Privacy policy

IntonationAI is operated by Intonation Labs Pte. Ltd., 68 Circular Road, #02-01, Singapore 049422. We are the data controller for personal data processed through the Service.

We comply with the Singapore Personal Data Protection Act (PDPA), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

Our Data Protection Officer can be reached at dpo@intonation.ai.

• Account data — email address, display name, and SSO identifiers (e.g. Google or Apple sign-in).
• Audio data — practice recordings streamed to our servers for real-time analysis and coaching feedback.
• AI coaching output — feedback, suggestions, and scores generated by our AI models during your sessions.
• Usage data — features used, session duration, and interaction patterns.
• Billing data — processed and stored by Stripe. We do not store full payment card numbers.
• Local storage — theme preference, microphone preference, and consent choices stored on your device.

• Provide and deliver AI vocal coaching.
• Improve and train our AI models to deliver better coaching feedback.
• Analyse usage patterns to improve the Service.
• Process billing and manage subscriptions.
• Maintain security and prevent fraud.

• Contract — processing necessary to provide the Service you have subscribed to.
• Legitimate interest — improving our AI models and preventing fraud.
• Consent — analytics and marketing communications (opt-in).

We only share personal data with the following third-party processors:

• Stripe — payment processing and billing.
• Google Cloud Platform — infrastructure and hosting.
• Sentry — error monitoring (only if you have consented to analytics).

We do not sell your personal data to any third party.

Our primary operations are based in Singapore. Infrastructure is hosted on Google Cloud Platform regions. Where data is transferred outside your jurisdiction, we ensure appropriate safeguards are in place in compliance with applicable data protection laws.

• Account data — retained while your account is active, plus 30 days after deletion.
• Audio data — processed in real time and not stored beyond the session. We do not retain raw audio recordings.
• Usage data — retained for up to 12 months.

Depending on your jurisdiction, you may have the following rights:

PDPA (Singapore)

Access, correction, and withdrawal of consent for your personal data.

GDPR (EU/EEA)

• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object

CCPA (California)

• Right to know what data is collected
• Right to delete personal information
• Right to opt out of the sale of personal information
• Right to non-discrimination for exercising your rights

To exercise any of these rights, contact our DPO at dpo@intonation.ai.

IntonationAI uses browser local storage rather than traditional cookies. We categorise stored data as follows:

Essential (always active)

• Authentication session token
• CSRF protection token

Functional (optional)

• Theme preference (light/dark)
• Microphone selection preference

Analytics (optional, consent-based)

• Sentry error monitoring — only active if you consent to analytics.

You can manage your preferences at any time using the cookie consent banner or by clearing your browser storage.

The Service is intended for users aged 13 and up. During sign-up we ask every new user to confirm they are 13 or older (see our age-gate flow at /onboarding/age). Users who indicate they are under 13 are shown a polite dismissal screen and the rest of the product is not unlocked for them.

Because sign-in happens through Firebase Authentication, a minimal account record does exist for every user who reaches the age gate. For users who select “under 13” we record only the fact of the bounce — no learning data, no audio, no practice history — and we delete the minimal account record on request.

We do not knowingly collect personal data from anyone under 13 beyond that minimal bounce record. If you believe we have collected data from a child, please contact us at privacy@intonationai.com and we will delete it within 30 days.

We may update this privacy policy from time to time. For material changes, we will notify you via email at the address associated with your account. The “last updated” date at the top of this page reflects the most recent revision.

For privacy-related enquiries, contact our Data Protection Officer at dpo@intonation.ai.

For general support, reach us at support@intonation.ai.