Privacy Policy

At tonen, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

Information You Provide

• Account information (email address, name)
• Personal notes and conversation practices you create
• Text you submit for AI help, such as messages, situation descriptions and custom script requests
• Feedback and support communications
• Usage preferences and settings

Information Collected Automatically

• Device information (device type, operating system, unique identifiers)
• Usage data (features used, time spent in app, interaction patterns). Starting with Tonen 2.7.2, Tonen collects its own usage analytics only if you allow them.
• Technical data (IP address, browser type, app version)
• Crash reports and performance data
• Purchase history, subscription status and associated account identifiers

We use the information we collect to:

• Provide and maintain our service
• Personalize your experience and improve app functionality
• Send you important updates about the service
• Provide customer support and respond to your inquiries
• Analyze usage patterns to improve our app
• Ensure security and prevent fraudulent activity
• Comply with legal obligations

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our app
• Legal Requirements: We may disclose information when required by law or to protect our rights
• Business Transfers: Information may be transferred in connection with a merger, acquisition, or sale of assets
• Consent: We may share information with your explicit consent

AI requests: Supabase and OpenAI

AI features use OpenAI through our Supabase backend. When you submit a request, Supabase processes it and forwards the text needed for that request to OpenAI. This can include a message you paste, what you want to say, a situation or conversation you describe, or script text, together with your chosen tone and language. OpenAI processes this information to generate a response and, for supported features, check input and output for safety. Supabase also processes account identifiers and request counts so we can authenticate requests and enforce allowances.

Only submit text you are comfortable sharing for this purpose. Remove names, contact details and other identifying information, including information about someone else. You can use the bundled scripts, Phone Call Mode and Calm tools within your plan without submitting text to OpenAI.

OpenAI states that API data is not used to train its models by default, unless the API customer opts in to sharing. Its standard abuse-monitoring policy may retain request and response content for up to 30 days, with exceptions for legal and safety reasons. Clearing a Helper screen does not erase any content retained under that provider policy. We do not promise zero retention by OpenAI. See OpenAI’s API data controls and Supabase’s privacy policy.

Reply Helper and Debrief do not create an in-app conversation history. Custom scripts that you create and save are stored separately in your tonen account and may be cached on your device. Operational records, such as request counts and technical error logs, are distinct from saved scripts. AI providers may process data outside the UK and European Economic Area; their processing and retention are separate from the content you see or clear in the app.

Subscription reporting

Optional app analytics

If you allow analytics, we record app interactions such as features used and outcomes. For new users in the US and UK App Store storefronts, we also record when the app was first opened, the App Store country, the app version and verified trial and subscription transaction details. These include the product, purchase dates, transaction identifiers, amounts and refund status. We use this information to understand onboarding, trial use and first payments and to improve Tonen.

Supabase processes and stores these records for us, linked to your Tonen account. They do not contain your scripts, messages, precise location or advertising identifiers. We do not share these records with advertisers or use them for cross-app tracking. You can turn off this collection in Profile on the device where you allowed it. You can also delete your account in Profile to remove account-linked analytics records or request deletion through the contact below. Subscription processing needed to provide your plan is separate from this choice.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure hosting and infrastructure

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of processing of your information
• Objection: Object to processing of your information

To exercise these rights, please contact us at privacy@usetonen.com. We will respond to your request within 30 days.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When we no longer need your information, we will securely delete or anonymize it.

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers are conducted in accordance with applicable data protection laws and that appropriate safeguards are in place.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: