Privacy Policy

Last updated 14 July 2026 · The same text you see inside the app.

Short version: your plans, moods and journal are yours. We never sell them, and you can delete everything from Settings.

How Timune (based in Australia, operating worldwide) collects, uses, discloses, and protects your personal information. Written to meet the Australian Privacy Act 1988 (APPs), the EU/UK GDPR, and the California CCPA/CPRA where they apply to you. By using Timune you agree to this policy.

Who we are

Timune is an independent app based in Australia, operating worldwide. Privacy contact: privacy@timune.com.

What we collect

Account data (email, and the identifier Google/Apple return if you use them — never your password). Your content (tasks, habits, goals, subtasks, notes). Wellbeing data (mood entries, focus and breathing sessions) — treated as sensitive, never sold or used for ads. Optional voice input, which is transcribed in transit and not stored after transcription. Usage/behavioural signals and AI-generated summaries. Device/technical data and crash diagnostics. We do not collect precise location, contacts, photos, or advertising identifiers.

How we use it

To provide and personalise the app, sync your data, power Keeper, send reminders you set up, process subscriptions, maintain security, fix bugs, and meet legal obligations. GDPR bases: contract (core features), consent (voice, notifications), and legitimate interests (security, improvement).

AI features (Keeper)

Keeper sends relevant content to our AI provider to generate reflections. Keeper is not a professional or medical service and may be inaccurate (see the Disclaimer). We do not use your content to train third-party foundation models.

Who we share it with

We do not sell your personal information. We share it only with providers that process it for us under contract: Supabase (hosting/auth/sync), our AI provider (Keeper), ElevenLabs (voice), RevenueCat with Apple/Google (subscriptions), Google/Apple (sign-in), and Expo (delivery, push). We may disclose where required by law.

Overseas transfers

Our providers are mostly in the United States. By using Timune you acknowledge your data may be processed overseas; where required we rely on appropriate safeguards (e.g. Standard Contractual Clauses).

Retention

We keep your information while your account is active. Deleting your account (Settings → Delete account) erases it from our systems; backups cycle out over time. Some records may be kept where the law requires.

Your rights

You may access, correct, delete, export, object to, or restrict processing, and withdraw consent, depending on where you live. Delete everything yourself in-app, or contact privacy@timune.com. You can complain to the OAIC (Australia) or your local regulator. California residents: we do not sell or "share" your data for cross-context advertising, and we do not discriminate for exercising rights.

Security & children

We use TLS encryption, authenticated access, and row-level controls, and will notify you of eligible breaches as required. Timune is not directed to children under 13 and we do not knowingly collect their data.

Changes

We may update this policy and will note the date; material changes will be flagged in-app. Continued use means acceptance.