Tonai
Last updated: 17 August 2026 · Version 2.0
The short version. Tonai works without an account. Your practice history, your profile and your progress live in a database on your phone, and we cannot see them. Audio from your microphone is analysed in real time on your device and is never recorded, stored or transmitted.
Three things do leave your device: (1) when you use an AI feature, a summary of the session you just played is sent to our server and to our AI provider so it can write your feedback; (2) anonymous usage and crash statistics, which you can turn off in the app; and (3) your purchase status, handled by Apple, Google and RevenueCat. Nothing is ever sold, and nothing is used for advertising.
Tonai (the "app") is developed and operated by Emiliano Spinoso, an individual sole trader established in Spain ("Tonai", "we", "us", "our"). We are the data controller for the processing described in this policy.
Contact for any privacy matter: emilianospinoso@gmail.com. We are not required to appoint a Data Protection Officer, so privacy requests are handled directly by us at that address.
This policy covers the Tonai mobile application for iOS and Android and the tonai.app website.
| What | Where it goes | Can you switch it off? |
|---|---|---|
| Practice history, progress, profile and preferences | Stays on your device only | You can delete it in the app at any time |
| Microphone audio | Never leaves your device | Deny the microphone permission (pitch detection then cannot work) |
| Your session summary, when you ask for AI feedback | Our server and our AI provider. Not stored on our server. | Yes — simply do not use the AI features; the offline report still works |
| Anonymous usage analytics and crash reports | Yes — Profile → Privacy & notifications → Usage analytics | |
| Purchase and subscription status | Apple / Google / RevenueCat | No (required to deliver a purchase you made) |
| Contact form message and, if you provide it, your email address | Our server | Yes — the form is entirely optional |
Tonai requires no account, no login and no password. We do not ask for your email address to use the app. The following is stored in a local database on your device and is not transmitted to us:
Note that your device's own backup system (iCloud Backup or Google Backup) may include app data in your personal backup. That backup belongs to you and is governed by Apple's or Google's privacy policy, not ours — we have no access to it.
Tonai's AI features ("AI Music Analysis" feedback and "Full AI Analysis") are the only part of the app that sends your practice data off the device. They run only when you explicitly ask for them.
When you do, the app sends the following to our server:
No audio is included. What travels is a set of numbers — not a recording, and nothing that can be turned back into sound.
Our server (hosted at Hetzner in Germany) does not store these requests: it forwards them to Anthropic, which generates the written coaching, and returns the answer to your device, where it is saved locally. Anthropic processes the request on our behalf, retains inputs only for a limited period for safety and abuse monitoring, and does not use them to train its models.
As with any web request, our server and the reverse proxy in front of it process your IP address in order to route the response and to enforce rate limits against abuse.
We use Google Firebase Analytics and Firebase Crashlytics to understand which features are used and to find and fix crashes. This data is not linked to your name, your email or your practice content. Specifically it includes:
You can turn this off at any time in the app: Profile → Privacy & notifications → Usage analytics. Turning it off stops all analytics and crash collection on your device from that moment on. Tonai contains no advertising SDK, does not use the advertising identifier (IDFA / Android Advertising ID), and does not track you across other companies' apps or websites.
If you subscribe to Tonai Pro or start a free trial, payment is processed entirely by Apple (App Store) or Google (Play Store). Subscription state is managed through RevenueCat, our subscription infrastructure provider, which receives:
We never receive your name, email address, billing address or payment method from Apple, Google or RevenueCat.
If you use the in-app contact form to report a bug or send a request, the message you write — and the email address you optionally provide — are sent to our server so we can read and answer you. They are stored there and used for no other purpose: never for marketing, never shared. They are deleted no later than 24 months after the conversation ends, or earlier if you ask us to.
Tonai asks for microphone access for one reason: to detect the pitch of the notes you play, in real time, while you practise. Audio is processed in memory on your device, buffer by buffer, and discarded immediately. It is never written to disk, never recorded and never transmitted anywhere — not to us, not to any third party. Only the measurements derived from it are kept, on your device, and they can only leave it if you choose to use an AI feature (see section 4).
You can refuse or later withdraw microphone permission in your device settings; pitch detection will then be unavailable, but the rest of the app continues to work.
Tonai can send you occasional practice reminders. These are local notifications: they are scheduled and fired by your own device, at most twice a week. There is no push server, no remote messaging token, and no data of any kind is transmitted to deliver them. You can decline the permission or turn notifications off in your device settings at any time.
Tonai does not:
We share data only with the providers strictly needed to run the app, each acting under a contract that limits them to our instructions:
| Provider | Purpose | Location | Policy |
|---|---|---|---|
| Google Ireland Ltd. / Google LLC | Firebase Analytics and Crashlytics | EU and United States | firebase.google.com/support/privacy |
| Anthropic PBC | Generates the written AI coaching from your measurements | United States | anthropic.com/legal/privacy |
| RevenueCat, Inc. | Subscription management | United States | revenuecat.com/privacy |
| Hetzner Online GmbH | Hosting of our API server | Germany | hetzner.com/legal/privacy-policy |
| Apple Inc. / Google LLC (stores) | App distribution and payment processing | Ireland / United States | apple.com/legal/privacy · policies.google.com/privacy |
| Netlify, Inc. | Hosting of the tonai.app website | United States | netlify.com/privacy |
Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses and, where the provider is certified, by the EU–US Data Privacy Framework, together with supplementary technical measures (transport encryption throughout, and data minimisation — we send measurements, never audio and never contact details).
We may also disclose data if we are legally required to do so by a valid order from a competent authority, or where necessary to establish or defend legal claims.
| Purpose | Legal basis |
|---|---|
| Providing the AI analysis you requested | Performance of a contract — Art. 6(1)(b) GDPR |
| Managing your subscription, trial and entitlements | Performance of a contract — Art. 6(1)(b) GDPR |
| Answering your contact message | Steps at your request / our legitimate interest in providing support — Art. 6(1)(b) and (f) GDPR |
| Usage analytics and crash reporting | Your consent, which you give by leaving the analytics switch enabled and can withdraw at any time in Profile → Privacy & notifications — Art. 6(1)(a) GDPR |
| Security, rate limiting and abuse prevention | Our legitimate interest in keeping the service available and affordable — Art. 6(1)(f) GDPR |
Providing data is never a statutory requirement. If you decline the microphone permission, pitch detection cannot function; if you decline everything else, the app still works.
Under the GDPR and Spain's LOPDGDD you have the right to access your personal data, to rectify it, to request its erasure, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting processing already carried out.
To exercise any of them, write to emilianospinoso@gmail.com. We answer within one month, extendable by two further months for complex requests, and it is free of charge.
One honest caveat: because Tonai has no accounts, we normally hold nothing that identifies you. Most of your data never leaves your device, where you control it directly and can erase it yourself in seconds (see section 15). We are not obliged to collect additional information merely in order to identify you, and we will not do so.
If you believe we have handled your data improperly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or with the supervisory authority of your country of residence. We would appreciate the chance to resolve it directly first.
For transparency: "Delete my data" deliberately preserves one anti-abuse counter — the number of free AI analyses used and the date. It contains no personal data and identifies no one; it exists so that the free daily allowance cannot be reset by wiping data in a loop. It is removed when you uninstall the app.
Tonai is a music practice tool intended for a general audience, but it is not directed to children under 13 (or under the applicable age of digital consent, which is 14 in Spain and up to 16 in other EU countries). We do not knowingly collect personal data from children below that age. Younger musicians should use Tonai under the supervision of a parent, guardian or teacher, who should be the one to accept this policy.
If you are a parent or guardian and believe a child has provided us with personal data, contact emilianospinoso@gmail.com and we will delete it promptly.
We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act (CCPA/CPRA) — nor have we done so in the preceding twelve months. We do not knowingly sell or share the personal information of minors under 16.
Residents of California and of other US states with comparable laws have the right to know what personal information we hold, to request its deletion or correction, and not to be discriminated against for exercising those rights. Use the same contact address above; you may designate an authorised agent to act for you.
We may update this policy as the app evolves. The "Last updated" date and version at the top always reflect the current text. If a change is material — for example, if we ever began transmitting a category of data we do not transmit today — we will announce it inside the app before it takes effect, and where the law requires it we will ask for your consent.
Emiliano Spinoso — Tonai, Spain
Email: emilianospinoso@gmail.com
See also our Terms of Use.