Privacy Policy

Last updated: 2026-04-16

Tinnitus Match is a tinnitus therapy soundscape app. The core mixer, built-in presets, sleep timer, and AI preset suggestions all work without any account. This policy explains what happens to data when you do choose to sign in or share content.

We don't show ads. We don't run analytics or tracking beyond what Firebase uses to keep the app working.

What we collect

If you sign in

We use Firebase Authentication. Depending on the provider you pick:

Google: email, display name, profile photo URL.
Apple: email (or Apple's private relay address if you choose to hide yours), name — only on your first sign-in, per Apple's design.
Email magic link: the email address you type.

These fields are stored in a users/{uid} document in Firestore so we can render your account in the app and attribute any content you publish.

If you publish a preset, like, or comment

The preset's audio configuration (sound layer types, frequencies, volumes), title, and description.
The comment body you wrote.
Your display name and profile photo URL, shown alongside.

If you fill in a tinnitus profile (optional)

Pitch (approximate Hz), laterality (left / right / both ears), character (tonal / hissing / buzzing / pulsing), severity (1–5), and free-text notes.

These are used only to personalize AI suggestions for you. They are never shown to other users.

If you use the AI assistant

The free-text description you type plus a snapshot of your current mixer state is sent to Google's Gemini API via Firebase AI Logic to generate a preset. If you have a stored tinnitus profile, it is included as extra context in that request.

What we don't collect

No advertising identifiers, ad SDKs, or tracking pixels.
No microphone, camera, contacts, photo library, calendar, or location access.
No device fingerprinting beyond Firebase App Check, which only verifies the request comes from a legitimate install of this app.
No sale or sharing of data with advertisers or data brokers — because there are none.

Third parties that process data on our behalf

We use Google services to run the app. Their processing is governed by Google's Privacy Policy: policies.google.com/privacy.

Firebase Authentication — sign-in.
Cloud Firestore — storing your profile, published presets, likes, and comments.
Firebase App Check — preventing abuse of our AI and database quotas.
Firebase AI Logic (Google Gemini) — generating AI-suggested presets from the descriptions you send.
Firebase Hosting — serving the web version of this app.

We do not share your data with anyone else.

How long data is kept

Account and profile data: for as long as your account exists.
Published presets, likes, and comments: until you delete them from within the app, or your account is deleted.
Firebase AI Logic processes each AI request in-flight — the prompt text is not stored by us afterwards.

Deleting your data

You can delete your published presets and comments from the app directly. To delete your account and everything associated with it, email kakhagiorgashvili@gmail.com from the address associated with the account. Deletion is completed within 30 days.

Children

Tinnitus Match is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has signed up, contact us and we will remove the data.

Changes to this policy

If this policy changes in a way that affects what we collect or share, we will update this page and change the "Last updated" date. For material changes we will also surface a notice inside the app on next launch.

Contact

Kakha Giorgashvili
Email: kakhagiorgashvili@gmail.com

The app's source is hosted on GitHub. This policy covers the production deployment at tinnitus-match-prod.web.app and native builds of Tinnitus Match distributed via the App Store and Google Play. See also our Terms of Service.