We do not sell personal data, we do not "share" it for cross-context behavioral advertising (as defined by California law), and we do not use it for advertising. We may disclose data if the law requires it, to protect our rights, or as part of a merger or sale of the app, in which case this policy continues to apply.

7. International transfers

Our providers process data in the USA and other countries. Where data protection law requires it, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum), the EU-U.S. Data Privacy Framework where the provider is certified, and, for transfers from Türkiye, the safeguards in Article 9 of Law No. 6698 (KVKK) such as standard contracts.

8. How long data is kept

• Microphone sound: not kept. It is overwritten in working memory within a fraction of a second and never written to storage.
• On your device: until you delete it. "Delete all my data" in Settings → Privacy & data, clearing the app's storage or uninstalling Tunessa removes it from the phone.
• Android backup in your Google account: managed by Android and Google. It is replaced by newer backups, and Google deletes it if you stop using the device or turn off backup (see Google's backup help).
• Usage statistics (Google Analytics): user-level data is kept for 14 months and then deleted automatically. Aggregated reports without identifiers may be kept longer.
• Crash reports (Crashlytics): kept for 90 days.
• Remote Config and Firebase installation ID: kept while the installation is active. Google deletes installation data after a period of inactivity, or when the installation ID is deleted.
• Purchase records (RevenueCat, Google Play): kept for as long as you own the product and then for as long as tax and accounting laws require (usually up to 10 years). On request we delete the RevenueCat record, unless we must keep it by law.
• Google Play billing diagnostics: kept by Google under Google's Privacy Policy.
• Support emails: kept while we are helping you, then deleted within 24 months of the last message, or sooner if you ask.
• Website server logs (Firebase Hosting): kept by Google for a short period for security and operations.

9. Your choices and how to delete data

• Microphone: deny or withdraw the permission in Android settings at any time. Everything except the tuner keeps working.
• Usage statistics, remote settings and crash reports: Settings → Privacy & data → "Share anonymous usage statistics" and "Send crash reports". Both are off unless you turned them on. Turning them off stops collection from that moment, and from the next start the app does not contact Firebase at all while both are off. Google Play's billing diagnostics (section 4.4) are not controlled by these switches.
• Delete analytics data: Settings → Privacy & data → "Delete analytics data" resets the analytics data on your device, deletes unsent crash reports and deletes the Firebase installation ID, so statistics sent earlier can no longer be linked to your installation.
• Your practice log and other data: Settings → Privacy & data → "Delete all my data" permanently deletes your practice log, setlists, custom tunings and settings on this phone and also resets the analytics IDs. Your privacy choices and your purchases are kept. Settings → Practice → "Delete all practice data" deletes only the practice log. You can also delete single sessions or setlists, clear the app's storage or uninstall the app. Delete any CSV files you saved yourself, and the Android backup in your Google account, if you want those gone too.
• Subscriptions: manage or cancel them in Google Play ("Manage subscription" in Settings opens it).
• Deletion by email: write to ataklistore@gmail.com. Step-by-step instructions are on our data deletion page.

10. Children

Tunessa is a tool for musicians aged 13 and over. It is not directed to children under 13, and we do not knowingly collect personal data from children under 13 (or under the minimum age in your country). Tunessa has no account, no chat, no way to contact other users and no public content, and it has no ads.

Usage statistics, crash reports and remote settings are off by default for everyone. If you are younger than the age of digital consent in your country (13 to 16, depending on the country), please leave them off, or turn them on only with a parent or guardian's permission. Everything in the app works the same with them off. Please ask a parent or guardian before you buy anything.

If you are a parent or guardian and believe your child has used Tunessa in a way that sent us personal data (for example by emailing us or sharing statistics), contact us at ataklistore@gmail.com. We will delete the data.

11. Your rights

Depending on where you live, you have the right to:

• know whether we process data about you and get a copy of it (access, portability);
• have incorrect data corrected and have data deleted;
• restrict or object to processing (including processing based on our legitimate interest), and withdraw your consent at any time without affecting earlier processing;
• not be subject to decisions based solely on automated processing (we make no such decisions);
• complain to a data protection authority.

European Economic Area, United Kingdom and Switzerland (GDPR, UK GDPR, FADP). You have all the rights above under Articles 15 to 22 GDPR and the equivalent laws. You can complain to the supervisory authority in your country, in the UK to the Information Commissioner's Office (ICO), and in Switzerland to the Federal Data Protection and Information Commissioner (FDPIC).

Türkiye (KVKK, Law No. 6698). Under Article 11 you can ask whether your personal data is processed, request information about it, learn the purpose and whether it is used for that purpose, learn the third parties in Türkiye or abroad to whom it is transferred, request correction, deletion or destruction and notification of this to those third parties, object to a result against you that arises from automated analysis, and claim compensation for damage caused by unlawful processing. Send your application to ataklistore@gmail.com. We answer within 30 days, free of charge. You may complain to the Personal Data Protection Authority (KVKK Kurumu).

California and other US states (CCPA/CPRA and similar laws). In the last 12 months we collected these categories: identifiers (random app, installation and purchase IDs; IP address), commercial information (purchase history), internet or other electronic network activity (in-app usage events and crash data, only from users who turned them on; technical billing diagnostics sent by Google Play's billing component) and approximate geolocation derived from IP (only from users who turned on usage statistics). We do not collect audio. Sources: your device and Google Play. Business purposes: providing the app, purchases, security, debugging and analytics. We disclose them only to the service providers listed in section 6. We do not sell or share personal information, including of consumers under 16, and we do not use or disclose sensitive personal information. You have the right to know, delete and correct, and to not be discriminated against for using these rights. You can use an authorized agent. We verify requests using the information described in section 12.

Brazil (LGPD). Under Article 18 you can request confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing and about the consequences of refusing consent, and revoke consent. You can complain to the National Data Protection Authority (ANPD).

Other countries. Wherever you live, you can contact us with any privacy request and we will handle it under the law that applies to you.

12. How to make a request

Email ataklistore@gmail.com with the subject "Privacy request – Tunessa". Because Tunessa has no accounts, we do not know who you are. To find data at our providers we may ask you for:

• for purchases: the Google Play order number (it starts with "GPA." and is in your Google Play receipt email);
• for usage statistics and crash reports: the approximate dates you used the app with statistics on and your device model. Using "Delete analytics data" in the app is the fastest way to unlink this data.

We do not ask for your practice log, recordings, ID documents or passwords. We answer within 30 days (45 days for US state law requests where allowed, and we will tell you if we need longer).

13. Security

Microphone sound never leaves the phone's working memory. Your practice log, setlists and custom tunings stay in the app's private storage, which other apps cannot read. Android backups are end-to-end encrypted when your phone has a screen lock (section 3.3). All connections to our service providers are encrypted in transit (HTTPS/TLS). CSV files you export are not encrypted, so keep them somewhere safe. No method of storage or transmission is completely secure, which is one reason we keep your data off our servers entirely.

14. Changes to this policy

We will update this policy when the app or the law changes. The effective date at the top shows the current version. If a change significantly affects how your data is used, for example a new service provider that would receive your data, we will tell you in the app before the change takes effect and, where required, ask for your consent again.

15. Contact

Atakli Store, developer of Tunessa
Email: ataklistore@gmail.com
Website: https://tunessa.web.app