Attune — Privacy Policy

Last updated: 19 July 2026

Who we are

Attune is operated by Modernized Mobile. Contact us at the support address listed in the app under Settings → Support.

The short version

We collect what you tell us, plus basic usage analytics. Nothing else.
We do not track you across other apps or websites.
We do not sell your data, and we run no advertising SDKs.
Your hearing-loss and genetic information is used to connect you with other families and relevant clinical trials — nothing else — and is never shared with researchers unless you explicitly opt in.
You can export or permanently delete everything, from inside the app.

What we collect

You give us directly

Data	Why
Email address	To create and secure your account
Display name	Shown on your posts, comments, and messages
Avatar photo (optional)	Shown on your profile
Gene(s), hearing severity, device use, journey stage, child's age band (all optional)	To match you with similar families and relevant clinical trials
Relationship to hearing loss (parent, self, family, clinician)	To tailor the experience
Country (optional)	To surface geographically relevant trials
Posts, comments, milestones, direct messages	These are the app's core features
Reports you file about other members	To operate moderation

We generate automatically

Data	Why
A user ID	To associate your content with your account
Product-interaction events (screens viewed, features used)	First-party analytics to understand what to improve
Timestamps on your content	Ordering and display

We do not collect your precise location, contacts, advertising identifiers, browsing history outside the app, or any biometric data.

Sensitive health information

Gene, hearing-severity, device, diagnosis-journey, and child-age fields are health information. We treat them as sensitive:

Every one of these fields is optional.
They are used only to power family matching and clinical-trial matching.
They are never used for advertising, and never sold.
They are visible to other members only through the profile and matching features — the same information you can see about others.
Aggregate counts (for example "12 families with this gene") are computed so that no individual is identifiable.

Attune is a peer-support and information service. It is not a healthcare provider, and in most jurisdictions it is not a HIPAA-covered entity. Nothing in the app is medical advice.

The research registry — opt-in only

You may choose to share a de-identified profile with Rescue Hearing Institute so researchers can invite matching families to studies. This is:

Off by default. Nothing is shared unless you turn it on.
Revocable at any time in Settings.
De-identified — it excludes your name, email, avatar, posts, and messages.

We record each change to this setting, with its timestamp, so we can prove what you consented to and when.

Children's data

Attune accounts are for adults aged 18 or over. Children may not create accounts.

Much of the health information in Attune is a parent or caregiver describing their child. If you enter information about your child, you confirm you are their parent or legal guardian and you consent to us processing it on the terms in this policy. We deliberately collect a coarse age band (for example "3–5 years") rather than a date of birth, to minimise what we hold about a child.

You can delete your child's information at any time by editing your profile, or remove everything by deleting your account.

Who we share data with

We do not sell your data. We share it only with:

Supabase — our database, authentication, storage, and realtime provider, hosting data in the United States. They process data on our instructions.
Rescue Hearing Institute — only the de-identified registry profile, and only if you have explicitly opted in.
Law enforcement — only where we are legally compelled, and we will tell you unless legally barred from doing so.

Clinical trial listings shown in the app come from ClinicalTrials.gov (a public NIH database). We send nothing about you to them.

Where data is stored

Data is stored in the United States. If you use Attune from outside the US, you are transferring your information to the US, where privacy law differs from your home country.

How long we keep it

We keep your data until you delete it. Deleting your account removes your profile, posts, comments, messages, milestones, journey data, consents, likes, follows, blocks, and device records — the database enforces this by cascade, so nothing is left orphaned. Analytics events are retained but permanently disassociated from you.

Backups may retain deleted content for up to 30 days before rotating out.

Your rights

Wherever you live, you can:

See and export everything — Settings → Download my data returns a complete JSON export.
Correct it — edit your profile at any time.
Delete it — Settings → Delete account is immediate and permanent.
Withdraw registry consent — Settings, at any time.

If you are in the EU/UK (GDPR) or California (CCPA/CPRA), you additionally have the right to object to or restrict processing, and to lodge a complaint with your supervisory authority. We do not "sell" or "share" personal information as those terms are defined by the CPRA. Email us to exercise any of these rights; we respond within 30 days.

Security

Access is enforced at the database level by row-level security, so one member cannot read another's private data even if the app is tampered with. Traffic is encrypted in transit. Passwords are hashed by our authentication provider and are never visible to us.

No system is perfectly secure. If we discover a breach affecting you, we will notify you and the relevant regulators as required by law.

Changes

If we change this policy materially we will notify you in the app before the change takes effect. The "last updated" date above always reflects the current version.

Contact

Questions, or to exercise any right above: the support address in the app under Settings → Support.