TinniMix Privacy Policy

Last updated: 12 October 2026

TinniMix is made by Masterclass Multimedia LLC ("we", "us"). This policy explains what information the TinniMix app for iPhone, Apple Watch and Android (and their widgets) handles, where it goes, and the choices you have.

The short version

• Your tinnitus profile, diary, exercises and health information stay on your phone.
• We don't sell your data, show ads, use analytics or track you across apps and websites.
• Information only leaves your phone if you choose to: turning on iCloud sync (iPhone) or phone backup (Android), joining the community, sending a problem report, or using the clinician lookup.
• You can delete your community account, and everything you posted, from inside the app.

1. What stays on your phone

The following is stored only in the app's private storage on your device, protected by your phone's data protection (iOS data protection, or Android's app sandbox and encryption). We can't see it, and deleting the app deletes it.

• Your tinnitus profile: matched pitches, loudness, which ear, and how it moves.
• Hearing and headphone checks: your hearing test results and history, and headphone test results.
• Your sounds: masking layers, presets, soundscapes and settings, plus any sound files you import from your files (copied into the app; never uploaded).
• Your diary: check-ins, monthly check-ins, notes, thought records, worry-time entries and lesson progress.
• TinniTracker: the hours you mark as none, low, medium or high, and any markers you add for things like caffeine, alcohol, loud noise or stress.
• Tools exercises: your chosen values and daily steps, "three good things" entries, and which exercises you've done.
• Listening time: used by the safe-listening guard.
• Air pressure: if you allow Motion & Fitness access (iPhone; Android phones need no permission), the app notes the air pressure from your phone's barometer when you check in, so your diary can show whether weather changes line up with how your tinnitus feels.
• Community preferences: presets you favorite and people you hide.

Microphone: if you allow it, the app measures how loud it is around you: for 4 seconds before a hearing test, and while you use the sound meter (which can keep listening in the background until you stop it, with your phone's microphone indicator showing). Only a loudness reading is used; no audio is recorded, kept or sent anywhere.

Apple Health headphone levels (iPhone): if you allow it, the sound meter shows your headphone listening levels from Apple Health. They stay on your phone.

Voice guidance in the exercises uses your phone's built-in speech voices. Nothing you hear or type is sent anywhere to produce it.

Safety check: text you type in the diary, lessons and community posts is checked on your phone for words that may mean you're in crisis, so the app can offer support lines. Diary and lesson text never leaves your phone.

2. Apple Health and Health Connect

Apple Health (iPhone)

If you allow it, TinniMix reads from Apple Health:

• your hearing test (audiogram), to tune relief sounds to your hearing;
• sleep, environmental sound exposure and workouts, to show patterns next to your diary.

TinniMix does not write to Apple Health. Health data is used only on your phone, is never sent to us or anyone else, is never used for advertising, and is never stored in iCloud outside Apple Health. You can change access any time in the Health app or in Settings.

Health Connect (Android)

If you allow it, TinniMix reads from Health Connect:

• sleep sessions and exercise sessions, including older ones if you allow access to past data, to show patterns next to your diary (for example, whether short nights line up with more bothersome days).

TinniMix does not write to Health Connect. This data is used only on your phone to show you these patterns. It is never sent to us or anyone else, never used for advertising, never sold, and never used to decide credit, insurance or employment. You can change or remove access any time in Health Connect or in your phone's Settings.

TinniMix's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

3. Information that leaves your phone, only if you choose

iCloud sync (optional)

If you turn on iCloud sync, your profile, checks, presets and diary are copied to **your own private iCloud account** so they appear on your other devices. This is handled by Apple under Apple's privacy policy; we can't read it. Turning sync off removes the copy.

Android backup

On Android, the app's data (profile, checks, presets, diary) is included in your phone's backup to your own Google account, like your other apps, so it comes back if you get a new phone. Google encrypts it and we can't read it. You can turn backup off in your phone's Settings.

Community (optional)

The community lets you share presets, comment, post treatment stories, suggest ideas, vote, favorite and report posts. It runs on Google Firebase (Firebase Authentication and Cloud Firestore), with servers in the United States.

If you join, we store:

• Sign-in details, handled by Firebase Authentication:
  • Sign in with Apple: a user identifier from Apple, and the email address Apple shares, which can be a private relay address if you choose "Hide My Email".
  • Sign in with Google (Android): a user identifier from Google, your email address and the name on your Google account. The name isn't shown to anyone; you choose a username.
  • Email sign-in: your email address and password. Firebase stores the password in a hashed form we can't read.
• Your profile: a user ID, the username you choose, when you joined, and a count of community-rule strikes.
• What you post: shared presets (the sound recipe, name and description, and, if you turn it on, a short tinnitus description such as "High, tonal"), comments, treatment stories and ideas, each with your user ID, username and the time it was posted. Posts marked anonymous hide your username from other members; moderators can still see which account posted, for safety.
• Your activity: upvotes, ratings, idea votes and how often a preset was saved, linked to your user ID.
• Reports: if you report a post, the post, the reason and your user ID. Reported posts are held for review.
• Safety flags: if a post may mean someone is in crisis, it's flagged so a moderator can check in.

Shared posts can be seen by other community members. Please don't post anything that identifies you or anyone else.

Posts can include health information you choose to share, such as how your tinnitus sounds or treatments you have tried. Before you create a community account, the app asks you to agree, separately, to your posts being stored and to their being shown to other people. You can take that back at any time by deleting a post or your account. Our Consumer Health Data Privacy Policy has the details: https://tinnimix.com/health-data-privacy.

Like most online services, Firebase may record technical information such as IP addresses and device type in its security logs to protect the service. We don't use Firebase Analytics or advertising features. See Google's privacy information at https://firebase.google.com/support/privacy.

Problem reports (optional)

When you send a problem report, it goes through the app you choose, such as Mail. It includes your device model, system and app versions, headphone name and current sound settings, and crash information only if you turn that on.

Clinician lookup (optional)

If a clinician enters their US National Provider Identifier (NPI) to share presets with patients, the number is sent to the US government's public NPI Registry to look up their name. Nothing else is sent.

Content updates

The app may download updated articles and lessons from our server. These requests contain no personal information, though, like any web request, they include your IP address.

Tips

Tips are in-app purchases processed by Apple (iPhone) or Google Play (Android). We receive no payment details, only that a purchase happened.

Notifications

Reminders and the gentle wake-up notification are scheduled on your phone. Nothing is sent to a server to deliver them.

4. What we don't do

• We don't sell or rent your information.
• We don't show ads or share data with advertisers or data brokers.
• We don't use analytics or tracking tools, or track you across other apps and websites.
• We don't use your health or tinnitus information to train AI or for any purpose other than running the app for you.

5. How long we keep information

• On your phone: until you delete it or delete the app.
• Community: until you delete your account, which removes your profile, username, posts, votes and ratings. Reports you made about other posts may be kept, without your identity, where needed to keep the community safe. Firebase security logs are kept for a limited time under Google's policies.

6. Your choices and rights

• Delete your community account: More → Community → Account → Delete account. This removes your account and everything you posted, right away.
• Delete everything else: delete the app. If iCloud sync is on, turn it off first; on Android, you can also delete the app's backup in your Google account settings.
• Apple Health, Health Connect, microphone and Motion access: change any time in your phone's Settings (or in Health Connect).
• Access, correct or delete: depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you may have rights to access, correct, delete or export your information, and to object to how it's used. Contact us and we'll help. We'll never treat you differently for using these rights.

7. Children

TinniMix is not directed at children under 13, and we don't knowingly collect personal information from them. You must be 13 or older to join the community, and if you're under 18, a parent or guardian must agree. If you believe a child under 13 has joined, contact us and we'll delete the account.

8. Security

Information on your phone is protected by your phone's data protection. Community data is sent over encrypted connections and protected by access rules, so members can only change their own posts. No system is perfectly secure, so please don't share sensitive personal details in community posts.

9. Changes to this policy

If we change this policy, we'll update the date above and, for important changes, let you know in the app.

10. Contact

Masterclass Multimedia LLC
Email: support@tinnimix.com