Attune Privacy Policy

1. Who this policy applies to

This Privacy Policy applies to the Attune mobile application and the Attune website at attuneprayer.com.

Attune is intended for people aged 18 and over.

We do not ask users to provide their date of birth. If we become aware that an account belongs to someone under 18, we may deactivate the account and delete the associated personal information.

Back to top ↑

2. Information we collect

Information you provide

Depending on how you use Attune, we may collect:

• your first name and email address when you create an account;
• your email address if you choose to join a website notification or mailing list;
• account and authentication information;
• information received when you use Sign in with Apple or Google Sign-In;
• responses you provide during onboarding;
• personal notes, journal entries and reflections;
• your note-storage preference, including whether you choose cloud storage or “Keep notes on this device”;
• prayers or other content you save as favourites;
• your journey progress and prayer history;
• reminder times and notification preferences;
• app settings and preferences;
• information you provide when contacting us for support; and
• your subscription and access status.

Apple may also provide us with information relating to your subscription, such as subscription status and transaction identifiers. We do not receive or store your full payment-card or bank-account details.

Information collected automatically

When you use the app, we may collect technical and usage information such as:

• device model and device identifiers;
• IP address;
• login and session information;
• the amount of time spent using the app;
• which parts of Attune are viewed or completed;
• app events and feature usage;
• crash reports and diagnostic information; and
• information required to deliver push notifications.

We do not request access to your device’s precise location.

An IP address may sometimes indicate an approximate geographic area, but Attune does not use device-location permissions to track your location.

We do not collect advertising identifiers for targeted advertising.

Website information

When you visit attuneprayer.com, we may collect information through Google Analytics and standard website technologies, including IP address, browser or device information, pages viewed and general website usage information. If you choose to submit your email address through a website form, for example to be notified about availability on another platform, we collect that email address for the purpose described at the point of collection.

Back to top ↑

3. Spiritual and other sensitive information

Because Attune is a prayer app, some information you choose to provide or some features you use may reveal or suggest information about your religious or spiritual interests, practices or beliefs.

Personal reflections may also contain other sensitive information that you choose to record.

We treat this information with particular care.

Where you choose to provide information about your religious or spiritual beliefs, practices or experiences, we collect and handle that information with your consent and only for the purposes described in this Privacy Policy.

We do not use the content of your private notes or reflections for advertising or marketing.

We do not send the content of your private notes or reflections to analytics platforms.

We do not currently send your personal notes or reflections to AI services or use them to train AI models.

Back to top ↑

4. How we use your information

We use personal information where reasonably necessary to:

• create and manage your Attune account;
• authenticate you when you sign in;
• provide prayers, journeys, notes and other app features;
• save and synchronise your personal content where you choose cloud storage;
• store notes only on your iPhone where you choose “Keep notes on this device”;
• show your journey progress, favourites and prayer history;
• manage free and Premium access;
• provide notifications and reminders you have chosen;
• provide account confirmation and password-reset communications;
• respond to support requests;
• maintain the security and reliability of Attune;
• identify and resolve bugs and technical problems;
• understand how Attune is being used and improve the service;
• comply with applicable legal obligations; and
• resolve disputes or protect the security of Attune and its users.

We do not sell your personal information.

We do not combine your information with data held by third parties to build advertising profiles or commercial consumer profiles.

Back to top ↑

5. Your personal notes and reflections

Your notes and reflections are private account content.

Cloud storage is the default. When cloud storage is used, your notes are stored securely using Google’s Firebase cloud infrastructure so they remain associated with your account and can be accessed when you sign in to Attune on another device.

Firebase encrypts Firestore data while it is stored on its servers and protects data transmitted between your device and its services. Access controls also restrict ordinary users to their own account data.

You can instead choose “Keep notes on this device” in your Profile settings. When this setting is enabled, notes on that iPhone are stored only on that device and are not uploaded to Attune’s cloud. They do not sync to your other devices.

This setting applies separately to each device.

If you move existing notes from cloud storage to device-only storage, Attune initiates deletion of the corresponding copies from its live cloud systems. If that deletion is temporarily interrupted, for example because of a connectivity or technical issue, Attune will retry the deletion when you next open the relevant Settings area and the service is able to complete it.

Some residual copies of previously cloud-stored notes may remain temporarily in secure system backups until those backups expire in accordance with the applicable backup schedule. These backup copies are maintained for security and recovery purposes and are not used as active user records.

Attune does not routinely access, read or review your cloud-stored notes or reflections.

Authorised technical personnel may technically access cloud-stored information, but only where reasonably necessary to maintain or secure Attune, investigate or resolve a technical problem, restore or manage data, or comply with a legal obligation. Access is restricted to personnel who require it for those purposes.

Notes stored only on your device are not held in Attune’s active cloud systems and are not accessible to Attune through those systems.

Your personal notes and reflections are not sent to advertising, marketing, analytics or AI services.

If you regain access to your account after a login or authentication problem, cloud-stored notes may remain available to you because they are associated with your Attune account. Notes stored only on a particular device remain available only on that device.

Back to top ↑

6. Analytics

We use analytics to understand how Attune is being used and to identify areas that can be improved.

We use Amplitude for product analytics within the app.

Analytics may include information about app events, screens or features used, session activity, device information and similar usage information.

We do not send the text of your personal notes or reflections, your email address or your private journal content to Amplitude.

We design analytics events to avoid unnecessarily including sensitive personal information.

Our website uses Google Analytics to understand general website traffic and usage.

Google Analytics may collect information such as IP address, browser and device information, pages visited and interactions with the website.

Back to top ↑

7. Emails

We use Resend to deliver emails relating to Attune.

These may include service communications such as:

• account confirmation;
• password-reset communications; and
• important account or service information.

We may also use an email address you provide through attuneprayer.com to send the notification or mailing-list communication you requested, and may send a newsletter or other marketing communication where you have consented to receive it.

Marketing communications are separate from essential account or service communications.

Every marketing email will provide a way to unsubscribe without needing to log into your Attune account.

If you unsubscribe, we may retain a record of that preference so that we can continue to honour it.

Back to top ↑

8. Push notifications

Attune may send push notifications where you have chosen to receive them.

These may include:

• prayer reminders;
• reminders relating to a journey;
• Today’s Moment notifications; or
• other prayer reminders you have deliberately enabled.

Attune does not currently use push notifications for promotional marketing.

Push notifications are delivered using Firebase and Apple’s notification infrastructure.

You can change or disable notification permissions through Attune or your device settings.

Back to top ↑

9. Service providers

We use trusted service providers to operate Attune.

These include:

We require service providers to handle information only for purposes connected with providing their services to us and subject to their applicable contractual, security and privacy obligations.

Back to top ↑

10. Where information is stored and processed

Attune’s primary Firebase database is hosted in Sydney, Australia.

This applies to information stored in Attune’s cloud systems. Notes that you choose to keep only on your device are stored only on that iPhone and are not held in Attune’s Firebase cloud database.

Some service providers may process technical, analytics, email or other information outside Australia.

Depending on the provider and service configuration, this may include the United States and other countries in which those providers operate.

For example, Amplitude operates data infrastructure in the United States and Europe, while Cloudflare operates a global content-delivery network.

Where applicable privacy law requires us to take steps in relation to overseas processing or disclosure, we will take reasonable steps to do so.

Back to top ↑

11. Cookies and website technologies

The Attune mobile app does not use browser cookies.

It may use device identifiers, secure local storage and similar technologies to maintain your session, remember preferences, store device-only notes, deliver notifications and support app analytics.

The Attune website uses cookies and similar technologies, including technologies used by Google Analytics.

You can control cookies through your browser.

Where applicable law requires consent before particular non-essential cookies or analytics technologies are activated, Attune will provide appropriate consent controls.

Back to top ↑

12. How long we keep information

We keep personal information only for as long as it is reasonably needed for the purposes for which it was collected, to operate Attune, or to meet applicable legal requirements.

In general:

• account information is kept while your account remains active;
• cloud-stored notes and reflections are kept while your account remains active, or until you delete them or move them to device-only storage;
• notes stored only on your device remain on that device until you delete them or otherwise remove the locally stored app data;
• favourites and journey information are kept while your account remains active;
• notification tokens are retained while required to provide notifications;
• analytics and diagnostic information is retained according to our configured retention settings and the applicable provider’s systems;
• email and support records may be retained where reasonably necessary to provide support, maintain records or demonstrate compliance;
• records of marketing consent and unsubscribe requests may be retained where necessary to honour your preferences; and
• financial or transaction records may be retained for the period required by applicable accounting or taxation law.

Where cloud-stored notes are moved to device-only storage or deleted, residual copies may remain temporarily in secure system backups until those backups expire in accordance with the applicable backup schedule.

Australian business records commonly need to be retained for approximately five years, although some records may need to be kept for longer in particular circumstances.

We do not retain personal information simply because it may be useful someday.

Back to top ↑

13. Account deletion

You can delete your Attune account from within the app.

When you delete your account, Attune removes your active account and associated personal content held in its live cloud systems, including cloud-stored notes, reflections and journey information.

Notes kept only on your device are not held in Attune’s live cloud systems.

Where analytics information is linked to an identifiable Attune account or user identifier, we take steps to remove the corresponding identifiable analytics profile where applicable.

Some deleted cloud information may remain temporarily in system backups until those backups expire in accordance with the relevant backup schedule.

Backups are maintained for security and recovery purposes and are not used as active user records.

Limited transaction, security or administrative records may also be retained where required by law or reasonably necessary to establish or respond to legal claims.

Deleting your Attune account does not by itself cancel a subscription managed through Apple. Subscription cancellation is managed through your Apple account.

Back to top ↑

14. Security

We take reasonable measures to protect personal information from loss, misuse, interference, unauthorised access, modification and disclosure.

For information stored in Attune’s cloud systems, these measures include:

• encryption of data in transit;
• server-side encryption of Firebase data at rest;
• authentication and account-access controls;
• Firestore security rules restricting users to their own data;
• restrictions on administrative access;
• secure infrastructure and service providers; and
• measures designed to monitor and respond to technical problems.

If you choose “Keep notes on this device”, those notes are stored only on that iPhone rather than in Attune’s cloud. Their security also depends on the security of your device, including the protections provided by iOS and any passcode, Face ID or other security features you choose to use.

No online or device-based storage system can guarantee absolute security.

If you believe your Attune account or personal information may have been compromised, contact us at support@attuneprayer.com.

Back to top ↑

15. Accessing or correcting your information

You can view and manage much of your personal information directly within Attune.

You can also contact us at support@attuneprayer.com if you:

• believe personal information we hold about you is inaccurate;
• would like information about personal data associated with your account;
• have a privacy question; or
• wish to exercise a privacy right available to you under applicable law.

Some information may need to be retained despite a request for deletion where required by law.

Attune does not currently provide a general automated data-export feature.

Back to top ↑

16. Privacy complaints

If you have a concern about how we have handled your personal information, please contact:

support@attuneprayer.com

Please provide enough information for us to understand and investigate your concern.

We will respond within a reasonable period.

Depending on the privacy laws that apply to you and to Attune, you may also have the right to raise your complaint with an appropriate privacy or data-protection regulator.

Where the Australian Privacy Act applies, this may include the Office of the Australian Information Commissioner (OAIC).

Back to top ↑

17. Children

Attune is intended for adults aged 18 and over.

We do not knowingly seek to collect personal information from people under 18.

If we learn that an account belongs to someone under 18, we may close the account and take reasonable steps to delete the associated information.

If you believe someone under 18 is using Attune, contact us at support@attuneprayer.com.

Back to top ↑

18. Changes to this policy

We may update this Privacy Policy as Attune changes or as our privacy practices or legal obligations change.

The current version will be available through Attune or attuneprayer.com.

If we make a material change affecting how we handle personal information, we will take reasonable steps to bring that change to users’ attention, for example through the app or by email.

The effective date at the top of this policy shows when it was last materially updated.

Back to top ↑

19. Contact

Attune is operated by:

Daniel Serratore trading as Depth Lab
ABN 80 737 647 863

Privacy and support enquiries:

support@attuneprayer.com

Back to top ↑