1. 关于我们

TonesFly 由 Thang Pham（"TonesFly"、"我们"或"我方"）运营。本隐私政策说明了您使用 TonesFly 移动应用（"本应用"）时，我们如何收集、使用和保护您的信息。

就 GDPR 而言，Thang Pham 是数据控制者。联系方式：[email protected]

2. 我们收集的信息

We collect the following types of information:

Account information — your email address, display name, authentication provider, and account/user ID when you create or link an account via Apple Sign-In, Google Sign-In, or email
Audio files — audio files you import into the App for listening practice (processed and stored on-device only; never sent to any server)
Transcripts and lesson data — generated entirely on your device from your imported audio; stored on-device and in iCloud (if enabled) only
Learning data — practice progress, accuracy scores, challenge completion, and streaks stored locally on your device
Device-linked identifiers — a persistent device_id stored in Keychain and sent to our server for account binding and free-tier limit enforcement
Preferences — your native language, stored locally on your device
Device information — device model, operating system version, and app version for diagnostics
Usage analytics — product interaction data used to improve the App; optional analytics are collected only with your consent
Campaign attribution — when you open the App from a marketing link, we may collect anonymous UTM parameters (source, medium, campaign name) to measure marketing effectiveness. These parameters do not contain personally identifiable information and are processed through PostHog subject to your analytics consent

3. 处理的法律依据 (GDPR)

我们基于以下法律依据处理您的个人数据：

合同履行 (Art. 6(1)(b))——账户数据、音频处理和学习数据是提供您所请求的服务所必需的
合法利益 (Art. 6(1)(f))——设备信息和匿名分析帮助我们维护和改进本应用、防止欺诈并确保安全
同意 (Art. 6(1)(a))——非必要分析（PostHog）仅在您同意的情况下处理，您可以随时通过隐私设置撤回同意

您可以随时撤回对分析的同意，且不影响撤回前处理的合法性。

4. 我们如何使用您的信息

We use the information we collect to:

Provide, maintain, and improve TonesFly
Process imported audio entirely on your device to generate listening practice challenges
Authenticate your account and manage subscriptions
Enforce the free tier fairly and prevent abuse across multiple accounts on the same device
Process subscriptions and in-app purchases
Send important service updates via email
Respond to support requests
Measure marketing effectiveness using anonymous campaign attribution data from UTM parameters

5. 音频文件处理

Audio is processed entirely on your device and never leaves it.

When you import an audio file:

Speech recognition runs on your device using on-device models
All transcription, lesson generation, and practice content creation happen on your device
No audio, transcripts, or lesson content are sent to any server
Audio files are stored on-device and in iCloud (if enabled) only
Processed challenge data is stored locally on your device and in your iCloud account for offline practice

Automated processing: Speech recognition and challenge generation are fully automated and run entirely on your device. No human reviews your audio or transcripts.

5a. On-Device Processing

TonesFly uses on-device speech recognition to convert your imported audio into text for listening practice. All speech recognition and lesson generation run entirely on your device — no audio or transcript data is sent to any external service.

All lesson content is generated and stored on your device.

5b. Automated Processing (GDPR Art. 22)

TonesFly uses on-device automated processing to generate listening practice challenges from your audio. This includes speech recognition, challenge generation, and adaptive pacing. All of this processing runs entirely on your device.

These automated processes help create your learning content but do not produce legal effects. Under GDPR Article 22, you have the right to request human review of any automated processing decision that significantly affects you by contacting [email protected].

For users under the applicable age threshold (13–18 depending on region), optional data collection is disabled entirely.

6. 第三方服务

We use the following third-party services to operate and improve the App:

RevenueCat — subscription and purchase management
PostHog — product analytics (consent-based)
Firebase — authentication and crash reporting
Cloudflare — cloud hosting and edge network services (Workers, D1, KV)
Resend — transactional email delivery

These providers process data under data processing agreements with appropriate safeguards. Our Data Processing Agreement is available at https://tonesfly.com/dpa. Apple handles all subscription billing directly.

7. 数据共享

We do not sell, rent, or trade your personal data to third parties. This applies to all users, including California residents.

We may share data with:

Cloud hosting and infrastructure providers (for authentication and account management only)
Analytics services (product interaction data, with your consent where required)
Payment processors (Apple handles all subscription billing)
Legal authorities when required by law or to protect our legal rights

Audio, transcripts, and lesson content are processed entirely on your device and are not shared with any third party.

For California residents (CCPA/CPRA): We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not collect or process sensitive personal information as defined by the CPRA, including precise geolocation, racial or ethnic origin, religious beliefs, genetic data, biometric information, or health information. You have the right to know what personal information we collect, request deletion, and opt out of any future sale. Contact [email protected] to exercise these rights.

8. 数据安全

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/HTTPS). Our server infrastructure is hosted on Cloudflare's global network (Workers, D1, KV) and handles only authentication and subscription management. Audio, transcripts, and lesson content are processed and stored entirely on your device and in your iCloud account — they are never sent to our servers.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected users without undue delay, as required by GDPR Article 33-34.

However, no method of transmission over the internet is 100% secure.

9. 数据保留

We retain your data for as long as your account is active or as needed to provide services.

Audio, transcripts, and lesson content: stored on-device and iCloud only. Never sent to our servers.
Account data (email, display name, device_id, subscription status): retained on our servers until account deletion.
Practice data: stored locally on your device; deleted when you remove the app, delete individual lessons, or choose to remove local data.
Analytics data: retained for up to 12 months, subject to your consent settings.

You may request account deletion at any time from Settings > Delete Account. When you request deletion, your account enters a 7-day grace period during which you may cancel by signing in. After the grace period expires, all your data is permanently deleted from our servers. We send email confirmation when deletion is scheduled, a reminder 24 hours before, and confirmation after deletion.

TonesFly cannot delete data stored in your iCloud account. To manage iCloud data, visit Settings > [Your Name] > iCloud on your device.

10. 国际数据传输

Our server infrastructure is hosted on Cloudflare's global edge network, handling only authentication and subscription management. Audio, transcripts, and lesson content are processed and stored entirely on your device and never leave it. Third-party services including Firebase, RevenueCat, and PostHog process account and analytics data in the United States.

Your information may also be accessed from Viet Nam (where the data controller is located) for administrative and development purposes.

For transfers outside the EU/EEA, we rely on:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data processing agreements with all third-party service providers
Where applicable, adequacy decisions by the European Commission

You may request a copy of the safeguards in place by contacting [email protected]

Japanese residents (APPI): Your account data is transferred to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller) for the purposes described in this policy. Audio and lesson content remain on your device. We ensure appropriate data protection through contractual obligations with all service providers.

Chinese mainland residents (PIPL): Your account information may be transferred outside the People's Republic of China to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). Audio, transcripts, and lesson content remain on your device and are not transferred. By using TonesFly, you consent to this cross-border transfer for the purposes described in Section 4. You may withdraw consent at any time by contacting [email protected], which may affect our ability to provide the service. We conduct personal information protection impact assessments for cross-border transfers as required by PIPL.

South Korean residents (K-PIPA): Your account data is transferred to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). We provide notice of the recipient, purpose, and items of personal information transferred. These transfers are protected by data processing agreements with all service providers.

Brazilian residents (LGPD): Your account data is transferred internationally to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller) for the purposes described in this policy. These transfers are protected by contractual clauses that ensure an adequate level of data protection as required by the LGPD.

Vietnamese residents (PDPD): As the data controller is located in Viet Nam, your personal data is subject to Decree 13/2023/NĐ-CP on personal data protection. Account data may be transferred to the United States for processing by third-party services (Firebase, RevenueCat, PostHog). We conduct data processing impact assessments for cross-border transfers as required by Vietnamese law.

United Kingdom residents (UK GDPR): Your account data is transferred to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). For transfers from the UK, we rely on the International Data Transfer Agreement (IDTA) or the UK Addendum to EU Standard Contractual Clauses, as approved by the UK Information Commissioner's Office (ICO).

Indian residents (DPDP Act 2023): Your account data may be transferred outside India to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). Audio and lesson content remain on your device. We ensure appropriate data protection through contractual obligations with all service providers. Note: Under the DPDP Act, children are defined as individuals under 18 years of age, and verifiable parental consent is required before processing their data.

Indonesian residents (PDP Law 27/2022): Your account data may be transferred outside Indonesia to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller) for the purposes described in this policy. These transfers are protected by data processing agreements ensuring an equivalent level of data protection.

Thai residents (PDPA 2019): Your account data may be transferred outside Thailand to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). We ensure that adequate safeguards are in place as required by the Personal Data Protection Act, including contractual obligations with all service providers.

Turkish residents (KVKK): Your account data may be transferred outside Turkey to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). We rely on your explicit consent or contractual necessity as the legal basis for these cross-border transfers, in accordance with the Law on the Protection of Personal Data (Law No. 6698).

Filipino residents (Data Privacy Act 2012): Your account data may be transferred outside the Philippines to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). These transfers are protected by contractual safeguards ensuring compliance with the Data Privacy Act of 2012 and regulations of the National Privacy Commission (NPC).

Saudi Arabian residents (PDPL 2023): Your account data may be transferred outside the Kingdom of Saudi Arabia to the United States (Firebase, RevenueCat, PostHog) and Viet Nam (data controller). We ensure an adequate level of data protection for cross-border transfers as required by the Personal Data Protection Law.

11. 儿童隐私

TonesFly 使用年龄验证流程来帮助遵守儿童隐私法律，包括 COPPA（美国）和 GDPR（欧盟/欧洲经济区）。如果您尚未完成该流程，应用会在启用可选数据收集之前询问您的生日。您的确切生日在设备上本地处理以确定正确的年龄阈值；我们仅在设备上本地存储年龄范围（13岁以下、13-15岁、16-17岁或18岁以上），不存储在我们的服务器上。

如果您表明自己低于适用的年龄阈值（美国和大多数国家为13岁，欧盟/欧洲经济区根据国家为13-16岁，中国和韩国为14岁，印度为18岁），可选数据收集——包括分析、崩溃报告和诊断——将自动禁用，且无法在设置中重新启用。

如果您认为儿童的数据被错误收集，请联系 [email protected]，我们会及时删除。

12. 您的权利

根据您所在的司法管辖区，您享有以下权利：

所有用户：

访问我们持有的您的个人数据
请求更正不准确的数据
请求删除您的数据
以可移植格式导出您的数据
选择退出分析数据收集

欧盟/欧洲经济区居民 (GDPR)：

限制数据处理的权利
基于合法利益反对处理的权利
随时撤回同意的权利
不受仅基于自动化决策约束的权利
向当地数据保护机构（监管机构）提出投诉的权利

加利福尼亚州居民 (CCPA/CPRA)：

了解收集了哪些个人信息的权利
删除个人信息的权利
选择退出个人信息出售的权利（我们不出售您的数据）
行使权利不受歧视的权利

日本居民（APPI）：

请求披露保留的个人数据的权利
请求更正、补充或删除的权利
请求停止使用或删除的权利
请求停止向第三方提供的权利

中国大陆居民 (PIPL)：

了解和决定个人信息处理的权利
访问和复制个人信息的权利
更正或补充不准确或不完整信息的权利
请求删除个人信息的权利
随时撤回同意的权利
请求解释处理规则的权利
数据可移植性权利

韩国居民 (K-PIPA)：

访问个人信息的权利
请求更正或删除的权利
请求暂停处理的权利
随时撤回同意的权利

巴西居民 (LGPD)：

确认数据处理的权利
访问个人数据的权利
更正不完整、不准确或过期数据的权利
匿名化、封锁或删除不必要数据的权利
数据可移植性权利
了解数据共享实体信息的权利
随时撤回同意的权利

越南居民 (PDPD)：

了解个人数据处理活动的权利
同意和撤回同意的权利
访问个人数据的权利
请求更正个人数据的权利
请求删除个人数据的权利
限制数据处理的权利
数据可移植性权利

英国居民 (UK GDPR)：

访问个人数据的权利
更正不准确数据的权利
删除数据的权利
限制处理的权利
数据可移植性权利
反对处理的权利
随时撤回同意的权利
不受仅基于自动化决策约束的权利
向信息专员办公室 (ICO) 提出投诉的权利

印度居民（DPDP 法案 2023）：

访问个人数据相关信息的权利
更正和删除个人数据的权利
申诉救济的权利
指定代理人代为行使权利的权利

印度尼西亚居民（PDP 法 27/2022）：

获知数据处理信息的权利
访问个人数据的权利
更正不准确数据的权利
请求删除个人数据的权利
随时撤回同意的权利
数据可移植性权利

泰国居民（PDPA 2019）：

访问个人数据的权利
更正不准确数据的权利
请求删除或匿名化的权利
限制处理的权利
数据可移植性权利
反对处理的权利
随时撤回同意的权利
向个人数据保护委员会 (PDPC) 提出投诉的权利

土耳其居民（KVKK）：

了解个人数据是否被处理的权利
请求有关处理的信息的权利
了解处理目的的权利
更正不完整或不准确数据的权利
请求删除或销毁个人数据的权利
反对处理的权利
数据可移植性权利
向个人数据保护机构（KVKK 委员会）提出投诉的权利

菲律宾居民（数据隐私法 2012）：

获知数据处理信息的权利
访问个人数据的权利
更正不准确数据的权利
请求删除或封锁数据的权利
反对处理的权利
数据可移植性权利
向国家隐私委员会 (NPC) 提出投诉的权利

沙特阿拉伯居民（PDPL 2023）：

获知数据处理信息的权利
访问个人数据的权利
更正不准确数据的权利
请求删除个人数据的权利
限制处理的权利
数据可移植性权利

如需行使上述任何权利，请联系 [email protected]，使用应用中的隐私设置，或直接在"设置">"删除账户"中删除您的账户。我们将在以下期限内回复：GDPR 请求30天内，CCPA 请求45天内，APPI 请求两周内，PIPL 请求15个工作日内，K-PIPA 请求10天内，LGPD 和 PDPD 请求15天内，UK GDPR 请求30天内，DPDP 请求30天内，印度尼西亚 PDP 请求14天内，PDPA 请求30天内，KVKK 请求30天内，菲律宾 DPA 请求15天内，PDPL 请求30天内（如法律要求，可能更短）。

13. 政策变更

我们可能会不时更新本隐私政策。我们将通过本应用或电子邮件通知您重大变更。变更后继续使用本应用即表示接受更新后的政策。

14. 联系我们

如果您对本隐私政策有疑问或希望行使您的数据权利，请联系我们：

Thang Pham (TonesFly)
电子邮件：[email protected]

对于欧盟/欧洲经济区用户：如果您对我们的回复不满意，您有权向当地数据保护监管机构提出投诉。