Privacy Policy

Account details: your email address, a hashed password, and optionally your name and profile information. We never store your password itself. If you sign in with Apple or Google we receive the identifier and email address they release to us — with Sign in with Apple that may be a private relay address.

Audio you upload, and audio Dhun produces for you — stems, tuned takes, mixes and masters. This is stored against your account so you can come back to it.

A purchase record when you subscribe or buy credits, and a ledger of your credits — what was added, what each piece of work cost and what was given back — so we know what you are entitled to. We never see or store your card number.

Your conversations with the AI producer, so a session can be resumed and so the producer knows what it has already done in that project.

Basic usage and diagnostic data, including which features were used and errors that occurred.

When you create an account: the website or campaign that referred you, the page you first landed on and the country your connection came from, so we can see where Dhun is found. This is kept with your account, uses no cookie, and is not shared.

To provide the service: process your audio, run the AI producer, keep your sessions, and let you sign in. (Performance of our contract with you.)

To operate your plan: record what you are entitled to, your credits and what each piece of work cost in them, and what the free plan has left. (Performance of our contract.)

To email you. Service emails — receipts, password resets, security notices and notices about your plan or its prices — are part of running your account and do not depend on any choice below. The weekly digest and product news and offers are separate and optional: each is off until you turn it on, turning one on needs you to confirm you are 18 or older, every one of those emails carries an unsubscribe link, and you can change your choice at any time in Account → Emails. When you choose, we record what you chose, where you chose it, the version of the wording you saw, the time, the country your connection came from and your browser’s user agent, so we can show what you agreed to. (Your consent, which you can withdraw at any time.)

To keep the service working and secure: diagnose faults, prevent abuse and fraud. (Our legitimate interests in a functioning, non-abused service.)

To meet legal obligations, such as retaining transaction records for tax. (Legal obligation.)

We do not sell or share your personal information for cross-context behavioural advertising. Dhun does not train its own AI models on your recordings or producer conversations. Third-party processing is described below and is governed by the applicable provider agreements; we do not make an unverified no-training promise on a provider’s behalf.

We do not track you across other companies’ apps or websites, we do not run targeted advertising, and we share nothing with data brokers.

Most audio processing — mixing, mastering, effects, loudness, analysis and rendering — runs on servers we operate. Some features send data to third parties strictly to perform the task you asked for, and each is bound by its own terms:

Modal — audio submitted for GPU stem separation. Processing may fall back to our servers when the hosted worker is unavailable. Its applicable service and data-processing terms govern its handling of data; this is not a promise that every provider copy is deleted immediately.

Anthropic, directly or through OpenRouter, with Google Gemini and OpenAI as fallbacks — your chat messages, lyrics and relevant project/session context, to generate the producer’s replies. In the mobile app we ask for permission before sending a message to these providers; you can withdraw it in Account → AI data sharing. Declining keeps your projects and files accessible.

SunoAPI.org, operated by MIRA MUSE LLC, and Google (Lyria on Vertex AI) — your generation prompt and any other inputs required by the selected generation operation. SunoAPI.org is the intermediary API Dhun currently calls for its Suno-labelled music tools; this is not a statement that Dhun has a direct official Suno API agreement.

SunoAPI.org — a copy of your recording when you request a voice-to-music, vocal-on-backing, restyling, extension or section-redo operation that requires it. Dhun asks before sending, as often as you choose on the permission card or in Account: every time, once per project, or not again. The provider’s documentation describes temporary output availability, with periods varying by endpoint; those download periods do not establish deletion of every input, log or backup. Its current privacy policy and terms apply.

Google (Gemini on Vertex AI) — the audio of a track or a part of it, when the producer listens to it to describe what it hears. Google Cloud’s terms state that it does not use customer data sent to Vertex AI to train its models.

ElevenLabs, with Google Gemini and OpenAI as available fallbacks — the audio or an excerpt when you request transcription. A fallback may process a bounded excerpt rather than the entire recording; the result identifies that limitation when known.

Cloudflare and Google Cloud — Dhun’s hosting and storage providers. Website traffic passes through Cloudflare. Your audio files are stored in Cloudflare R2 with a second copy in Google Cloud Storage, so your work is not tied to one server. Deleting a file or your account removes both copies, although Google Cloud can keep a deleted copy recoverable for up to seven days.

Stripe and Link — your email, name, billing address and payment details when you buy on the web. Link sells web purchases as merchant of record under its own terms and privacy policy. We never see or store your card number.

Apple and Google — where in-app billing is available, they process the payment and we receive only a purchase receipt.

Nyza Mail, our own email service, which sends through Amazon Web Services (Simple Email Service) — your email address and the message, to deliver service emails and, if you turned them on, the digest and product emails.

Google Analytics — optional measurement on public information and product pages after you allow it. We exclude studio conversations, account, profile, authentication and administrator pages, and do not send your audio, prompts, email address or account identifiers.

We may also disclose information where required by law, and we will tell you unless we are legally prevented from doing so.

Dhun’s application infrastructure is in the United States. Third-party services may process data in other locations under their applicable agreements. International-transfer protections, including standard contractual clauses where included in those agreements, depend on the provider and service. Contact us for current provider and transfer information.

Audio files are kept until you delete them or delete your account. Conversation transcripts remain until you permanently delete the conversation or delete your account. Deleting a project archives its conversations and removes them from the active list; it does not delete their transcripts. You can delete archived conversations separately.

When you request account deletion, your account is marked immediately and permanently removed within 30 days. Signing back in before then cancels the deletion.

Some records may be retained longer where the law requires it, for example transaction records for tax purposes.

Traffic is encrypted in transit with TLS. Passwords are stored only as bcrypt hashes. Web session tokens are httpOnly cookies; the native app uses protected device storage for its sign-in token, and audio is served from paths scoped to your account.

No system is perfectly secure. If a breach affects your personal data we will notify you and the relevant supervisory authority as the law requires.

We use a strictly necessary cookie to keep you signed in. We use local storage to remember interface preferences on your device.

Optional analytics loads only after an affirmative choice on public pages. You can change that choice through Cookie preferences in the footer. We honour Global Privacy Control by keeping optional analytics off.

You can report a saved AI response from the conversation in the app or on the web. A reference to that response and your optional note are sent to the support inbox with your account email. Support correspondence may remain after a project is deleted so we can handle the request; contact us if you want that correspondence removed.

Authorized operators may review account, billing, project, conversation and error records when needed to provide support, investigate faults, prevent abuse or maintain the service. Administrator access uses a separate Nyza sign-in and an explicit operator grant; administrative access is logged.

Saved production history includes instructions, tool outcomes, source references and exported-file measurements so a project can be understood after you return. A technical audio measurement is not a judgment about your identity, health or personal characteristics.

The AI producer decides which audio operations to run based on what you ask it for. This affects your audio, not your rights or access, and completed reversible changes can be undone while their saved sources remain available and no later edit would be overwritten. You can retain exports and delete work you no longer need. Undo does not reverse an external transfer or restore an already consumed generation allowance. Apart from the location check below, we do not make decisions with legal or similarly significant effects about you by automated means.

We check the country your connection comes from (network location, never your device’s GPS) before new AI work or a purchase. If an account is used from a territory under a comprehensive United States embargo, we record that on the account and stop new AI work and purchases for it, wherever it is used afterwards. Signing in, exporting saved work, managing a subscription and deleting the account stay available. If you think this is a mistake, write to support@dhun.io and a person will review it. (Legal obligation.)

You can delete your account at any time — from inside the app (Account → Delete account) or on the web at https://dhun.io/account/delete. You do not need to email us to do it.

You can request a copy of your data, ask us to correct it, or ask us to delete it sooner, by writing to support@dhun.io. We answer within 30 days.

If you are in the EEA or UK you have rights under the GDPR, including access, rectification, erasure, restriction, portability, objection, and the right to complain to your supervisory authority.

If you are in California you have rights under the CCPA/CPRA, including the right to know, to delete, to correct, and to opt out of sale or sharing — we do neither. We will not discriminate against you for exercising any of these rights.

Dhun claims no ownership share in your recordings or output. This does not create rights in source material you do not own or override a third-party generation agreement.

What we cannot do is promise that a copyright exists. You keep the rights you already hold in uploaded recordings. Processing does not clear third-party rights. Audio GENERATED from a text prompt is different: it is subject to the applicable generation-provider agreement, and under United States law material without human authorship may not attract copyright at all.

The full position is set out in the Terms of Service under “Who owns what you make”. Read it before you release generated audio commercially.

Dhun.io is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has given us personal data, write to support@dhun.io and we will delete it.

If we change this policy materially we will say so in the app before the change takes effect.

Questions: support@dhun.io. Privacy and legal notices: legal@dhun.io. Postal: Nyza Creations LLC, 3850 Kitsap Wy, Ste 104 PMB 1247, Bremerton, WA 98312, United States.