Privacy policy
Last updated October 4, 2026
Who we are
Tune & Tonic is operated by Matthew Smith, an individual, in Portland, Oregon. The site is tunetonic.app and the product is learn.tunetonic.app. Questions about this policy go to support@tunetonic.app.
What we collect
- Account. Your email address and a password or a sign-in link. We never see the password itself.
- Profile. Your name, an optional photo, the instruments you teach or learn, your time zone, and optionally a phone number and birthday.
- Guardian contacts. A student may add a parent or guardian’s name, email and phone so a teacher can reach them.
- Lesson content. Recordings, transcripts, notes, PDFs, links and other materials a teacher uploads or connects, and the lesson records made from them.
- Zoom connection. When a teacher connects Zoom, the access token Zoom issues, stored encrypted.
- Text messages. If you turn texts on: your mobile number, when you confirmed it and which consent text you agreed to, and a record of each text we send.
- Logs. The server records requests with an IP address, browser identifier and time, and keeps an audit trail of changes to your data, for security and support.
How we use it
To run the product: organize lessons, schedule sessions, send invites and reminders, and keep an audit trail. We do not advertise, sell data, or run analytics or tracking scripts.
Where your data lives
All data resides within the United States. It is encrypted in transit (TLS) and at rest; integration tokens are encrypted a second time with keys the application holds (AES-256-GCM).
Who sees what
A teacher sees the students they invited and what those students share on their profile. A student sees the lessons, materials and schedule their teacher shares with them. Nobody else sees either, and we look only when you ask for support or the law requires it.
Zoom
When a teacher connects Zoom, the app asks Zoom for three permissions: cloud_recording:read:list_user_recordings and cloud_recording:read:recording, to list and download the teacher’s cloud recordings, and user:read:user, to show which Zoom account is connected.
Text messages
If you opt in to text messages, we use your mobile number only to send the lesson notifications you choose. We share your number with our messaging provider, Twilio, solely to deliver those messages. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are excluded from all other sharing described in this policy and will not be shared with any third parties. You can opt out at any time by replying STOP or turning texts off in your notification settings.
How opting in works, the exact consent you give, and samples of every text we send are on the text messages page.
Retention and deletion
Your data is kept while your account exists. To delete your account, email support@tunetonic.app from the address on the account; we remove the profile, uploads, lesson records and any connected services within thirty days and confirm by email. A teacher’s lesson records that name a deleted student keep the lesson but no longer name them.
Cookies and browser storage
The product keeps your signed-in session and your theme preference in your browser’s storage. The site keeps nothing. There are no third-party cookies.
Children
Tune & Tonic is for people 13 and older. A student’s guardian may be listed as a contact. If a younger person has made an account, email us and we will remove it.
Changes
The date at the top is when this policy last changed. A material change is announced by email to account holders before it takes effect.