← Back to Tempo Tunes

Privacy Policy

Last updated: August 17, 2026

1. Overview

Tempo Tunes ("we", "our", or "the app") is a music playlist generator that builds playlists by tempo (BPM) and genre. This privacy policy explains how we collect, use, and protect your information when you use our mobile app or website.

2. Information We Collect

We collect the following types of information:

  • Account information: When you create an account (email/password, Sign in with Google, or Sign in with Apple), we store your email address and display name via Supabase Auth.
  • Session data: When you sign in, we create a session token and store it, along with your account identifier, in our database so you stay signed in across app restarts. Sessions are deleted when you log out or delete your account.
  • Music service connections (optional, where available): If you connect Spotify, we access your Spotify profile (display name, email, profile image) and create playlists on your behalf; we store the access tokens needed to do this, never your Spotify password. If you connect Apple Music, we store a music user token that lets us create playlists in your Apple Music library. If you connect Tidal or YouTube Music, we store the OAuth tokens needed to create playlists in that account on your behalf — never your password. Playlists generated without a connected music service are built from our own tempo database and saved only on your device.
  • Profile photo: If you choose to set a custom profile picture, we store it locally on your device only.
  • Playlist history: We store a local history of playlists you create (names, tracks, track counts) on your device for your convenience.

3. Storage On Your Device: Cookies, Local Storage, and Similar Technologies

Tempo Tunes stores, accesses, and collects information directly on your device, and some of the third parties listed in Section 5 do the same, using cookies, browser local storage, mobile app storage, device keychain storage, and similar technologies. Specifically:

  • On the web: we place your Tempo Tunes session token in your browser's local storage (key tempo_session_token) so you stay signed in between visits. We read it back on each visit to identify your session.
  • In the mobile apps: we store your session token in the device keychain (iOS Keychain / Android Keystore, via Expo SecureStore), and we store your playlist history, your preferred music service, your profile photo reference, your profile "about" text, and a rate-limit timestamp in the app's local storage on the device.
  • Third parties: Supabase Auth stores authentication tokens on your device to keep you signed in. If you sign in with Google or Apple, or connect Apple Music, Tidal, YouTube Music, or Spotify, those providers may place cookies or similar identifiers on your device or in your browser during the sign-in and authorization flow, under their own privacy policies. Where you complete a YouTube or Google authorization in a browser, Google may set cookies on that browser.

We do not use cookies or device storage for advertising, cross-site tracking, or analytics profiling, and Tempo Tunes runs no third-party advertising or analytics trackers. You can clear this information at any time: log out or clear your browser's site data on the web, or log out, delete your account, or uninstall the app on mobile. Doing so signs you out and removes the locally stored items described above.

4. How We Use Your Information

We use your information to: (a) authenticate you and manage your account; (b) generate playlists by tempo and genre; (c) where you have connected a music service, create and add tracks to playlists in that account; and (d) improve our service. We do not sell your data to third parties, and we do not use your data for advertising.

5. Third-Party Services

We use Supabase for authentication and data storage, Render to host our API, and (optionally, where you connect them) Apple Music, Tidal, YouTube Music, and Spotify for playlist creation, plus Google and Apple for sign-in. Each has its own privacy policy. Song tempo data comes from our own database and public music catalogs, not from your personal listening history.

YouTube API Services: Tempo Tunes uses YouTube API Services to provide the "Save to YouTube Music" feature. By using this feature you agree to the YouTube Terms of Service, and our handling of information received from YouTube API Services is subject to the Google Privacy Policy. We use this access only to create playlists in your own YouTube account and add the songs you chose; we do not read, store, or share any other YouTube account data. You can revoke Tempo Tunes' access to your Google account at any time via the Google security settings page.

6. Data Retention

We retain your account and session data until you delete your account. You may delete your account at any time from the Profile tab in the app; this removes your account, sessions, and associated data from our systems. Playlists created in a connected music service (such as Apple Music or Spotify) remain in that account until you delete them there, and playlists saved on your device remain until you remove them or uninstall the app.

YouTube API Data: we do not build a store of YouTube data. The only YouTube-derived information we keep is the OAuth authorization credential for your YouTube account, held solely to create playlists you ask for. Access tokens are short-lived and refreshed on demand; the authorization credential is deleted as soon as you disconnect YouTube Music, log out, delete your account, or revoke access in your Google account settings, and automatically the first time Google reports the authorization as revoked or invalid. We also delete it automatically after 30 days without use: if you have not saved a playlist to YouTube Music in that time, our server asks Google to revoke the authorization and erases its own copy, and the next save simply asks you to reconnect. Video identifiers and playlist identifiers used to build a playlist are held in memory only for the duration of that request and are not stored on our servers.

7. Data Security

Account authentication is handled by Supabase Auth; we never see or store your password in plain text, and music service connections use OAuth tokens rather than passwords. All communication between the app and our servers uses HTTPS encryption. While no method of transmission or storage is completely secure, we limit the data we collect to what the app needs to function.

8. Children's Privacy

Tempo Tunes is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has created an account, please contact us and we will delete the account and its data.

9. Your Rights

You can access, correct, or delete your account data through the app. For account deletion, use the "Delete Account" option in your profile, or email us at support@tempo-tunes.com and we will action your request. You may also revoke Tempo Tunes' access to a connected music service at any time from that service's own account settings.

10. Changes

We may update this privacy policy from time to time. We will notify you of significant changes by updating the "Last updated" date. Continued use of the app after changes constitutes acceptance.

11. Contact

Tempo Tunes is operated by C7NOMAD LLC. For privacy questions, data access or deletion requests, or any question about this policy, contact us directly:

We aim to respond to privacy requests within 30 days.

← Back to Tempo Tunes