This Privacy Policy explains how Tonefy AI ("we," "us," or "our"), operated by Ahumuza Fitlife Solutions, collects, uses, stores, and shares your information when you use our mobile application and services. By using Tonefy AI, you agree to the practices described in this policy.
Tonefy AI is a mobile application developed and operated by Ahumuza Fitlife Solutions (a sole proprietorship registered with the Uganda Registration Services Bureau (URSB) under registration no. 80043893223863). Contact us at [email protected]. Our website is at https://tonefy-ai.fitlifesolutions.site.
Tonefy AI is operated from our registered place of business: Muliro Zone, Luwero Central, Luwero Town Council, Luweero District, Uganda. Our services are available globally.
When you connect a social media account (TikTok, YouTube, Facebook, Instagram, Pinterest, LinkedIn), we receive only what that platform grants us via its official API — typically your username or profile name and photo, and permission to publish the videos you create in Tonefy AI to your own account. For TikTok specifically:
We do not access your password, private messages, followers list, analytics, or any data beyond what is required, on any connected platform.
For Facebook we receive the Pages you manage and permission to post to a Page; for Instagram, your Business/Creator account id and username and permission to publish Reels; for Pinterest, your username, boards and permission to create Pins; for LinkedIn, your name and photo and permission to post to your profile. Access tokens for every connected platform are stored on the Tonefy AI backend in access-restricted storage, encrypted at rest, never exposed to the mobile app or sold or transferred to any third party, and deleted immediately when you disconnect the account or delete your Tonefy AI account. YouTube and TikTok are detailed further in Sections 5 and 6.
We do not sell your personal information. We do not use your data to train AI models without your explicit consent.
When you instruct us to post content, we transmit your video and caption to the relevant platform using your authorised credentials. That data is then governed by the platform's own privacy policy.
We use trusted third-party providers for cloud hosting, payment processing, analytics, and AI content generation APIs. They process data solely on our behalf under confidentiality agreements.
We may disclose your information if required by law, court order, or to protect the rights, safety, or property of Tonefy AI, its users, or the public.
If Tonefy AI or Ahumuza Fitlife Solutions is involved in a merger or acquisition, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.
In full compliance with TikTok's Developer Terms and App Review Guidelines, we confirm:
(a) API Usage: We use TikTok for Developers APIs (Login Kit, Content Posting API, Webhooks) solely to provide Tonefy AI's video posting and scheduling features.
(b) Scopes Requested:
user.info.basic — Read your TikTok username, user ID, display name, and avatarvideo.upload — Upload videos to your TikTok account as drafts for posting(c) Data We Access:
(d) Data We Do NOT Access:
(e) Token Storage: TikTok OAuth tokens are stored with AES-256 encryption and deleted immediately when you disconnect your TikTok account.
(f) No Advertising: We do not sell, transfer, or use TikTok user data for advertising purposes.
(g) No Scraping: We do not scrape TikTok or access data beyond the official API scopes you grant.
(h) Draft Posting: Videos are uploaded to TikTok as drafts by default. You may edit them in TikTok before publishing, or enable auto-publish on your schedule.
Tonefy AI uses YouTube API Services to let you publish videos you create in the app directly to your own YouTube channel. This section describes exactly what that involves.
(a) Governing Terms: By connecting a YouTube account you are also agreeing to the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.
(b) API Usage: We use the YouTube Data API v3 solely to upload videos you have created in Tonefy AI to the channel you connect, and to confirm which channel that is. We use it for no other purpose.
(c) Scopes Requested:
youtube.upload — upload videos you create in Tonefy AI to your channel(d) Data We Access:
(e) Data We Do NOT Access:
(f) How We Store It: Your YouTube OAuth tokens and channel identifier are held in access-restricted server-side storage that is encrypted at rest and readable only by the Tonefy AI backend. They are never exposed to the mobile app, never sent to any third party, and never used to access anything other than the upload described above.
(g) How Long We Keep It: Tokens are retained only while your YouTube account is connected. Disconnecting from Profile → Connect Accounts, or deleting your Tonefy AI account, deletes them from our systems immediately. We do not keep a copy after revocation.
(h) How to Revoke Access: You can disconnect YouTube at any time inside Tonefy AI, and you can independently revoke Tonefy AI's access to your Google account at https://security.google.com/settings/security/permissions. Revoking there takes effect immediately and stops any further uploads, including anything you have scheduled.
(i) No Advertising and No Resale: We do not sell or transfer YouTube user data, and we do not use it for advertising, profiling, or training machine-learning models.
(j) No Scraping: We access YouTube only through the official API using the scope you grant. We do not scrape YouTube or collect data by any other means.
We retain your account data for as long as your account is active. Generated video files are held on our servers on a rolling basis: up to 72 hours on the free plan and up to 30 days on a paid plan, after which they are deleted automatically. Records of website payments are kept for 7 years, even after an account is deleted, because tax and accounting law requires us to keep them; they hold no card or mobile money details. You can delete your account and all associated data at any time from Profile → Delete Account in the app, or by emailing [email protected].
We use HTTPS for all data in transit, encrypted storage of credentials and OAuth tokens, and restricted internal access to user data. No method is 100% secure, but we take reasonable precautions.
Tonefy AI is not directed to children under 13 (or under 16 where required by local law). If we become aware a child has provided data without parental consent, we will delete it promptly. Contact us at [email protected].
Depending on your location, you may have the right to access, correct, delete, export, or withdraw consent for your data. Email [email protected] to exercise any right. We respond within 30 days.
Our mobile app does not use browser cookies, and we do not use advertising trackers or third-party usage-analytics SDKs. The only automatic collection is the diagnostics and crash reporting and the first-steps usage described in Section 2.2, which you can turn off at any time in the app under Settings → Privacy → Share diagnostics & crash reports. When it is off, neither is sent.
The app and website may link to third-party sites. We are not responsible for their privacy practices. Please review their policies separately.
Your data may be stored and processed in countries other than your own. We ensure appropriate safeguards are in place for any such transfers.
We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date and, where appropriate, via in-app notification or email.
Email: [email protected]
Website: https://tonefy-ai.fitlifesolutions.site