Privacy Policy
Last updated: March 8, 2026
1. Data Controller
Braintunes is operated by Aleksandr Novikov, Germany. For any privacy-related inquiries, contact us at [email protected].
In this policy, "we", "our", and "us" refer to the operator of Braintunes.
2. Information We Collect
Account Information
If you create an account, we collect:
- Email address
- Authentication provider information (Google or Apple sign-in)
Usage Data
We collect app usage data needed to provide core product features:
- Which modes and tracks are played
- Listening duration and session frequency
- Favorite and dislike actions
- Intensity preferences
Technical Data
We collect technical information needed for app reliability:
- Device type and operating system
- App runtime and version
- Optional crash diagnostics (only if enabled in Settings)
3. Legal Bases for Processing (GDPR)
We process your personal data on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Account creation, authentication, playback sync | Performance of contract (Art. 6(1)(b) GDPR) |
| Security monitoring and abuse prevention | Legitimate interests (Art. 6(1)(f) GDPR) |
| Optional crash diagnostics | Consent (Art. 6(1)(a) GDPR) — you can enable or disable this at any time in Settings |
| Service-related notifications (e.g., streak reminders) | Consent (Art. 6(1)(a) GDPR) — opt-in only |
| Improving audio content and user experience | Legitimate interests (Art. 6(1)(f) GDPR) |
4. How We Use Your Information
We use collected information to:
- Provide and maintain the Service
- Sync your favorites, dislikes, and preferences across devices
- Track your listening streak
- Improve audio content and user experience
- Send service-related notifications (if you opt in)
- Monitor and prevent abuse
5. What We Do Not Do
- We do not sell your personal data to third parties
- We do not serve advertisements
- We do not share your data with data brokers
- We do not use your data for targeted advertising
- We do not collect biometric or health data
- We do not use third-party analytics or advertising trackers
6. International Data Transfers
Your data may be processed on servers located outside the European Economic Area, including in the United States. When we transfer data outside the EEA, we rely on European Commission adequacy decisions or Standard Contractual Clauses (SCCs) to ensure an adequate level of data protection.
7. Data Storage and Security
Your data is stored on secure, industry-standard cloud infrastructure. We use encryption in transit (TLS) and at rest. Access to user data is limited to essential personnel and systems.
8. Third-Party Services
We use the following categories of third-party services:
- Authentication: Google Sign-In, Apple Sign-In
- Infrastructure: Cloud hosting and CDN providers
- Crash diagnostics: Firebase Crashlytics (optional, disabled by default)
These services process data only as needed to provide their service to us and are bound by their own privacy policies.
9. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days.
10. Your Rights
Under applicable data protection law (including the GDPR), you have the right to:
- Access the personal data we hold about you
- Request rectification of inaccurate data
- Request erasure of your data
- Restrict processing of your data
- Data portability (receive your data in a machine-readable format)
- Object to processing based on legitimate interests
- Withdraw consent at any time for optional processing (e.g., crash diagnostics, notifications)
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection supervisory authority.
11. Children's Privacy
The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected such data, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.
13. Contact
If you have questions about this Privacy Policy or your data, contact us at [email protected].