Effective date: 27 June 2026 Last updated: 1 November 2026
This Privacy Policy explains how Prashant Jagtap, a sole proprietor operating the service "Toneloom" ("Toneloom", "we", "us"), collects, uses, shares, and protects personal data when you use the Toneloom apps and website (the "Service"). For users in India we are the Data Fiduciary; for users in California we are the business under the CCPA/CPRA.
| Category (CCPA term) | What | Why | Source |
|---|---|---|---|
| Identifiers | Email address; a hashed password; OAuth identifiers if you sign in with Google/Apple. For Sign in with Apple we may also keep, encrypted, the token Apple issues to Toneloom, only so we can revoke it when you delete your account | Create and secure your account | You / Apple |
| User content | Audio files you upload; the separated stems and rendered mixes we generate; rig presets and Rig-Exchange items you publish. Published Rig-Exchange items are shown publicly as "Toneloom community", never with your name or email address | Provide the core separation/playback/sharing features | You |
| Commercial information | Subscription/entitlement status (when in-app purchases are offered) | Billing and access | Apple/Google + RevenueCat |
| Internet/network activity | App interactions, feature usage (pseudonymous) | Improve the Service | Automatic |
| Diagnostics | First-party error categories, stack fingerprints, app version/build, and Apple-managed crash/hang summaries when available. API route templates, status codes and response timings. These diagnostic events exclude audio, filenames, raw error messages, authentication tokens and customer email addresses | Fix bugs and keep the Service reliable | Automatic |
| Approximate technical data | IP address (transient, for rate-limiting and abuse prevention) | Security / anti-abuse | Automatic |
We do not collect precise geolocation, contacts, biometric, health, racial/ethnic, religious, or other special-category data. We do not knowingly collect "sensitive personal information" under the CPRA.
We will not use your uploaded audio to train machine-learning models unless you give explicit, separate, opt-in consent. Our analog-rig models are built only from licensed/owned source material, never from your audio.
For users in India, we process personal data on the basis of your consent, obtained through a clear notice at or before the point of collection. Your consent is free, specific, informed, unconditional, and unambiguous, and is limited to the purposes described in this Policy. You may withdraw consent at any time (Section 9 below); withdrawal does not affect processing already carried out, and may limit features that depend on that data. Where permitted, we may also process data for "legitimate uses" recognised under the DPDP Act (e.g., to comply with law).
We share data only with service providers ("Data Processors") that process it on our behalf under contract, and only as needed to run the Service:
| Processor | Purpose | Data |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, storage, compute | Account data, uploaded audio, stems, and Toneloom-operated diagnostic storage |
| Apple DeviceCheck | Prevent repeated free-trial redemption on supported Apple devices | An Apple-generated opaque device token and Apple-managed trial-redemption state. Toneloom does not store a serial number, advertising identifier or hardware fingerprint |
| RevenueCat + Apple/Google | In-app purchases and entitlements | Purchase/subscription status |
| OAuth: Google / Apple | Optional sign-in | The identity token you authorise |
We may also disclose data to comply with law, enforce our Terms, or protect rights and safety. If we are ever involved in a merger or acquisition, data may transfer subject to this Policy.
We do not sell or "share" (as defined by the CCPA/CPRA) your personal data, and we do not use it for cross-context behavioural advertising.
We keep personal data only as long as needed to provide the Service and for legitimate, lawful purposes:
We use industry-standard safeguards: encryption in transit (HTTPS), hashed passwords, access controls, signed/expiring URLs for audio, rate-limiting, and least-privilege access. No method is 100% secure, but we work to protect your data and will notify you and the relevant authority of a breach as required by law.
We process data in Amazon Web Services, Asia Pacific (Mumbai) region (ap-south-1) and may use other AWS regions for reliability. If you are outside India (e.g., in the EU or the US), your data may be transferred to and processed in other countries with appropriate safeguards consistent with applicable law (the DPDP Act permits transfers except to countries restricted by the Government of India).
You can exercise these in-app (account settings) or by emailing jprbom@gmail.com. We respond within the timeframe required by applicable law. The Support page explains each step.
You have the right to know what personal information we collect and how we use/share it; to delete it; to correct it; and to opt out of sale/sharing (we do not sell or share). We will not discriminate against you for exercising these rights. To make a request, email jprbom@gmail.com; we verify requests against your account.
You have the right to access, correction, and erasure; the right to grievance redressal; and the right to nominate another person to exercise your rights in case of death or incapacity. You may also lodge a complaint with the Data Protection Board of India. Contact our Grievance Officer (Section 12).
The Service is not directed to children under 13, and we do not knowingly collect their data.
India (DPDP): the DPDP Act treats anyone under 18 as a child and requires verifiable parental consent before processing their data, and prohibits tracking, behavioural monitoring, and targeted advertising of children. If you are under 18 and in India, you may use the Service only with verifiable consent from a parent or lawful guardian. If we learn we have collected a child's data without the required consent, we will delete it.
Our website uses only essential cookies/local storage needed for sign-in and app function. We do not use advertising or cross-site tracking cookies.
Privacy / data requests: jprbom@gmail.com
Grievance Officer (India — required under the IT Rules 2021 and DPDP Act): - Name: Prashant Raghunath Jagtap - Email: jprbom@gmail.com - We acknowledge grievances within 24 hours and resolve them within 15 days (IT Rules 2021).
Data Fiduciary / Business: Prashant Jagtap (sole proprietor, "Toneloom"), Pune, Maharashtra, India
We may update this Policy. Material changes will be notified in-app or by email, and the "Last updated" date will change. Continued use after an update means you accept the revised Policy.
Your private in-app inbox stores processing and account updates. If you enable device notifications on iPhone, we store the Apple push token associated with your account and use Apple Push Notification service to deliver alerts. Processing alerts do not include your audio filename or audio content. You can disable device alerts from Notifications or iOS Settings. Deleting your account removes your inbox and registered push tokens.
On supported iOS versions, optional Apple Music listening uses MusicKit after you grant Apple Music permission. Songs and Apple Music radio play through Apple, subject to your subscription and regional availability. Toneloom does not extract, upload, separate, process or retain Apple Music audio or your MusicKit tokens on its backend. Files shared into Toneloom are copied into private temporary storage and are not uploaded automatically. You choose whether to play them locally or submit them for processing.
Optional processing Live Activities display generic job stages and progress on supported Lock Screens and Dynamic Island devices. For background updates, an activity-specific Apple push token is associated with your authenticated session and your processing job for at most two hours. Updates contain no song title, filename, account identity or audio. Expired registrations are removed by the delivery worker; a replacement login or account deletion removes its registrations. iOS may delay or suppress updates; stale presentations direct you to open the app for current progress.
For ordinary accounts, signing in on another device replaces the previous active session. Account details show the platform, coarse device model, operating-system version and sign-in time reported by that session. These display details are not a hardware identity. Owner/administrator operational accounts may retain multiple sessions. Account deletion clears linked session-device details.
New supported-device trial offers may require Apple DeviceCheck verification. A redeemed-device record may remain with Apple after app reinstallation or account deletion to prevent repeated trials. Existing account offers and paid access are preserved. If a shared or previously owned device is refused a trial, sign in to the original account, restore a purchase, or contact support.
Toneloom operates its own bounded diagnostic service on AWS; this release does not send diagnostics to Sentry or PostHog. The server diagnostic store applies a seven-day age limit as new events are stored, with an earlier 50,000-event cap. The app keeps at most twenty pending diagnostic events for retry while it runs or at the next sign-in. Apple controls native diagnostic availability; not every crash or termination produces a report. Home Screen and Lock Screen launch widgets store no account or song data.
Newer app versions can store up to twelve recent job references/playback positions and up to twelve explicitly saved song setups locally on your device, scoped to your account and server. These convenience records contain no audio, filenames or credentials and are removed when you delete the account from the app. Optional comparison sharing creates a temporary local audio clip from your own source and processed audio only; after you confirm sharing rights, you choose the recipient or app using the system share sheet. MusicKit audio cannot be included. The built-in Toneloom demo is synthesized first-party audio and plays locally unless you explicitly choose processing.
When you tap Listen in the song-identification screen, Toneloom requests microphone permission and uses Apple ShazamKit to match an audio signature against Apple's catalog. The microphone recording is not saved by Toneloom or uploaded to Toneloom's backend. Recognition stops when you stop listening, close the screen, leave the foreground after capture starts, or reach the recognition timeout. A match can link to Apple Music; recognition does not download the matched recording or authorize stem processing.
The downloadable demonstration library contains licensed artist recordings and Toneloom's prepared separated layers and headphone spatial mixes. Credits, source links, license notices and adaptation details are provided in the library and transfer bundles. Public demo audio is kept separately from account-private imported music. Downloads use Wi-Fi by default, with a separate cellular option. Newer iOS builds use system-managed background transfers and protected, backup-excluded app storage. iOS controls background scheduling; force-quitting the app can interrupt transfers. You can pause, resume, download individual songs and remove demo copies in the app.