Choontune (Pty) Ltd ("Choontune", "we", "us", or "our") is committed to protecting your personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) and other applicable South African privacy legislation.
This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights regarding your personal information.
1. Who We Are
Responsible Party: Choontune (Pty) Ltd
Address: Johannesburg, Gauteng, South Africa
Email: support@choontune.co.za
Website: https://choontune.co.za
2. Information We Collect
Account information:
- Mobile phone number (used for authentication via OTP)
- Display name (optional, set by you)
- Profile photo (optional, uploaded by you)
Billing information (via Paystack):
- Subscription tier and billing date preference
- Paystack customer code and subscription code (references only — card details are never stored by Choontune)
- Synthetic email address (derived from your phone number, used for Paystack integration only)
Usage data:
- Tracks generated, including prompts, genre selections, and generation parameters
- Monthly track usage and remaining credits
- IP address and browser/device type (for security and fraud prevention)
3. How We Use Your Information
- Authentication: To verify your identity via OTP and maintain your session.
- Service delivery: To generate tracks, manage your subscription, and display your usage statistics.
- Billing: To process subscription payments and manage recurring billing via Paystack.
- Communication: To send important service updates, billing notifications, and support responses via SMS or email.
- Platform improvement: Aggregated, anonymised usage data may be used to improve our AI models and platform features.
- Legal compliance: To comply with applicable South African laws and regulations.
4. Legal Basis for Processing
Under POPIA, we process your personal information on the following lawful grounds:
- Contract: To fulfil our subscription agreement with you.
- Legitimate interest: To operate and improve the Service, and to prevent fraud and abuse.
- Legal obligation: To comply with applicable South African laws.
- Consent: Where you have given explicit consent (e.g., marketing communications, where applicable).
5. Data Storage and Security
Your personal information is stored securely on Supabase, a PostgreSQL-based database platform. We implement industry-standard security measures, including:
- Encryption in transit (TLS/HTTPS)
- Encryption at rest for sensitive data
- Role-based access controls limiting who can access your data
- HMAC-SHA512 verification for payment webhooks
Despite these measures, no system is completely secure. If you suspect your account has been compromised, contact us immediately at support@choontune.co.za.
6. Sharing of Information
We do not sell your personal information. We share your information only with:
- Paystack: Our payment processor. Paystack receives your email (synthetic), subscription details, and transaction metadata to process payments. Paystack is PCI-DSS compliant. See Paystack's Privacy Policy.
- Africa's Talking: Our SMS gateway used to send OTP verification codes. They receive your phone number for message delivery only.
- Legal authorities: Where required by law, court order, or regulatory requirement.
7. Data Retention
We retain your personal information for as long as your account is active, or as long as necessary to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, or enforce our agreements. Upon account deletion request, we will delete or anonymise your personal information within 30 days, except where we are required to retain it by law.
8. Your Rights Under POPIA
Under POPIA, you have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete personal information
- Request deletion of your personal information (subject to legal retention requirements)
- Object to the processing of your personal information
- Lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated
To exercise any of these rights, email us at support@choontune.co.za with the subject line "POPIA Request".
Information Regulator: www.justice.gov.za/inforeg/ · inforeg@justice.gov.za
9. Cookies
Choontune uses session cookies strictly necessary for authentication and maintaining your logged-in state. We do not use third-party tracking or advertising cookies. By using the Service, you consent to this use.
10. Children's Privacy
The Service is not directed at persons under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notification. Your continued use of the Service after the changes take effect constitutes acceptance of the revised Policy.
12. Contact Us
For any privacy-related questions or requests:
Choontune (Pty) Ltd
Email: support@choontune.co.za
Subject: "Privacy Query" or "POPIA Request"