Privacy Policy
Last updated: March 17, 2026
The short version: Tunova reads your Spotify listening data to generate playlists. We don't store your personal data, don't sell anything, and don't share your information with third parties. Your music taste stays yours.
Who we are
Tunova is a music discovery service that connects to your Spotify account to generate personalized playlists based on your listening patterns. Tunova is not affiliated with Spotify AB.
Questions? Contact us at hello@tunova.dev.
What data we access
When you connect your Spotify account, Tunova requests access to the following through Spotify's official API:
- Your top artists (short-term, medium-term, and long-term)
- Your top tracks (short-term)
- Your recently played tracks (up to 50)
- Your saved tracks library (up to 50)
- Ability to create and modify playlists — used only when you click "Save to Spotify"
How we use your data
Your Spotify data is used exclusively to generate your personalized playlist in real-time. We analyze your listening patterns to identify your current musical obsessions, discover candidate tracks, and sequence a playlist tailored to your taste. We do not build long-term profiles or track your behavior beyond a single session.
What data we store
We store a cache of generic music catalog data (artist names, track names, Spotify track IDs) to speed up playlist generation. This contains no personal information.
We do not store your Spotify access token, name, email, Spotify username, or any personally identifiable information. Your token is held only in your browser's session storage and is never logged or persisted on our servers.
Feedback and preferences
Track feedback (like/dislike) is stored locally in your browser's localStorage only. It is never sent to our servers and is not associated with your identity. You can clear it anytime by clearing your browser's local storage.
Third-party services
- Spotify API — to access your listening data and create playlists. Subject to Spotify's Privacy Policy.
- Anthropic Claude API — for playlist reasoning. We send anonymized music data (artist names, genre tags) only. No personal information is included.
- Last.fm API — to discover candidate tracks. We send artist names only. Subject to Last.fm's Privacy Policy.
- Vercel — hosts our frontend. Subject to Vercel's Privacy Policy.
- Railway — hosts our backend. Subject to Railway's Privacy Policy.
Revoking access
You can revoke Tunova's access to your Spotify account at any time from your Spotify account settings under "Apps." Since we store no personal data, there is nothing else to delete.
Cookies
Tunova does not use cookies. We use browser sessionStorage to temporarily hold your Spotify access token during your visit. This is automatically cleared when you close your browser tab.
Children's privacy
Tunova is not directed at children under 13 and we do not knowingly collect data from children.
Changes to this policy
We may update this policy from time to time. Continued use of Tunova after changes constitutes acceptance of the updated policy.
Contact
Questions? Email us at hello@tunova.dev.