Legal
How YourNeuroTune handles personal data across this website, the account environment, the platform, the app and our marketing pages.
Last updated: 3 October 2026
This Privacy Statement explains how YourNeuroTune processes personal data across all of its services: this website and the account environment it contains, our marketing and landing pages, the YourNeuroTune platform, our apps for phones and computers and all related communication such as enquiries, trials and support.
The controller for the processing described in this statement is YourNeuroTune Operations B.V., Bodepad 1, 5081 MK Hilvarenbeek, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 42044804, together with its affiliated companies, including YourNeuroTune Licensing B.V. (KvK 42044608). In this statement we refer to them together as “YourNeuroTune”, “we”, “us” or “our”.
For privacy questions, contact us at info@yourneurotune.com.
YourNeuroTune processes personal data only where a valid legal basis exists under the General Data Protection Regulation (GDPR) and, for visitors from the United Kingdom, the UK GDPR:
Depending on how you interact with us, we may process:
We process personal data to:
YourNeuroTune does not use personal data for automated decision-making or profiling that has legal effects for you or similarly significantly affects you.
Our website shows every visitor the licensing information, prices and language of their own market. To do this, our hosting infrastructure derives a country code from your IP address when a page is requested. Only that country-level code reaches the website; we do not store your IP address for this purpose and we do not build location profiles from it.
A functional cookie may remember a market or language preference so the site stays consistent between pages. This cookie contains no personal data beyond that preference.
When you submit a trial request, savings check, enquiry or the start/checkout flow, we use the details you provide to handle that specific request, to contact you about it and, where you complete a signup, to set up your agreement and account. We do not add you to a general marketing list simply because you submitted a form.
Payments and recurring collections are processed through Stripe. We share the billing contact, business and delivery details and order information needed to process the payment and subscription. We receive confirmation of your payment and the billing details needed for our administration; full card numbers are handled by the payment provider and are not stored on our systems.
We retain the agreed order details, venues and zones, representative, applicable terms and version, acceptance time, contract period and payment references to fulfil and evidence your agreement. Hardware orders also include the delivery address. Stripe handles full payment credentials; YourNeuroTune does not store full card numbers. Transactional email is sent through Resend and delivery status is recorded.
If you choose the AI help, your message and the recent messages in that conversation are sent to Anthropic to generate an answer. You do not need to use this feature. Do not enter passwords, payment credentials or sensitive personal information. The website route does not create a stored chat history; Anthropic can retain content under its applicable API safety and retention terms. This is not a promise of zero retention. We process the conversation to answer your request and secure the service; it is not an automated decision about your subscription or rights.
The website and your account can prepare cancellation letters or emails for music licences you hold with collecting societies. The business details you enter for this purpose are used to generate those documents, are stored with your account so you can access them again, and are not used for any other purpose. Sending a cancellation remains your own action and your own choice.
Accounts are secured through Auth0, our authentication provider. When you sign in, Auth0 processes your login details, access tokens and session data. If you choose to sign in with Apple or Google, those parties process the sign-in as described in their own privacy statements.
You are responsible for keeping your login details confidential. We process authentication data to keep your account secure, to detect misuse and to keep you signed in.
When you use the YourNeuroTune iOS app, we additionally process the data needed to make the app, music streaming, device pairing and account functionality work: account details (name, company name, email address, role within the account, login status), authentication data (access tokens, session data, identifiers from Auth0, Apple or Google), subscription or trial status, business and onboarding details (type of venue, audience, opening hours, preferred atmosphere or energy), paired-device data, in-service usage data (chosen playlists, playback status, schedules, favourites and settings) and technical data (app version, platform, error reports, crash information).
The app does not request access to your camera, microphone, contacts, photos or location, unless a future version explicitly adds this and asks for separate permission. The app does not use IDFA, App Tracking Transparency tracking, advertising SDKs or cross-app or cross-site tracking for advertising purposes.
The app stores certain data locally on your device, including session tokens, account information, device choices and playback state. Sensitive session data is stored via secure iOS storage where possible. When you log out or delete your account, the app removes locally stored session and account identifiers from your device as far as technically possible.
You can delete your account in the iOS app via the profile page using the ‘Delete account’ option. On deletion we erase your account data from our backend and authentication system, except data we are legally required to keep, such as invoicing, administrative or legal records. You can also contact info@yourneurotune.com with deletion or access questions.
When you use our websites we may process technical data such as IP address, browser data, device data, cookie data, pages visited and interactions with the website.
We use cookies and similar techniques as needed for the functioning of the website, analysis, security and, where applicable, marketing purposes. Necessary cookies keep the website working. Where legally required, we ask for your consent before placing non-essential cookies, and marketing cookies stay off unless you allow them.
You can change or withdraw your consent at any time through the cookie settings on our website. Withdrawal does not affect processing that happened before you withdrew consent.
Cookiebot by Usercentrics manages the cookie banner and records your consent choices so we can respect and demonstrate them. The cookie settings show your current choices and consent details.
Only after Marketing consent, our server sends selected public-page visits and confirmed trial, checkout and purchase events to Meta Platforms Ireland Limited using the Conversions API. No advertising script is loaded into your account or document pages. We send a fixed public-page address, never access tokens, private account URLs or complete browser query strings.
Measurement may include IP address, browser information, event identifiers and subscription value and currency. On existing enquiry forms, contact details may be hashed for matching with an advertising account. Hashed data is not anonymous. Advertising measurement is disabled on the test website.
Rejecting or withdrawing Marketing consent stops new measurement events. Using a server does not bypass your cookie choices.
We use external service providers to operate our services. Depending on your use, these can include:
Some providers, such as Auth0, Apple, Google, hosting parties or Meta, may process personal data outside the European Economic Area and the United Kingdom, including in the United States. Where that happens we ensure appropriate safeguards as required by the GDPR and UK GDPR, such as the European Commission's Standard Contractual Clauses, the EU-U.S. Data Privacy Framework and, where applicable, the UK Extension to that framework. You can request a copy of or further information about these safeguards via info@yourneurotune.com.
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction, including access controls, secure storage of session data where possible, encrypted connections, limiting access to data and monitoring for technical faults and misuse.
We keep personal data no longer than needed for the purposes for which it was collected, unless a longer retention period is legally required.
Under the GDPR and, where applicable, the UK GDPR you have the right to access, rectify and erase your personal data, to restrict processing, to data portability, to object to processing and to withdraw consent you have given. To exercise these rights, contact info@yourneurotune.com; we respond within the statutory period.
If you believe we do not handle your data with due care, you have the right to lodge a complaint with your supervisory authority, such as the Autoriteit Persoonsgegevens in the Netherlands or the Information Commissioner's Office in the United Kingdom.
For questions about this Privacy Statement or the processing of personal data, contact YourNeuroTune Operations B.V., Bodepad 1, 5081 MK Hilvarenbeek, the Netherlands, KvK 42044804, info@yourneurotune.com.
We may update this Privacy Statement from time to time. The most recent version is always available on this page; the version date at the top shows when it was last updated.