Privacy

ToneLayer Privacy Policy

Last updated: July 2026

This policy covers ToneLayer and ToneLayer Clarity (the "apps") and the services at tonelayer.app. It explains what information is processed when you use the apps and the ToneLayer keyboard extensions, and how that information is handled.

1. Automatic On-Device Redaction

Before anything leaves your device, the app automatically strips names, phone numbers, addresses, dates, bank account numbers, crypto wallet addresses and private keys/seed phrases, API keys, and any business or trade-secret terms you've added yourself — replacing each with a placeholder. Only the placeholder-substituted text is sent for AI processing; the real values are restored on your device once a response returns, and are never transmitted or stored.

This protection is automatic, but it is not a guarantee against every possible leak — stay careful with what you share and who you share it with. By using ToneLayer, you consent to this processing.

2. Text You Submit for Rewriting or Decoding

When you use a rewrite, decode, or screening feature, the (redacted) text you enter is sent over an encrypted (HTTPS) connection to the ToneLayer server, which forwards it to Anthropic's Claude API to generate a response. The result is sent back to your device.

• Your text is not stored permanently on the ToneLayer server.
• Please do not enter passwords, financial information, or sensitive medical or legal details into the apps or keyboards.

3. Voice & Microphone (TonalInsight™ feature)

The optional TonalInsight™ feature uses your device's microphone to analyze the tone of your voice. When active, audio is streamed directly to Hume AI's Empathic Voice Interface (EVI) for vocal-tone (prosody) analysis.

• Audio is not recorded or stored by ToneLayer.
• Audio is not played back to you or anyone else.
• TonalInsight™ is entirely optional and only runs while you are actively using it.

4. Information Stored on Your Device

The apps and their keyboard extensions share a small amount of data on your device (an "App Group" container) so the keyboard can remember things like whether you've accepted the Beta Testing Agreement, your communication profile and settings, and the most recent teaching note. This information stays on your device and is not sent to our servers.

5. No Accounts, No Ads, No Tracking

The apps do not require you to create an account or sign in. We do not use third-party advertising or analytics SDKs, and we do not sell or share your information with advertisers or data brokers.

6. Optional Anonymous Usage Analytics

Settings includes a separate, off-by-default toggle called "Share anonymous usage data." If you turn this on, the app sends anonymous counts — such as how many rewrites you do, whether you marked a result helpful, and average correction scores — to our server so we can demonstrate the app's impact to funders and insurers.

• This never includes your message text, contacts, or anything else identifying.
• Each install is tagged with a random ID generated on your device. It is not linked to your identity, account, or device in any other way.
• This toggle is independent of, and off by default like, the Personalization & Outcomes setting described above.

7. Data Security

All communication with the ToneLayer server is encrypted in transit (HTTPS), and access to the API requires an authorization token bundled with the apps.

8. Children's Privacy

The apps are not directed to children under 13, and we do not knowingly collect information from children under 13.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this policy can be sent through the feedback option in the app or to the support email listed on the App Store listing.