Privacy Policy
Last updated: 8 September 2026
Microphone
Microphone audio is processed on your device for tuning and practice grading. It is not recorded, stored, or sent to our servers.
Private musical data
Your tabs, custom tunings, practice history and saved drill text stay on your device unless you explicitly export a file. We do not provide cloud sync for private tabs.
Optional account guidance
If you choose Sign in with Apple and request a session drill, the app sends structured measurements such as the tab title, tuning, selected tempo, accuracy, and any bar or timing values the app actually measured. It does not send audio. The service uses those values only to return the requested deterministic drill, does not store the submitted practice measurements, and does not infer missing measurements.
Accounts and purchases
For an optional account we store a pseudonymous Apple account identifier, session records, a daily guidance counter, and subscription status. New Apple sign-ins also provide an authorization code so the service can obtain and encrypt an Apple authorization token used to revoke that connection when you delete the account. Apple processes payments; we do not receive your payment-card details.
Deletion and retention
In-app account deletion blocks further account activity while it removes the Apple and guest aliases, profile, Apple authorization tokens, active sessions, account entitlement and associated guidance counters. If an older sign-in has no stored Apple authorization token, the app explains how to remove that Apple connection manually. A minimal deletion receipt and one revoked session are usable only to confirm that deletion for up to 24 hours; their physical removal by the database may take longer. We also retain de-linked App Store transaction identifiers, event time, environment and subscription status without an automatic expiry to prevent replayed or duplicate entitlements. Those retained records contain no Apple account identifier, guest identifier, tab, practice result or audio.
We retain one-way deletion-generation receipts without an automatic expiry so an old deletion retry cannot affect a newly created account. Completed receipts do not retain the original Apple identifier or account mapping.
Deleted active records may remain in database recovery backups for up to 35 days. We do not return deleted accounts to service from a backup. Database expiry and short cleanup fences are asynchronous, so physical removal can take longer than the stated access period. Files you exported, device backups and emails you sent to support are outside in-app deletion.
We use operational logs to diagnose service failures. Application errors record an error category, not your audio, submitted drill measurements or Apple tokens. Infrastructure providers may process connection metadata to deliver and secure requests.
Restoring purchases
Apple controls your subscription and the app checks your purchase through StoreKit. An existing purchase is not automatically moved between different optional accounts. Use the account that originally linked it when restoring account-backed features; your verified on-device Pro access remains controlled by Apple.
No ads or trackers
Kalimba Studio: Tuner & Tabs has no advertising SDK, cross-app tracking, or third-party analytics tracker.