Privacy Policy

Last updated: June 2026

  1. Processing of personal data

1.1 For the purpose of offering and providing its services, YourNeuroTune Operations B.V., located at Bodepad 1, 5081 MK Hilvarenbeek, the Netherlands, registered with the Dutch Chamber of Commerce under number 42044804 (hereinafter: “YourNeuroTune”), processes certain personal data of customers, contact persons and users (hereinafter jointly: “Data Subjects”).

1.2 YourNeuroTune attaches great importance to the protection of privacy and processes personal data in accordance with applicable laws and regulations, including the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).

1.3 This privacy policy explains which personal data YourNeuroTune processes, for which purposes, on which legal bases, which parties may be involved, and which rights Data Subjects have.

1.4 This privacy policy applies to all YourNeuroTune services, including the use of the YourNeuroTune platform, the website, the iOS app and all related communications.

1.5 YourNeuroTune may amend this privacy policy from time to time. The most recent version is always available on the website.

  1. Definitions

In this privacy policy, the following terms have the meanings set out below:

  • **GDPR:** the General Data Protection Regulation (EU) 2016/679;
  • **Data Subject:** the natural person to whom the personal data relates;
  • **Customer:** the natural person or legal entity entering into an agreement with YourNeuroTune;
  • **Personal Data:** any information relating to an identified or identifiable natural person;
  • **Processing:** any operation or set of operations performed on personal data;
  • **Controller:** YourNeuroTune Operations B.V.;
  • **Processor:** a third party that processes personal data on behalf of YourNeuroTune.
  1. Legal bases for processing

YourNeuroTune processes personal data only where a valid legal basis exists, such as:

  • performance of an agreement;
  • compliance with a legal obligation;
  • YourNeuroTune’s legitimate interests, such as business operations, security, troubleshooting and improvement of services;
  • consent of the Data Subject, where legally required.

Where processing is based on consent, such consent may be withdrawn at any time.

  1. Personal data we process

YourNeuroTune may process, among other things, the following personal data:

  • name and contact details, such as email address and telephone number;
  • business details, such as company name, address, Chamber of Commerce number and VAT number;
  • billing and payment details;
  • account and login details;
  • communications, such as emails, contact requests and support requests;
  • technical data, such as IP address, device data, app version, platform, error messages and log files;
  • data about the use of the platform, website, iOS app and services;
  • data about subscriptions, trial periods and access rights.

YourNeuroTune does not process special categories of personal data through its services, such as medical data, health data or data about individual neurological conditions. The services are not directed at minors.

  1. Purposes of processing

Personal data is processed for the following purposes:

  • entering into and performing agreements;
  • delivering, managing and supporting the YourNeuroTune services;
  • creating, securing and managing accounts;
  • handling requests, contact requests, support requests and customer communications;
  • billing, administration and tax obligations;
  • managing subscriptions, trial periods and access rights;
  • securing systems, accounts and data;
  • improving the operation, stability and quality of the services;
  • complying with legal obligations;
  • marketing or commercial communications, to the extent permitted by law or where consent has been obtained.

YourNeuroTune does not use personal data for automated decision-making or profiling that produces legal effects or similarly significant effects for Data Subjects.

  1. Use of the YourNeuroTune iOS app

When you use the YourNeuroTune iOS app, we process additional data that is necessary for the app, music streaming, device linking and account functionality to work. This section supplements the general part of this privacy policy.

6.1 Data processed through the app

Through the iOS app, we may process the following data:

  • account data, such as name, company name, email address, role within the account (for example owner or trainer) and login status;
  • authentication data, such as access tokens, session data and identifiers from authentication services such as Auth0, Apple or Google;
  • subscription or trial data, such as subscription status, subscription type and trial end date;
  • business and onboarding data, such as type of venue or business, target audience, opening hours, preferred music atmosphere or energy, and any short description or subcategory of the location;
  • data about linked devices, such as device ID, device name, platform, active playback mode and the technical key used for device registration;
  • usage data within the service, such as selected playlists, playback status, schedules, linked devices, favourite or played tracks and settings necessary to provide the music service;
  • technical data, such as app version, platform, error messages, log files and crash information, where necessary for security, troubleshooting and improvement of the app.

The app does not request access to the camera, microphone, contacts, photos or location, unless this is explicitly added in a future version and separate permission is requested. The app does not use IDFA, App Tracking Transparency tracking, advertising SDKs or cross-app/cross-site tracking for advertising purposes.

6.2 Purposes of app processing

We use app data for:

  • creating, securing and managing your account;
  • logging in via email, Google or Apple;
  • providing the music service and displaying playlists, schedules and playback status;
  • linking and managing devices on which music is played;
  • creating suitable playlists and schedules based on business context and opening hours;
  • customer service, troubleshooting, security, abuse prevention and improvement of the service;
  • managing subscriptions, trial periods and access rights.

6.3 Local storage on your device

The app stores certain data locally on your device, including session tokens, account information, device choices, playback status, playback queue/position, pause intent, temporary cache data and technical debug logs. Sensitive session data, such as authentication tokens and certain device registration keys, is stored using secure iOS storage where possible. Non-sensitive playback state, preferences, diagnostic state and cache data may be stored in regular local app storage. This data is necessary to keep you logged in, to continue functioning during temporary connection issues and to restore the correct playback context.

When you log out or delete your account, the app deletes locally stored session and account identifiers from your device to the extent technically possible. Some non-sensitive cache, playback state or technical debug data may remain temporarily until it is overwritten, cleaned up by the app or removed when the app is uninstalled.

6.4 Account deletion

You can delete your account in the iOS app via the profile page and the “Delete account” option. Upon deletion, we delete your account data from our backend and from the authentication system, except for data that we are legally required to retain, such as billing, administrative or legal records. You may also contact us at info@yourneurotune.com with questions about deletion or access.

  1. Website, cookies, and marketing

7.1 When using the website, YourNeuroTune may process technical data, such as IP address, browser data, device data, cookie data, visited pages and interactions with the website.

7.2 YourNeuroTune uses cookies and similar technologies where necessary for the functioning of the website, analytics, security and — where applicable — marketing purposes. Where legally required, YourNeuroTune requests prior consent before placing non-essential cookies.

7.3 Data from contact forms, emails, telephone calls or other communications may be processed to answer questions, provide quotes or information, manage customer relationships and perform services.

7.4 Commercial communications are only sent where permitted by law or where consent has been given. You can unsubscribe from such communications using the indicated unsubscribe option or by contacting info@yourneurotune.com.

  1. Third parties and processors

For the operation of its services, YourNeuroTune uses external service providers. Depending on the use of the services, these may include:

  • hosting, database, and infrastructure providers;
  • Auth0, for authentication and account security;
  • Apple and Google, when you choose to log in via Apple or Google;
  • Expo/EAS, for building, updating and distributing the app, including update checks that may process technical metadata such as app version, platform, device/request metadata and IP address;
  • Sentry or a similar error registration and monitoring service, for detecting crashes, error messages, stack traces and technical issues, to the extent this service is enabled in production. We do not intentionally send passwords, access tokens or payment details to such monitoring services;
  • payment, invoicing or accounting providers;
  • email, communication and support providers;
  • website, cookie, and analytical service providers.

Where necessary, we enter into data processing agreements with processors that comply with the GDPR. They may process personal data only on our behalf and not for their own purposes.

  1. Transfer outside the European Economic Area

Some service providers, such as Auth0, Apple, Google, hosting providers or other technical service providers, may process data outside the European Economic Area (EEA), including in the United States. In such cases, we ensure appropriate safeguards as required by the GDPR. This may include the European Commission’s Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. You may request a copy of, or further information about, these safeguards via info@yourneurotune.com.

  1. Security

YourNeuroTune takes appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. These measures include access security, secure storage of session data where possible, encrypted connections, restriction of access to data and monitoring of technical errors and misuse.

  1. Retention periods

YourNeuroTune does not retain personal data for longer than necessary for the purposes for which it was collected, unless a longer retention period is required by law.

  • Account data is retained for as long as you have an active account. After deletion of your account, this data is deleted, except where we are legally required to retain it for longer.
  • Billing and administrative data may be retained for longer based on tax and administrative retention obligations.
  • Technical data, error messages and log files are retained for as short a period as reasonably necessary for troubleshooting, security and improvement of the service, and are then deleted or anonymised.
  • Usage and preference data, such as playlists, playback status and schedules, are retained for as long as necessary to provide the service and are deleted when your account is terminated, unless longer retention is legally required.
  1. Rights of Data Subjects

Under the GDPR, you have the following rights with regard to your personal data:

  • the right to access the data we process about you;
  • the right to rectification of inaccurate data;
  • the right to erasure of your data (“right to be forgotten”);
  • the right to restriction of processing;
  • the right to data portability;
  • the right to object to the processing;
  • the right to withdraw consent previously given.

You can exercise these rights by contacting us at info@yourneurotune.com. We will respond to your request within the statutory period.

If you believe that we do not handle your data carefully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via the website of the Dutch Data Protection Authority.

  1. Contact

For questions about this privacy policy or the processing of personal data, you can contact:

YourNeuroTune Operations B.V.

Bodepad 1

5081 MK Hilvarenbeek

Chamber of Commerce number: 42044804

Email: info@yourneurotune.com