Legal
Privacy Policy
What the Tunebay app collects, why, who processes it, how long it is kept, and how to delete it.
Last updated: 14 November 2026
The short version. There is no account: we never ask for your name, email or phone number. Your car photo leaves your phone only when you start a run — a garage shot, a tune, a spin, a stunt or a race. To make it, the photo and what you picked go to our server and on to the AI provider that runs the model. Please use photos of cars without people in them. We show no ads, do not track you across apps, do not sell your data and do not use your content to train AI models. You can delete everything from Profile → Delete my data.
Who we are
This policy covers the Tunebay iOS app and this website. Tunebay is developed and operated by Andrii Myhal (“we”, “us”), who is the controller responsible for the personal data described here. You can reach us at medvedcukkarolina68@gmail.com.
What we collect
A device ID
On first launch the app creates a random identifier and keeps it in your phone’s keychain. It is not your Apple ID, your name or an advertising identifier. It is how our server knows which credits and which runs are yours. Support may ask for it; you can copy it at the bottom of Profile.
Your IP address, once
When the app first registers with our server we record the IP address it came from, to stop automated sign-ups from abusing the service. It is not used for anything else.
Your car photos and runs
When you start a run — a garage shot, a tune, a spin, a stunt or a race — the app sends the car photos it involves (your car, and a rival’s car if you add one for a race) and what you picked: the parts, the stunt, the scene or the track. You do not type any text: Tunebay builds the instruction for the model from your choices. Our server keeps a record of each run — what was asked, its status and the credits it cost — and a copy of the result, so it can still be delivered if your phone was offline when it finished.
Please use photos of cars without people in them. If you add a photo of someone else’s car, make sure you are allowed to use it.
The photo check on your phone
When you pick a photo, the app checks it on your iPhone with Apple’s Vision framework: whether there is a car in it, whether people are visible, and whether the photo is large enough. The check runs on the device and its result is not sent anywhere. It does not identify anyone. A photo with people in it gets a warning but is not blocked.
Purchases
Subscriptions and credit packs are sold and charged by Apple; we never see your card or billing details. We receive the status of your purchases (which plan, when it renews or ends) through Apple and Adapty, and keep a ledger of the credits each purchase granted and each run spent.
Support emails
If you write to us, we receive your email address and whatever you include in the message. We use it only to answer you.
On your phone only
Your Library — the looks, spins, and stunt and race videos you made — is stored on your phone. The app reads your photo library only when you pick a photo, and writes to it only when you tap Save. It does not use the camera. None of this is sent anywhere except the car photos used in a run.
We do not collect your name, contacts, location, advertising identifier, browsing history, or health or financial data, and the app contains no advertising SDKs and does not track you across apps or websites.
Who processes it
We share data only with the services that make the app work, and only what each of them needs:
| Service | What it receives | Why |
|---|---|---|
| kie.ai | The car photos in a run and the instruction built from what you picked — not your device ID | An API platform that runs the AI models |
| The model’s developer Google (Nano Banana), Kuaishou (Kling) and xAI (Grok Imagine) | The same request, passed on by kie.ai | Google’s model makes the images (garage shots, tuned looks, stunt and race scenes); Kuaishou’s makes Spin 360° videos; xAI’s makes stunt and race videos |
| Cloudflare | Everything our server stores | Hosts our server, database and file storage |
| Adapty | Your device ID, your purchase status, and the basic technical details its SDK collects: device model, iOS and app version, language, a vendor identifier and IP address | Confirms subscriptions and purchases so we can grant credits |
| Apple | Your purchases, under your Apple ID | Sells and charges subscriptions and credit packs |
AI providers process your request under their own terms and privacy policies, and may check it against their content rules; a request they refuse is not charged. We do not sell or rent your data to anyone, and we disclose it to authorities only when the law requires it.
Why we use it
- To provide the service you asked for — making your looks and videos, keeping your credits and delivering results (performance of our agreement with you).
- To prevent abuse and fraud — limiting automated sign-ups and protecting the credits system (our legitimate interest in keeping the service working).
- To keep financial records — the ledger of what purchases granted (legal and accounting obligations, and settling refund disputes).
- To answer you — when you contact support.
How long we keep it
| Data | Kept |
|---|---|
| Car photos sent with a run, and the copies of results on our server | 30 days, then deleted automatically |
| Run records (what was asked, status, credits) | Until you delete your data |
| Device record, credit balance, registration IP address | Until you delete your data |
| Ledger entries for purchases (credits granted by a plan or pack) | Kept after deletion as a financial record; they contain only the device ID |
| Your garage and Library on the phone | Until you delete it or the app |
| Support emails | As long as needed to resolve your request |
Your choices and rights
- Delete everything. Profile → Delete my data erases your records, files and balance on our server, and your garage and Library on the phone. Deleting the app alone does not erase what is on our server — use Delete my data first, or email us your device ID.
- Subscriptions are separate. Deleting your data does not cancel a subscription; cancel it in Settings → your name → Subscriptions.
- Access, correct, export, object or restrict. Email us with your device ID and we will answer within 30 days. We may need the device ID to know which data is yours, because we hold no name or email for you.
- Complain. If you are in the UK or the EU you can complain to your data protection authority (in the UK, the ICO).
Children
Tunebay is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has used the app, write to us and we will delete the data.
International transfers
Our providers may process data in the United States and other countries. Where the law requires it, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.
Security
The app talks to our server only over HTTPS, each device authenticates with its own signed token, and the keys to the AI providers live only on our server, never in the app. No system is perfectly secure, but we keep what we store to the minimum the service needs.
Changes
We will update this page when what we collect or how we use it changes, and change the date above. If a change is significant, we will say so in the app.
Contact us
Andrii Myhal, the developer of Tunebay. Questions or requests: medvedcukkarolina68@gmail.com. Please include your device ID from Profile.