Privacy policy

Who we are

Tounes is operated by Nordik App Galaxy, [address], Québec, Canada (“Tounes”, “we”).

Person in charge of protecting personal information

[Name], [title], [email]. Contact this person for any question or request about your information.

Who this policy covers

People who visit tounes.io, the people who manage client choirs, and singers invited to use Tounes. Each choir decides whom it invites and what information it enters; Tounes processes that information to provide the service to the choir.

What we collect

• Account: name, email address, last sign-in date.
• Choir membership: section, voice part, roles, groups, member status, and, if the choir enters them, pronouns, birthday and a short bio.
• Activity: attendance replies, listening and practice sessions in the app, questions asked to the assistant.
• Choir content: scores, recordings, events and announcements uploaded by the choir.
• Device: a notification token, to send you reminders.
• tounes.io: no cookies, no audience analytics. If you write to us, we keep your email.

Why

To provide the service (scores, calendar, attendance, reminders), control access by role, bill the choir, keep the service secure and fix errors, and answer your messages. We don't sell your information and we don't advertise.

Where your information is kept

Our servers, database, your files and our backups are hosted with OVHcloud in Beauharnois, Québec.

Service providers

We use:

• OVHcloud — hosting and storage (Québec);
• [email delivery provider] — invitations and notices ([region]);
• [error monitoring provider] — diagnosing app errors ([region]);
• [AI provider] — artificial intelligence features ([region]);
• [payment provider] — billing choirs ([region]).

When information is communicated outside Québec, we first assess the privacy factors and govern the communication by contract. For the assistant, member names are replaced with anonymous codes before sending and never leave our servers.

Retention

We keep information while the choir uses Tounes. When the subscription ends, it is deleted within the period set in the Terms of service; backups are erased after [30] days.

Security

Encrypted connections, role-based access, strict separation between choirs, daily backups. If a confidentiality incident presents a risk of serious injury, we notify the people affected and Québec's Commission d'accès à l'information.

Your rights

You can ask to access your information, correct it, receive it in a structured format, or withdraw consent. Write to the person in charge above; we reply within 30 days. You can also complain to Québec's Commission d'accès à l'information or the Office of the Privacy Commissioner of Canada.

Minors

For a singer under 14, the choir must obtain consent from a parent or guardian before inviting them.

Changes

We publish any change here and notify client choirs in advance when it's significant.