TONUMA

Privacy Policy.

Effective: November 3, 2026

The short version. No account, no ads, no microphone, no location. Every sound is generated on your phone. Your listening history, saved mixes and settings stay on your phone. Subscriptions are handled by Google Play (or the App Store) and RevenueCat. Anonymous usage statistics go to Google Firebase only if you say yes during setup, and you can change that at any time in Settings.

1. Who we are

Tonuma is provided by CodeEnsis Ltd. ("we", "our", "us"), Χριστόδουλου Σώζου 2, EIFFEL TOWER, Floor 3, Flat/Office 301, 1096 Λευκωσία, Κύπρος, which is the controller for the limited data described here.

2. What Tonuma does

Tonuma plays binaural beats, isochronic tones, coloured noise and nature sounds for focus, sleep, relaxation and meditation. All audio is synthesised on your phone; no sound is streamed from the internet.

3. Permissions and what they are for

Tonuma does not use the microphone, camera, contacts or location.

4. Data stored on your device

Your listening sessions (start time, length and type), progress and streak, saved mixes, chosen goal, language and other settings, and the generated sound files are stored in the app's local storage on your phone and are deleted when you uninstall the app. They are never sent to us. If you have turned on your device's own backup, the system may include them in your personal backup; we cannot read it.

5. Purchases

Tonuma Premium is offered as an auto-renewing subscription (yearly with a free trial, or monthly) and as a one-time lifetime purchase, bought through Google Play or the Apple App Store, which process the payment. We never see your payment details. We use RevenueCat to check and manage your purchase. RevenueCat receives an anonymous app user ID it generates and your purchase receipts from the store, and tells the app whether Premium is active. It does not receive your name or email. See RevenueCat's privacy policy.

6. Usage statistics (optional)

Tonuma includes Google Firebase Analytics. It is off by default. During first-time setup the app asks whether you want to share anonymous usage statistics, and nothing is collected until you say yes. You can change this at any time in Settings.

Analytics receives anonymous app events, for example the goal you picked during setup, which preset was played, the timer length, how many minutes a session lasted, or that the subscription screen was shown. Together with each event Firebase receives a random app instance ID, device model, OS and app version, language and an approximate location derived from the IP address.

The app does not use the advertising ID, contains no ads and does not share data for advertising. Google processes this data on our behalf under the Firebase data processing terms. We do not sell personal data.

7. Where data is processed

CodeEnsis is established in Cyprus, EU. Google Firebase and RevenueCat may process data in the United States and other countries, relying on the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

8. Our website

The Terms and this Privacy Policy open in an in-app browser tab served by codeensis.com, whose hosting keeps standard server logs (such as IP address, time and page) for security for a limited period.

9. Support emails

If you email us, we use your email address and message only to answer you and keep the correspondence as long as needed for that.

10. Children

Tonuma is not directed at children under 13 and does not knowingly collect personal data from anyone.

11. Legal basis (GDPR) and your rights

Usage statistics are processed on the basis of your consent, which you can withdraw in Settings. Purchases rely on the performance of a contract, handled by the store and RevenueCat. Support requests rely on legitimate interest. Uninstalling the app removes everything it stored on the phone; analytics data is tied to a random app ID, not to your name or email. You may contact us to exercise your rights of access, rectification, erasure, restriction, objection and portability, and you may complain to the Cyprus Commissioner for Personal Data Protection or your local supervisory authority.

12. Changes to this policy

If anything above changes, we will update this page and its effective date.

13. Contact

Privacy questions or requests: [email protected]. General support: [email protected].