01. About this policy
Tunessa and this website are operated by BuJun. This policy explains how we handle information when you listen, play, download content, subscribe or contact us. Questions and privacy requests: eric.j.bu@gmail.com.
02. Your music and progress
You do not need a Tunessa account to listen or play. Game progress, scores, postcards, personal postcard messages, settings and timing calibration are stored on your device. The current App does not upload these as a cloud profile. Information about a particular session may be included if you choose to send feedback. Removing the App may remove local data; operating-system backups are controlled by your device settings.
03. Downloads and website visits
Our content and feedback services use Cloudflare. Network requests necessarily include information such as an IP address and the requested resource so the service can deliver content, prevent abuse and diagnose failures. Hosting and network providers may process technical logs under their own service policies. We do not add advertising trackers, behavioural analytics or marketing cookies to this website.
04. Optional feedback
When you send feedback, we receive a report identifier, time, the selected song or image, reasons and your optional note. Limited context may include App version, system version, language, screen, chapter, level, difficulty, score, accuracy and practice status. We use it to investigate the issue and improve the App. Please do not include passwords, payment details or unnecessary personal information.
05. Abuse prevention
The feedback service derives a keyed hash from the request IP address and the UTC day to apply rate limits. The feedback database stores this changing hash rather than the raw IP address. It is not a persistent account or device identifier. Short-lived rate counters normally retain only the current and previous day and are cleared by scheduled maintenance. This does not mean network providers never process an IP address.
06. Purchases and subscriptions
Apple processes in-app payments. We do not receive your full payment-card details or Apple Account password. The App reads verified purchase entitlements. When protected PLAY content requires verification, signed transaction information may be sent to our content service and checked with Apple, including product, transaction, expiry and revocation information. This is used to provide and protect paid access, not advertising. The current content service does not keep a separate subscription-history database.
07. Sharing and service providers
If you choose to export or share a postcard or highlight, the selected content is handed to the destination you choose through the system share sheet. That destination applies its own policy. Apple provides purchases and operating-system services; Cloudflare provides content delivery, API hosting and the feedback database. Service-provider processing may take place outside your country. We do not sell your personal information or use it for cross-app advertising tracking.
08. Retention and deletion
Feedback in the App outbox expires after 30 days and is removed during queue maintenance; accepted or rejected deliveries are removed from the queue. Server feedback is eligible for deletion 30 days after receipt, with hourly cleanup. Resolved or spam reports may be deleted earlier, after 7 days closed. An hourly job can introduce a short cleanup delay. Provider backups, security logs and recovery copies follow the provider’s retention settings and are not necessarily erased immediately when a database row is deleted. Support emails are kept only as needed to answer and resolve the request, or as required by law.
09. Your choices and rights
You may choose not to submit feedback, clear downloaded content in Settings, manage subscriptions in your Apple Account, and remove the App to remove local App data, subject to device backups. To request access, correction or deletion of information you have sent us, contact eric.j.bu@gmail.com. Include enough context to locate the report, such as the approximate date and song. We do not have a login that can identify all reports from one person. Rights and lawful exceptions depend on your location; we respond as required by applicable law.
10. Children
Tunessa is not specifically directed at children under 13, and we do not knowingly solicit their personal information. If you believe a child has sent personal information, please contact us so we can investigate and delete it where appropriate. Age and parental-consent requirements may differ by region.
11. Security and updates
We use encrypted connections and restricted administrative access. No system can guarantee absolute security. We update this page when our practices change, and provide additional notice or obtain consent when required. Last updated: 2026-11-04.
12. Provider policies
Read Apple’s privacy policy and Cloudflare’s privacy policy for their own services.