Last updated: 11 August 2026. Policy version 2026-08-11.
Attune is operated by Modernized Mobile. You can reach us at support@attunefamilies.com, or in the app under Settings → Support.
This policy covers the Attune mobile app and the Attune website.
Before Attune asks anything about hearing loss, devices, genetic testing, or your child's age, it shows a consent screen that explains what we would collect and why, and asks you to agree.
You give us directly
| Data | Why |
|---|---|
| Email address | To create and secure your account |
| Display name | Shown on your posts, comments, and messages |
| Avatar photo (optional) | Shown on your profile |
| Relationship to hearing loss (parent, self, family, professional) | To tailor the experience |
| Gene names, genetic testing status, hearing severity, devices, journey stage, child age band (all optional, all behind the health consent step) | To match you with similar families and relevant clinical trials |
| Country (optional) | To surface geographically relevant trials |
| Short bio (optional) | Shown on your profile |
| Journey moments you write (a title, a date, optional notes) | Your private timeline |
| Genetic testing help requests (anything you choose to add: age band, country, notes) | So our team can respond, through your account email address, and connect you with a partner lab |
| Posts, comments, likes, saved posts, direct messages, event RSVPs | These are the app's core features |
| Reports you file about other members, and blocks you set | To operate moderation and keep you safe |
We generate automatically
| Data | Why |
|---|---|
| A user ID | To associate your content with your account |
| Product interaction events (screens viewed, features used, consent changes) | First party analytics, stored in our own database, to understand what to improve |
| Timestamps on your content | Ordering and display |
| A device push token, if you turn on notifications | To deliver alerts you asked for |
We work out from what you told us
Some things in the app are inferred rather than typed. These inferences are health data too, so we say plainly what they are:
| Inference | How it is made |
|---|---|
| Which stops on your journey trail you have reached | From your profile answers, for example journey stage and testing status |
| Testing status moving to "in progress" | Asking us for help getting genetic testing sets it |
| Testing status moving to "tested" | Answering "yes, results are in" on the journey screen sets it |
| Clinical trial match scores | Comparing your gene, child age band, and country against the public trial listings |
| Similar family suggestions | Comparing your gene and journey stage with other members' |
Every inference above is correctable. You can edit or undo any of them in the app, and none of them is a diagnosis or a medical opinion.
We do not collect your precise location, your contacts, advertising identifiers, browsing history outside the app, biometric data, or any raw genetic sequence data.
This section is written for the Washington My Health My Data Act, and it also serves residents of Nevada and Connecticut. It sets out, in one place, what consumer health data Attune handles.
From you. Every field is entered by you in the app, or inferred from an answer you gave. We do not buy health data, and we do not receive it from data brokers, clinics, labs, insurers, or any other outside source.
We do not use it for advertising, profiling for advertising, credit or insurance decisions, or any automated decision that has a legal effect on you.
| Who | What they get | Why |
|---|---|---|
| Other Attune members | Gene names, testing status, severity, devices, journey stage, child age band, country, and bio, through the community profile view, because that is what family matching is | Only for members who completed the health questions. Your child's name is not collected at all |
| Supabase | Everything, as our hosting, database, authentication, storage, and realtime provider in the United States | They process it on our instructions and do not use it for their own purposes |
| Sentry | Crash and error reports, if crash reporting is enabled in a build | Configured not to send personal information. We do not send health fields to it |
| Our own team | Genetic testing help requests, and the content of anything you report | To respond to you, and to moderate |
That is the complete list. We do not share consumer health data with advertisers, data brokers, insurers, employers, or researchers.
Attune does not sell consumer health data. We have never sold it, we do not offer it for sale, and we do not exchange it for anything of value. Because we do not sell it, we do not collect the signed authorizations that a sale would require under Washington law. If that ever changed, we would ask you first, in writing, and a refusal would cost you nothing in the app.
You can, at any time:
We confirm receipt and respond within 45 days. If a request is genuinely complicated we may take up to 45 more days, and we will tell you why before the first 45 are up. There is no charge.
If we say no. You can appeal by replying to our decision, or by writing to support@attunefamilies.com with "appeal" in the subject line. A different person reviews it, and we respond within 45 days with a decision and the reasons for it. If we still say no, Washington residents may complain to the Washington State Attorney General at www.atg.wa.gov/file-complaint, and residents of other states may complain to their own Attorney General.
We are careful here, because genetic information is different from other health information. It says something about your child's whole life, and about relatives who never signed up for anything.
What we store. The gene name or names you report, chosen from a published catalog of hearing loss genes, and whether testing has been done, is in progress, or has not started. That is all.
What we never store. Raw genetic sequence data. Variant files. Lab reports. Test result PDFs. Family pedigrees. There is nowhere in Attune to upload any of those, and we do not want them.
What we never do. Attune performs no genetic testing, no sequencing, no variant interpretation, and no analysis of results. Nothing in the app is a test result, a diagnosis, or a clinical interpretation. When we help you find testing, the testing itself is done by a laboratory and read by clinicians, not by us.
Where it is visible. If you complete the health questions, the gene names on your profile are visible to other signed in Attune members, because gene based matching is the point of the community. Agreeing to the health data consent is your authorization for that display. You can remove the gene names from your profile at any time, and doing so removes them from community view.
Please think about the long view. Genetic information can have lifetime implications for your child and for blood relatives. The federal Genetic Information Nondiscrimination Act (GINA) protects against genetic discrimination in health insurance and employment. It does not cover life insurance, disability insurance, or long term care insurance, and state laws vary. That is not a reason to avoid testing, and it is not our advice either way. It is a reason to decide deliberately how much you publish, here or anywhere.
You may choose to share a de-identified profile so that researchers can invite matching families to studies. This is:
Today there is no automated pipeline that sends registry data anywhere, and no researcher receives a feed from Attune. Turning the setting on records your willingness. Before any information is ever shared under it, we will tell you what is going, and to whom, and you can withdraw first.
Opting in does not enrol you in any study, does not guarantee contact, and does not entitle you to payment.
Attune accounts are for adults aged 18 or over. The service is not directed to children, children may not create accounts, and we do not knowingly collect information directly from a child.
Almost all of the health information in Attune is a parent or guardian describing their child. If you enter information about your child, you confirm you are their parent or legal guardian and that you have the authority to share it on the terms in this policy.
We keep what we hold about a child deliberately thin:
Exercising your child's rights. As the parent or guardian, you exercise them. Edit or clear any field in the app, download the full export, or delete the account, and your child's information goes with it. If you would rather we did it, email support@attunefamilies.com and we will, within the timelines above.
If your child reaches 18 and wants their own account, delete the fields about them from your profile and let them sign up in their own name.
If we learn that a child has created an account, we delete it.
We do not sell your data. We share it only with:
Clinical trial listings shown in the app come from ClinicalTrials.gov, a public database run by the US National Library of Medicine. Information flows one way. We send nothing about you to them, and they learn nothing about you.
Attune is offered in the United States, in English and Spanish, and all data is stored and processed in the United States.
We have not built the specific compliance apparatus that European or United Kingdom law requires, and we do not target those markets, so we do not claim GDPR or UK GDPR compliance. We would rather say that plainly than promise rights we have not implemented. The practical tools in this policy, export, correction, deletion, and consent withdrawal, are available to everyone who uses Attune, wherever they live. If you use Attune from outside the United States, you are sending your information to the United States, where privacy law differs from your home country.
Attune is not a healthcare provider, a health plan, or a healthcare clearinghouse, and it is not a business associate of one. That means HIPAA does not apply to Attune, and we do not claim HIPAA compliance. The Washington, Nevada, Connecticut, California, and Illinois protections described in this policy are the ones that do apply.
| What | How long |
|---|---|
| Profile, journey moments, posts, comments, messages, saved items | Until you delete them, or delete your account |
| Consent records (health data, research registry) | While your account exists, then deleted with it. They are the proof of what you agreed to, so we do not remove them earlier |
| Genetic testing help requests | While your account exists, then deleted with it. Email we exchanged with you about it stays in our support mailbox unless you ask us to purge it |
| Analytics events | While your account exists, then deleted with it |
| Reports you filed and blocks you set | Deleted with your account. A report that led to enforcement may leave a moderation record that no longer names you |
| Avatar images | Deleted with your account |
| Routine backups | Copies of deleted content can persist in rotating backups. We aim to have them clear within 30 days |
We do not discriminate against you for exercising any of these rights. The app does not have paid tiers that change based on what you consent to.
See the consumer health data section above. In short: you can know what we collect and who receives it, get a copy, withdraw consent, and have it deleted, including deletion by the service providers we shared it with. Attune does not sell consumer health data, so no authorization for sale exists or is sought.
Attune does not sell or share personal information as the CCPA and CPRA define those terms, and we do not use or disclose sensitive personal information for purposes beyond those permitted for providing the service. We have not disclosed personal information for cross context behavioural advertising in the last 12 months, and we do not knowingly sell or share the personal information of anyone under 16.
Categories we collect, in CCPA terms:
| CCPA category | What that means here |
|---|---|
| Identifiers | Account ID, email address, display name |
| Personal information under Cal. Civ. Code 1798.80 | Name, email address |
| Protected classification characteristics | Your child's age band, and disability information in the form of hearing loss details |
| Commercial information | None. Attune has no purchases |
| Internet or network activity | In app product interaction events |
| Geolocation data | Country only, if you provide it. Never precise location |
| Audio, video, or similar | An avatar photo, if you upload one |
| Professional or employment information | Only if you say you are a professional in the hearing loss field |
| Inferences | The journey and matching inferences listed above |
| Sensitive personal information | Health information, including genetic information, and information about your child |
Sources, purposes, and recipients are the same for all of these, and are listed in the consumer health data section.
California medical information. To the extent the Confidentiality of Medical Information Act treats Attune as a business that maintains medical information, we handle it confidentially, we do not disclose it without your authorization except as this policy describes, and we hold it to the same protections set out here.
You may exercise CCPA rights of access, correction, deletion, portability, and limitation of the use of sensitive personal information through the app or by emailing support@attunefamilies.com. We respond within 45 days, with one 45 day extension if needed, and we will verify you through the email address on your account. An authorized agent may act for you with written permission that we can verify. Appeals follow the same route as the consumer health data appeal above.
Illinois law treats genetic information as confidential and protects the results of genetic testing.
You can withdraw the authorization in Settings, at any time, without explaining why.
If you live in a state with a comprehensive privacy law, for example Colorado, Virginia, Utah, Texas, Oregon, Montana, Delaware, or any other state whose law takes effect after this policy was written, you have the rights that law gives you: confirmation and access, correction, deletion, portability, opting out of targeted advertising, sale, and profiling with legal effects, and an appeal if we refuse. Attune does none of the things you would opt out of. We do not run targeted advertising, we do not sell personal data, and we do not profile in a way that produces legal or similarly significant effects. Use the same routes as above, and we apply the same 45 day timeline and appeal process to everyone.
No system is perfectly secure, and we will not pretend otherwise.
If we discover a breach of security affecting your information, we will investigate immediately, close the hole, and tell you what happened, what was involved, and what to do about it.
We commit to notifying affected users without unreasonable delay and in any case no later than 60 days after discovery, and to notifying the Federal Trade Commission consistent with the Health Breach Notification Rule where it applies, along with any state regulator whose law requires it. If a breach reaches the scale at which the rule requires media notice, we will give it.
We will not quietly wait out a disclosure deadline. If we know, you will know.
We may update this policy. If a change is material we will tell you in the app before it takes effect, and the version identifier and date at the top will change.
A material change in how we use health data, genetic information, or information about your child does not apply retroactively to data we already collected. For that, we ask again, with a new consent version, and until you agree the old terms govern the old data. Not answering is not agreeing.
Questions, or to exercise any right in this policy: support@attunefamilies.com, or in the app under Settings → Support. Please tell us which state you live in, so we apply the right timeline.