Privacy policy
Last updated 8 October 2026
This policy explains what Tunalo does with your personal data. Tunalo is run by North Coach, the data controller (details). Questions or requests: jorge.britosilva@gmail.com.
What we collect
- Account: your email address and, when you sign in with Google, the name and profile picture Google shares. With a username and password, we store the password only as a salted hash.
- What you upload: songs, lyrics, notes about a song, and photos or images you add.
- Characters and reports: for each character, when you confirmed you may use the photos, and from which account. For a likeness report: the reporter's name, email and description, kept while we handle it.
- What we make for you: transcribed lyrics, background images, descriptions and the finished videos.
- Account activity: your plan, credits and what they were spent on, your purchases, and when you agreed to start your credits at once (the withdrawal consent).
- Technical data: server logs with the time and type of a request, kept to run and secure the service. Your IP address is used briefly to limit repeated sign-in attempts.
We do not use advertising or analytics trackers, and we do not sell your data.
Why we use it, and on what legal basis
- To provide the service you signed up for: making your videos, keeping your songs and your account (contract, GDPR art. 6(1)(b)).
- To keep the service secure and working, and to prevent abuse (legitimate interest, art. 6(1)(f)).
- To keep records of credits and payments as the law requires (legal obligation, art. 6(1)(c)).
Who processes it for us
| Provider | What for | Where |
|---|---|---|
| Google Cloud (Cloud Run, Cloud Storage) | Running the app and storing your files | Belgium (EU) |
| Google Gemini API | Making background images and descriptions from your photos, lyrics and notes | Google's servers, which may be outside the EU |
| Google sign-in | Signing you in, if you choose Google | |
| Stripe | Taking payments for plans and credit top-ups, invoices and refunds (your email, card or payment details, billing address) | Stripe, which may process data outside the EU |
| Google Fonts | Loading the typefaces of these pages (your browser sends its IP address to Google) | |
| Google Analytics | Counting visits and which pages are used, only if you accept the analytics banner |
Lyrics are transcribed with Whisper on our own servers; your song is not sent to a third party for that. Transfers outside the EU rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses.
How long we keep it
- Your songs, images and videos: until you delete them or your account.
- When you delete your account, your files are removed at once from the app and erased for good after 14 days.
- We keep a minimal record of a deleted account (the email address, marked deleted) so it cannot be re-created by mistake, and the credit history for as long as accounting law requires.
- Server logs: up to 30 days.
Cookies
We set one cookie, ls_session, which keeps you signed in. It is strictly necessary, so it needs no consent. Your light or dark theme choice is kept in your browser's local storage and never sent to us.
If you accept the analytics banner, Google Analytics sets its own cookies (_ga, _ga_*) to count visits, with your IP address shortened and no advertising features. If you decline, or your browser sends Do Not Track, no analytics script loads. Your choice is kept in local storage; clear it to be asked again.
Your rights
You may access, correct, export or delete your data, object to or restrict its use, and withdraw any consent.
- Download everything: Profile, then Download my data, gives you a zip of your songs, lyrics, images and videos.
- Delete your account: Profile, then Delete account.
- Anything else: write to jorge.britosilva@gmail.com. We answer within one month.
You may also complain to the Danish data protection authority, Datatilsynet, or the authority where you live.
Children
Tunalo is not for anyone under 16.
Changes
If we change this policy in a way that matters, we will tell you in the app or by email before it applies.
Who we are
Tunalo is run by North Coach (CVR 46406087), Gammelmosevej 72 A, 2800 Kongens Lyngby, Denmark. Email: jorge.britosilva@gmail.com.