Privacy Policy

No account required to use Tonus. No servers. No analytics. No tracking cookies. The AI coach runs on your device.

Tonus does not send your activity, sleep, heart rate, or your conversations with the coach to any server. No ad tracking. No third-party crash reports.

With your explicit permission, Tonus reads your heart rate, HRV, sleep, workouts, activity, and energy expenditure. Tonus may write workouts and sleep summaries you create through the app. Everything stays in Apple Health, on your iPhone and your iCloud (Apple-encrypted).

The model that answers your questions runs 100% on your iPhone. Your messages with the coach are never sent to any server — not to Anthropic, not to OpenAI, not to anyone.

Data flows between your iPhone and Apple Watch via Apple's Watch Connectivity framework. No intermediary server.

If you choose to enable workout sharing, you create an account via Sign in with Apple. We then store, with our provider Supabase (EU): your Apple-relayed email (often anonymised as @privaterelay.appleid.com), the posts you explicitly choose to share, and your reactions to other users' posts. Nothing else. You can delete your account and all associated data at any time from Settings.

Subscriptions go through Apple's App Store. RevenueCat validates purchases and receives an anonymous identifier tied to your transaction. No health data is transmitted.

Access, rectification, deletion, portability (GDPR). Write to hello@tonusapp.io — response within 30 days.

Tonus is not intended for children under 13 (16 in the European Union). If you're younger, ask a parent for permission.

For any material change, you'll be notified in the app. The version in force is always the one shown here.

Any question about this policy: hello@tonusapp.io.