Privacy Policy
Effective October 11, 2026
ESG Ventures LLC ("we," "us," or "our") operates Tone Ninja. This policy explains how we handle information when you use the Tone Ninja app and related services. It applies to guests and account holders wherever the service is available.
Information we handle
Account information. If you sign in, we receive your email address and an account identifier. Apple or Google sign-in may also provide a name, profile image, or relay email, depending on your choices. We store authentication and profile information so you can access your account.
Your music data. Tone Ninja stores the tones, patch settings, imported files, names, tags, notes, Live Sets, Song Packs, Gig Packs, and related content you create or choose to import. Libraries stay on the device unless the account has a Plus subscription, which syncs supported library content to our cloud service; the app indicates when cloud sync is unavailable.
AI and voice inputs. When you choose an AI feature, we process the description, refinement request, relevant tone or amp settings, and rig context you submit. A YouTube matching request sends the URL and selected clip range to an audio analysis service. If you use voice features, microphone audio and resulting transcripts are processed to provide transcription or conversation. These features may send the relevant inputs to OpenAI through our backend.
Purchases and service data. We receive subscription status, product and transaction identifiers, and related billing records from purchase providers. We do not receive your full payment card number. Our services also process information such as account or request identifiers, request times, app or device details, and IP addresses or hashed IP addresses for authentication, security, troubleshooting, and AI usage limits.
Anonymous usage statistics. Once a day, the app sends a random identifier it created for this installation (not a hardware or advertising identifier), the platform, app version, the number of tones in the library, the generation of the amp last connected, and whether you are signed in. It is sent without your account credentials and is not linked to your account. You can turn it off in Settings.
Amp connections. When you choose to connect an amp or MIDI adapter, the app uses Bluetooth or USB permissions and exchanges device information and MIDI messages needed for that feature. Amp control happens between your device and the connected hardware; cloud library sync is a separate feature.
How we use information
We use this information to operate accounts, save and sync libraries, generate and refine tones, transcribe voice requests, connect compatible hardware, deliver purchases, provide support, prevent abuse, and maintain the service.
AI development. To the extent permitted by law, we may use content and usage information processed through Tone Ninja—including prompts, feedback, generated outputs, synced libraries, imported files, patch settings, and voice recordings or transcripts—to train, fine-tune, test, evaluate, and improve AI systems operated by us or our AI providers. We may also use that information to develop AI-generated outputs for you and other users. Local guest content is not available to us for these purposes unless you submit or sync it. A policy update alone does not authorize a new use of content collected under an earlier promise; we will provide any additional notice or permission required before doing so.
We may send sign-in codes, account notices, purchase messages, and onboarding emails. You can ask us to stop nonessential emails using the contact address below. Our in-app event helper does not currently send events to an analytics vendor, and we do not use an advertising SDK. Purchase providers may process service data under their own notices.
Who receives information
We share information with service providers as needed for the features you use: Supabase for authentication, data storage, sync, and backend functions; OpenAI for selected AI and voice processing; our audio analysis host for YouTube matching; Apple and Google for sign-in and app purchases; RevenueCat for subscriptions; and Resend for onboarding emails and account notices. If we use a provider to train or improve AI on user content, we will identify the provider or provider category and obtain any permission required before sharing personal information. Providers process information under their own terms and privacy notices as well as our service arrangements.
We may also disclose information when required by law, to protect users and the service, or as part of a business transfer. We do not sell personal information or use Tone Ninja data for targeted advertising.
Legal bases where required
Where privacy law requires a legal basis, we process information to provide the features you request and perform our agreement with you; to meet legal obligations; and for legitimate interests such as securing, supporting, and improving Tone Ninja when those interests are not overridden by your rights. We rely on consent for an optional use, including AI training or sharing, when the applicable law or platform requires it. We do not treat agreement to these terms alone as a substitute for a separate consent that is required by law.
Where information is stored and for how long
Guest library data is stored on your device. Signed-in account and synced library data is stored with our cloud provider. Information may be processed in the United States and other countries where our providers operate. Where a transfer requires additional safeguards, we will put them in place before relying on that transfer.
We keep account and synced library information while your account is active. You can delete your account in the app: Settings → your email → Manage → Delete Account. Your account is suspended right away and can be restored for 30 days by signing in and choosing Restore Account; signing in alone does not cancel deletion. After that deadline, the next nightly deletion job permanently removes your account, your cloud library and files, and identifying usage and billing records in our database; it may take longer if a service is unavailable. We also ask RevenueCat to delete its customer record and, for Sign in with Apple accounts, revoke the Apple sign-in token. Backups expire through our provider’s backup rotation, and Apple and other providers keep records they need under their own terms. To prevent repeat referral rewards, we keep a one-way hash of an email address that received a referral free month. We keep usage, security, and billing records only as long as reasonably needed for those purposes. Deleting the app does not delete a signed-in cloud account; deleting local app data can remove a guest library. Guest libraries, exported files, and tones stored on your amp are not part of your account.
Your choices and rights
You can use guest mode for local library features, choose whether to sign in and whether to subscribe to Plus for cloud sync, turn off anonymous usage statistics in Settings, decline microphone or Bluetooth access, and stop using optional AI features. You can manage device permissions in your operating system settings. Tone Ninja provides library import and export tools so you can keep copies of supported content.
To delete your account, use Delete Account in the app; we email a confirmation and reminders before the recovery deadline. Deleting your account does not cancel an App Store subscription, which you manage in your App Store subscriptions. To request access, correction, export, or deletion help for information associated with your account, email us from the address linked to your account. Tell us if you also want to stop nonessential emails or object to a use of your information, including AI training. We may need to verify your identity and may retain information where the law allows or requires it. Where consent is required, you may withdraw it for future processing. Depending on where you live, you may have additional privacy rights and the right to contact a local regulator.
Security and children
We use access controls and other reasonable measures to protect information. No storage or transmission system is perfectly secure.
Tone Ninja is not directed to children. If you believe a child has provided us personal information without appropriate permission, contact us so we can review and delete it where required.
Changes and contact
We may update this policy as Tone Ninja changes. We will post the revised policy with a new effective date and give additional notice when required.
For privacy questions or requests, contact ESG Ventures LLC in Arizona, United States, at ron@everettstreet.co.