Privacy Policy

Last updated: June 5, 2026

1. Introduction

Karunattu ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Karunattu (the "App") and related web services at karunattu.com (collectively, the "Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: If you create an account, we collect your email address, password (bcrypt-hashed, never stored in plain text), and display name.
• Profile Data: Your preferred Sa (tonic) frequency, voice temperament, default instrument, and practice preferences.
• Practice Data: Practice session timestamps, raga selections, tala preferences, pitch accuracy histograms, journal entries, and phrase snapshots.

2.2 Microphone Access

Karunattu requests access to your device's microphone only when you tap a feature that needs it (Tuner, Voice Coach, Doṣa Coach, Rāga ID, Practice Recording, Sangam duet). We never request mic access at app launch.

• Real-time pitch detection during practice sessions
• Rāga identification from live audio
• Voice analysis and feedback in Voice Coach (29 gāyaka-doṣas)
• Overdub recording in the Compose Studio
• Self-review recording and playback
• Pitch + tāḷa event exchange in Sangam (peer-to-peer, no audio)

Audio data is processed locally on your device in real time and is never uploaded to our servers. Practice recordings you choose to save are stored only in the app sandbox. You can delete any recording at any time from within the app.

2.3 Automatically Collected Information

• Usage Analytics: None. We do not ship a third-party analytics SDK (no Firebase, Amplitude, Mixpanel, Sentry, Crashlytics, or PostHog).
• Device Information: None beyond what your device sends to Apple as part of the App Store delivery. We do not fingerprint your device.
• Advertising Identifier (IDFA): We do not request IDFA and we do not track you across other apps.

3. How We Use Your Information

We use the information we collect only to provide and improve the Service:

• Maintain your account and authenticate sign-in
• Track your practice progress, mastery, and streak history
• Personalize your learning experience (e.g. time-of-day raga suggestions)
• Send practice reminders (only if you enable them in Settings)
• Process subscription payments via Apple's StoreKit (we never see your card details)
• Respond to support requests you submit

We do not sell, share, or aggregate your data with any third party for advertising or measurement.

4. Subscriptions and Payments

Karunattu offers three tiers: Free (Śiṣya), Plus (Sādhaka), and Pro (Kalākar). Subscription payments are processed entirely by Apple through the App Store via StoreKit 2. We do not collect or store your payment card details. Apple's privacy policy governs payment processing. To manage or cancel your subscription, open Settings → Apple ID → Subscriptions on your iOS device.

5. Data Storage and Security

• Free-tier practice data is stored locally on your device only and never leaves it.
• Account-bound data (profile, practice sessions, journal entries, phrase snapshots) is stored in our Postgres database at api.karunattu.app, accessible only to you via authenticated requests.
• Authentication tokens are stored in the iOS Keychain, never in plain text.
• All network requests use TLS 1.3.

6. Account Deletion

You can delete your account at any time. The in-app path is Settings → Account → Delete account. The flow uses a two-step gate (confirmation alert + type-to-confirm "DELETE") and does not require contacting support. On confirm, the iOS app calls DELETE /auth/me on our backend, which runs a single transaction that removes all your practice sessions, journal entries, phrase snapshots, mastery records, streak history, teacher relations, profile, and account. The deletion is permanent and immediate — there is no soft-delete grace period.

Your Apple-side subscription is independent of your Karunattu account. Deleting your Karunattu account does not cancel your Apple subscription; you must cancel it separately in Settings → Apple ID → Subscriptions.

7. Third-Party Services

We use the following third-party services:

• Apple StoreKit 2: For in-app purchases and subscriptions. Subject to Apple's Privacy Policy.
• Apple Push Notifications: For practice reminders (only if you grant permission).

We do not integrate with social media tracking pixels, advertising networks, data brokers, or any service that sells user data.

8. Data Retention

• Local data persists on your device until you delete it or uninstall the app.
• Cloud-synced account data is retained as long as your account is active.
• When you delete your account, all associated data is permanently removed immediately (no 30-day grace period).

9. Children's Privacy

Karunattu is rated 4+ and contains no objectionable content. We do not knowingly collect personal information from children under 13. The app does not require account creation for basic features. All practice data for child users is stored only on the device. Parents can review and delete all data by uninstalling the app or using the account-deletion flow above. We comply with the Children's Online Privacy Protection Act (COPPA).

If you believe a child has provided personal information to us, please contact us at privacy@karunattu.com.

10. Your Rights

• Access: You can view all your data within the app.
• Export: You can export your practice data from Settings.
• Delete: You can delete your account from Settings → Account → Delete Account.
• Revoke permissions: Remove microphone, local network, notifications, and other permissions in iOS Settings → Privacy.

To exercise any of these rights, contact us at privacy@karunattu.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will also surface an in-app notice on next launch.

12. Contact Us

If you have questions about this Privacy Policy or our data practices:

• Email: privacy@karunattu.com
• Website: karunattu.com
• App: Karunattu (App Store ID — TBD at submission)