Updated 16 October 2026
Privacy policy
This policy covers the Tonalia app for iPhone and this website, tonalia.net. Tonalia is run by Hubertus Putu Widya Primanta Nugraha("we"). If anything here is unclear, write to [email protected].
The short version
- We collect what an account and a subscription need, and nothing to advertise to you.
- Your lesson progress stays on your phone.
- There is no tracking across apps or websites, and this site sets no cookies.
- We do not sell your information, to anyone.
In the app
Your account
Tonalia asks you to sign in so a subscription follows you rather than your phone. You can sign in with Apple, with Google, or with an email address and password. Sign in is handled by Firebase Authentication, a Google service, which stores your email address, the name your sign in provider shares, if any, and an identifier for the account. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's relay address. Passwords are handled by Firebase and never reach us.
Your subscription
Payment is handled by Apple through the App Store; we never see your card. To know whether your account has an active subscription, the app uses RevenueCat, which receives the App Store's record of your purchases and your account identifier. That is how a subscription carries over to a reinstall or a new iPhone.
Your progress
Lessons, streaks, XP, hearts and review schedules are stored on your device. They are not uploaded, so deleting the app deletes them.
Analytics
The app does not currently send usage analytics anywhere. If that changes, this policy will say what is collected and by whom before it does.
On this website
tonalia.net sets no cookies and runs no analytics or advertising scripts. It is served by Cloudflare, which processes each request, including your IP address, to deliver the page and protect it from abuse. We use the IP address only to limit how often the waitlist form can be sent, and we do not store it.
The waitlist
If you join the waitlist we store four things: your email address, whether you asked for a beta invite, which page the form was on, and when you signed up. We use them to tell you when Tonalia is on the App Store and, if you asked, to invite you to the TestFlight beta. Nothing else.
Who processes your information
- Google (Firebase Authentication): accounts and sign in.
- RevenueCat: subscription status.
- Apple: payments, Sign in with Apple, and app distribution.
- Cloudflare: this website and the waitlist.
Each processes information only to provide its service to us, under its own privacy terms.
How long we keep it
Your account is kept until you delete it. Waitlist entries are kept until launch and for twelve months after, unless you ask us to remove yours sooner. Purchase records are kept as long as Apple and tax law require.
Your choices
You can ask to see, correct or delete what we hold about you, and to be removed from the waitlist, by writing to [email protected] from the address in question.
To delete your account, open Profile in the app and tap Delete account. After you confirm with your password, Google or Apple, the account and its sign in records are deleted straight away, and for Sign in with Apple Tonalia's access to your Apple ID is revoked. If you can no longer sign in, write to us from the email on the account and we will delete it within 30 days. Cancelling a subscription is done in your App Store settings; deleting an account does not cancel it.
Children
Tonalia is not directed at children under 13, and we do not knowingly collect information from them.
Changes
If this policy changes, the date at the top changes with it.
Questions about this page: [email protected]