Attunify ("we", "us", "our") is a personal music companion app that connects to your Spotify
account to build listening charts, recommendations, and playback controls tailored to you. This
policy explains what data we collect, why, and what choices you have.
This app is intended for use with a Spotify Premium account, and requires you
to sign in with Spotify to work.
What we collect
- Your Spotify profile — your Spotify user ID, display name, and email
address, provided by Spotify when you sign in.
- Listening & library data — what's currently playing, your playback
state, your Liked Songs, and your private/collaborative playlists. We use this to build your
personal charts and recommendations, and to let you control playback from within the app.
- App-generated listening history — your own rotation/chart rankings,
favourites, skips, and genre preferences, all derived from your Spotify activity while using
Attunify. This is what powers Discovery Mixes and the Suggested tab.
- Weekly listening time — on the free tier, we track how many minutes
you've spent in Discover and Radio each week against a free usage allowance, so the app knows
when that allowance is used up. We don't track this for paid accounts.
- Feedback you submit — if you use the in-app Feedback form, we store the
message you write (and your Spotify user ID, so we know who sent it) so we can read and act on
it.
- Your own Spotify Developer credentials, if you set them up — Attunify
lets you connect using your own free Spotify Client ID and Client Secret (see our in-app setup
guide) rather than a shared one. If you do this, we store that Client ID/Secret so the app can
authenticate on your behalf.
- Basic technical data — a session cookie that keeps you signed in, and
standard web server request logs (e.g. IP address) kept by our hosting provider for security
and diagnostics.
How we use it
Strictly to run the app: building your charts, generating recommendations, controlling
playback, remembering your preferences (like excluded artists or Family mode), and letting you
favourite or skip tracks. We do not use your data for advertising, and we do
not sell your data to anyone.
Who we share data with
A small number of third-party services help power specific features. None of them receive
your personal profile information (name, email, etc.) — only the minimum track/artist data
needed for that feature to work:
- Spotify — required for the app to function at all. Spotify's own
privacy
policy governs how they handle your account data.
- Music data services — a small number of specialist third-party services
support features like genre classification, similar-artist recommendations, production credit
lookups, and artist artwork. They're sent only the minimum track or artist identifiers needed
for that lookup (e.g. a track ID or artist name) — never your name, email, or any other
personal or account data, and never anything that could tie the lookup back to you as a
person.
- Our hosting provider — processes and stores app data on our behalf as
our infrastructure provider, under their own security practices.
How we store your data
Your data is stored on our hosting provider's servers for as long as you have an active
account with Attunify. We take reasonable steps to restrict access to it, but as with any online
service, no method of storage or transmission is 100% secure.
Your choices and rights
- Revoke access at any time — you can disconnect Attunify from your Spotify
account whenever you like from Spotify's own
connected apps
settings. This immediately cuts off our access to your Spotify data.
- Request a copy or deletion of your data — see "Delete your account and
data" below.
- Correct inaccurate data — most of what we hold is a direct mirror of your
own Spotify listening activity, so correcting it in Spotify will correct it here too on the
next sync.
Delete your account and data — Attunify
To delete your Attunify account and all associated data, email
contact@attunify.net
from the email address linked to your Spotify account, with "Delete my account" in the subject
line. We'll confirm and action the request within 30 days.
This deletes everything Attunify itself stores about you: your Spotify user ID and tokens,
listening/skip/favourite history, chart and recap history, excluded artists and genre
preferences, feedback you've submitted, and (if you used the bring-your-own-credentials option)
your stored Spotify Client ID/secret. Nothing is kept beyond that 30-day window — there's no
extended retention period, backup archive, or "soft delete" state data lingers in. This does not
touch your actual Spotify account or its data, which Spotify controls directly — see "Revoke
access at any time" above if you also want to disconnect Attunify from Spotify itself.
Children's privacy
Attunify is not directed at children under 13, and Spotify's own account terms set their own
minimum age requirements that apply on top of this.
Changes to this policy
If we make material changes to how we handle your data, we'll update this page and change
the "Last updated" date above.
Contact
Questions about this policy, or a data request? Email
contact@attunify.net.
This policy was drafted to accurately reflect what Attunify's code actually does (checked
against the app's Spotify OAuth scopes, third-party integrations, and data storage) rather
than generic boilerplate — but it isn't formal legal advice. Worth a quick once-over (and
filling in the contact email above) before treating this as final, especially once you're
handling real strangers' data rather than just your own.