Privacy Policy
How Dhun.io handles your data. Dhun.io is operated by Nyza Creations LLC.
Last updated November 3, 2026
What we collect
Account details: your email address, a hashed password, and optionally your name and profile information. We never store your password itself. If you sign in with Apple or Google we receive the identifier and email address they release to us — with Sign in with Apple that may be a private relay address.
Audio you upload, and audio Dhun produces for you — stems, tuned takes, mixes and masters. This is stored against your account so you can come back to it.
A purchase record when you subscribe, so we know what you are entitled to. We never see or store your card number.
Your conversations with the AI producer, so a session can be resumed and so the producer knows what it has already done in that project.
Basic usage and diagnostic data, including which features were used and errors that occurred.
How we use it, and our legal basis
To provide the service: process your audio, run the AI producer, keep your sessions, and let you sign in. (Performance of our contract with you.)
To operate a subscription: record what you are entitled to, what the free trial has left, and how much of the current month’s allowance has been used. (Performance of our contract.)
To keep the service working and secure: diagnose faults, prevent abuse and fraud. (Our legitimate interests in a functioning, non-abused service.)
To meet legal obligations, such as retaining transaction records for tax. (Legal obligation.)
We do not sell or share your personal information for cross-context behavioural advertising. Dhun does not train its own AI models on your recordings or producer conversations. Third-party processing is described below and is governed by the applicable provider agreements; we do not make an unverified no-training promise on a provider’s behalf.
We do not track you across other companies’ apps or websites, we do not run targeted advertising, and we share nothing with data brokers.
Who we share it with
Most audio processing — mixing, mastering, effects, loudness, analysis and rendering — runs on servers we operate. Some features send data to third parties strictly to perform the task you asked for, and each is bound by its own terms:
Modal — audio submitted for GPU stem separation. Processing may fall back to our servers when the hosted worker is unavailable. Its applicable service and data-processing terms govern its handling of data; this is not a promise that every provider copy is deleted immediately.
Anthropic, directly or through OpenRouter, with Google Gemini and OpenAI as fallbacks — your chat messages, lyrics and relevant project/session context, to generate the producer’s replies. In the mobile app we ask for permission before sending a message to these providers; you can withdraw it in Account → AI data sharing. Declining keeps your projects and files accessible.
SunoAPI.org, operated by MIRA MUSE LLC, and Google (Lyria on Vertex AI) — your generation prompt and any other inputs required by the selected generation operation. SunoAPI.org is the intermediary API Dhun currently calls for its Suno-labelled music tools; this is not a statement that Dhun has a direct official Suno API agreement.
SunoAPI.org — a copy of your recording when you request a voice-to-music, vocal-on-backing, restyling or extension operation that requires it. Dhun asks before each such send. The provider’s documentation describes temporary output availability, with periods varying by endpoint; those download periods do not establish deletion of every input, log or backup. Its current privacy policy and terms apply.
Google (Gemini on Vertex AI) — the audio of a track or a part of it, when the producer listens to it to describe what it hears. Google Cloud’s terms state that it does not use customer data sent to Vertex AI to train its models.
ElevenLabs, with Google Gemini and OpenAI as available fallbacks — the audio or an excerpt when you request transcription. A fallback may process a bounded excerpt rather than the entire recording; the result identifies that limitation when known.
Stripe — your email and payment details, when you subscribe on the web. We never see or store your card number.
Apple and Google — where in-app billing is available, they process the payment and we receive only a purchase receipt.
Google Analytics — optional measurement on public information and product pages after you allow it. We exclude studio conversations, account, profile, authentication and administrator pages, and do not send your audio, prompts, email address or account identifiers.
We may also disclose information where required by law, and we will tell you unless we are legally prevented from doing so.
Where it is stored, transfers, and how long we keep it
Dhun’s application infrastructure is in the United States. Third-party services may process data in other locations under their applicable agreements. International-transfer protections, including standard contractual clauses where included in those agreements, depend on the provider and service. Contact us for current provider and transfer information.
Audio files are kept until you delete them or delete your account. Chat transcripts are kept for the life of the project.
When you request account deletion, your account is marked immediately and permanently removed within 30 days. Signing back in before then cancels the deletion.
Some records may be retained longer where the law requires it, for example transaction records for tax purposes.
Security
Traffic is encrypted in transit with TLS. Passwords are stored only as bcrypt hashes. Web session tokens are httpOnly cookies; the native app uses protected device storage for its sign-in token, and audio is served from paths scoped to your account.
No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant supervisory authority as the law requires.
Cookies and similar technologies
We use a strictly necessary cookie to keep you signed in. We use local storage to remember interface preferences on your device.
Optional analytics loads only after an affirmative choice on public pages. You can change that choice through Cookie preferences in the footer. We honour Global Privacy Control by keeping optional analytics off.
Support and operational access
You can report a saved AI response from the conversation in the app or on the web. A reference to that response and your optional note are sent to the support inbox with your account email. Support correspondence may remain after a project is deleted so we can handle the request; contact us if you want that correspondence removed.
Authorized operators may review account, billing, project, conversation and error records when needed to provide support, investigate faults, prevent abuse or maintain the service. Administrator access uses a separate Nyza sign-in and an explicit operator grant; administrative access is logged.
Saved production history includes instructions, tool outcomes, source references and exported-file measurements so a project can be understood after you return. A technical audio measurement is not a judgment about your identity, health or personal characteristics.
Automated processing
The AI producer decides which audio operations to run based on what you ask it for. This affects your audio, not your rights or access, and completed reversible changes can be undone while their saved sources remain available and no later edit would be overwritten. You can retain exports and delete work you no longer need. Undo does not reverse an external transfer or restore an already consumed generation allowance. We do not make decisions with legal or similarly significant effects about you by automated means.
Your rights
You can delete your account at any time — from inside the app (Account → Delete account) or on the web at https://dhun.io/account/delete. You do not need to email us to do it.
You can request a copy of your data, ask us to correct it, or ask us to delete it sooner, by writing to support@dhun.io. We answer within 30 days.
If you are in the EEA or UK you have rights under the GDPR, including access, rectification, erasure, restriction, portability, objection, and the right to complain to your supervisory authority.
If you are in California you have rights under the CCPA/CPRA, including the right to know, to delete, to correct, and to opt out of sale or sharing — we do neither. We will not discriminate against you for exercising any of these rights.
Who owns what you make
Dhun claims no ownership share in your recordings or output. This does not create rights in source material you do not own or override a third-party generation agreement.
What we cannot do is promise that a copyright exists. You keep the rights you already hold in uploaded recordings. Processing does not clear third-party rights. Audio GENERATED from a text prompt is different: it is subject to the applicable generation-provider agreement, and under United States law material without human authorship may not attract copyright at all.
The full position is set out in the Terms of Service under “Who owns what you make”. Read it before you release generated audio commercially.
Children
Dhun.io is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal data, write to support@dhun.io and we will delete it.
Changes and contact
If we change this policy materially we will say so in the app before the change takes effect.
Questions: support@dhun.io. Privacy and legal notices: legal@dhun.io. Postal: Nyza Creations LLC, 3850 Kitsap Wy, Ste 104 PMB 1247, Bremerton, WA 98312, United States.