Privacy policy

Who we are

Tounes is operated by Nordik App Galaxy, 3352 Rue D'Alès, La Baie, Québec G7B 4P5, Canada (“Tounes”, “we”).

Person in charge of protecting personal information

[Name], [title], privacy@tounes.io. Contact this person for any question or request about your information.

Who this policy covers

People who visit tounes.ca, the people who manage client choirs, and singers invited to use Tounes. Each choir decides whom it invites and what information it enters; Tounes processes that information to provide the service to the choir.

What we collect

• Account: name, email address, profile photo, last sign-in date. Face ID, Touch ID and fingerprint sign-in happen on your device; we receive no biometric data.
• Choir membership: section, voice part, roles, positions and terms, groups, member status and its history, and, if the choir enters them, pronouns, birthday and a short bio.
• Attendance: your replies, the reason picked from a fixed list if you can't come, and the attendance recorded by your leaders.
• Practice: listening and practice sessions, your personal notes on scores (visible only to you).
• Surveys: your answers.
• Dues: amounts owed and instalments recorded by the treasurer. We collect no card or account numbers.
• Assistant: the questions you ask.
• Problem reports: what you report, with the attached screenshot.
• Choir content: scores, recordings, events, articles and documents uploaded by the choir.
• Device: a notification token, to send you reminders.
• Devices and browsers: for each device model or web browser you use Tounes on, the app version, the operating system and its version, the browser and its version (on the web), the device model (in the app), your interface language, the choir you were using and when you last used Tounes there. We keep only the latest record for each device model or browser. Your choir cannot see it.
• tounes.ca: no cookies, no audience analytics. If you write to us, we keep your email.

Why

To provide the service (scores, calendar, attendance, reminders), control access by role, bill the choir, keep the service secure and fix errors, and answer your messages. We use device and browser records only to debug problems and to give you customer support, never for audience analytics, profiling or advertising. We don't sell your information and we don't advertise.

Where your information is kept

Our servers, database, your files and our backups are hosted with OVHcloud in Beauharnois, Québec.

Service providers

We use:

• OVHcloud — hosting and storage (Québec);
• Resend — sending invitations and notices by email ([region]);
• Anthropic — artificial intelligence features (United States);
• Google Firebase Cloud Messaging — notifications on your devices (United States);
• GitHub — tracking the problems you report to us, with the attached screenshot (United States).

When information is communicated outside Québec, we first assess the privacy factors and govern the communication by contract. For the assistant, member names are replaced with anonymous codes before sending and never leave our servers.

Retention

We keep information while the choir uses Tounes. When the subscription ends, it is deleted within the period set in the Terms of service; backups are erased after [30] days.

Security

Encrypted connections, role-based access, strict separation between choirs, daily backups. If a confidentiality incident presents a risk of serious injury, we notify the people affected and Québec's Commission d'accès à l'information.

Your rights

You can ask to access your information, correct it, receive it in a structured format, or withdraw consent. Write to the person in charge above; we reply within 30 days. You can also complain to Québec's Commission d'accès à l'information or the Office of the Privacy Commissioner of Canada.

Minors

For a singer under 14, the choir must obtain consent from a parent or guardian before inviting them.

Changes

We publish any change here and notify client choirs in advance when it's significant.