Privacy Policy

Account details: your email address, a hashed password, and optionally your name and profile information. We never store your password itself. If you sign in with Apple or Google we receive the identifier and email address they release to us — with Sign in with Apple that may be a private relay address.

Audio you upload, and audio Dhun produces for you — stems, tuned takes, mixes and masters. This is stored against your account so you can come back to it.

A purchase record when you subscribe, so we know what you are entitled to. We never see or store your card number.

Your conversations with the AI producer, so a session can be resumed and so the producer knows what it has already done in that project.

Basic usage and diagnostic data, including which features were used and errors that occurred.

To provide the service: process your audio, run the AI producer, keep your sessions, and let you sign in. (Performance of our contract with you.)

To operate a subscription: record what you are entitled to, what the free trial has left, and how much of the current month’s allowance has been used. (Performance of our contract.)

To keep the service working and secure: diagnose faults, prevent abuse and fraud. (Our legitimate interests in a functioning, non-abused service.)

To meet legal obligations, such as retaining transaction records for tax. (Legal obligation.)

We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use your music or your conversations to train AI models — ours or anyone else’s.

We do not track you across other companies’ apps or websites, we do not run targeted advertising, and we share nothing with data brokers.

Audio processing runs on servers we operate. Some features send data to third parties strictly to perform the task you asked for, and each is bound by its own terms:

Anthropic, via OpenRouter — your chat messages and a summary of your session, to generate the producer’s replies.

Suno and Google (Lyria on Vertex AI) — your text prompt, when you ask for a song to be generated.

ElevenLabs — the audio of a track, when you ask for it to be transcribed.

Stripe — your email and payment details, when you subscribe on the web. We never see or store your card number.

Apple and Google — when you subscribe inside the iOS or Android app, they process the payment and we receive only a purchase receipt.

Google Analytics — aggregate usage measurement on our website. We do not send it your audio, your prompts, or your account identifiers.

We may also disclose information where required by law, and we will tell you unless we are legally prevented from doing so.

Your data is stored on servers we operate in the United States and Europe. If you are in the EEA or the UK, transferring your data to the United States relies on the European Commission’s Standard Contractual Clauses (and the UK Addendum) with our processors.

Audio files are kept until you delete them or delete your account. Chat transcripts are kept for the life of the project.

When you request account deletion, your account is marked immediately and permanently removed within 30 days. Signing back in before then cancels the deletion.

Some records may be retained longer where the law requires it, for example transaction records for tax purposes.

Traffic is encrypted in transit with TLS. Passwords are stored only as bcrypt hashes. Session tokens are httpOnly cookies, and audio is served from paths scoped to your account.

No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant supervisory authority as the law requires.

We use a strictly necessary cookie to keep you signed in. We use local storage to remember interface preferences on your device.

Google Analytics sets measurement cookies on our marketing pages. We honour Global Privacy Control signals where your browser sends one.

The AI producer decides which audio operations to run based on what you ask it for. This affects your audio, not your rights or access, and you can always undo, delete or re-run any result. We do not make decisions with legal or similarly significant effects about you by automated means.

You can delete your account at any time — from inside the app (Account → Delete account) or on the web at https://dhun.io/account/delete. You do not need to email us to do it.

You can request a copy of your data, ask us to correct it, or ask us to delete it sooner, by writing to support@dhun.io. We answer within 30 days.

If you are in the EEA or UK you have rights under the GDPR, including access, rectification, erasure, restriction, portability, objection, and the right to complain to your supervisory authority.

If you are in California you have rights under the CCPA/CPRA, including the right to know, to delete, to correct, and to opt out of sale or sharing — we do neither. We will not discriminate against you for exercising any of these rights.

We claim no ownership of anything you upload or anything Dhun produces for you. That is our position and it does not change.

What we cannot do is promise that a copyright exists. Audio you record or upload is yours, and processing it here — stems, tuning, mixing, mastering — does not change that. Audio GENERATED from a text prompt is different: it is governed by the terms of the model that produced it (Suno or Google), and under United States law material without human authorship may not attract copyright at all.

The full position is set out in the Terms of Service under “Who owns what you make”. Read it before you release generated audio commercially.

Dhun.io is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal data, write to support@dhun.io and we will delete it.

If we change this policy materially we will say so in the app before the change takes effect.

Questions: support@dhun.io. Privacy and legal notices: legal@dhun.io. Postal: Nyza Creations LLC, 3850 Kitsap Wy, Ste 104 PMB 1247, Bremerton, WA 98312, United States.