Is Tonic.ai safe with your data?

Tonic.ai

Tonic.ai Inc.

34/100

Poor disclosure · high confidence

Tonic.ai earns an F (34/100) because it discloses little about its data practices.

Dealbreaker flag

D1.1: Customer understands and agrees that Tonic may use that data to improve its systems, products, and services

#174

of 211 apps ranked

score · Data platform avg 49

-15

vs category average

Grade scaleA · 70–100B · 60–69C · 48–59D · 35–47F · 0–34

Tonic.ai discloses a solid vendor list and clear no-sale and age-gate statements, but its terms reserve the right to use Customer Data to improve its systems with no opt-out, and it gives no retention number, no named transfer safeguard, no named security controls and no breach-notice commitment.

What Tonic.ai's privacy policy and terms of service say about your data

Reserved data-improvement right

The Terms state that where the Services involve access by Tonic to Customer Data, "Customer understands and agrees that Tonic may use that data to improve its systems, products, and services", with no opt-out offered anywhere in the fetched text.

Rights are jurisdiction-conditional

Access, deletion and correction are introduced by "Depending on your location and applicable law, you may have certain rights" and "may include", so none of the three is an unconditional commitment with defined scope.

Transfers named, safeguards not

The policy says data may be processed "in the United States, or in other locales across the globe" and relies on user consent, naming no Standard Contractual Clauses, adequacy decision or other transfer mechanism.

Security and breach gaps

Security is described only as "measures designed to protect your personal information" with no TLS, AES-256, RBAC or certification named, and the snapshot contains no breach-notification clause at all.

What the policy is silent or vague on

Not stated: keeping user inputs out of model training
Not stated: a way to opt out of training
Not stated: whether training use differs by plan
Not stated: data portability

Tonic.ai privacy rating

Training-data use0 of 4 disclosed

Keeps user inputs out of model training, or makes training opt-inAdverse

Names a way to opt out of or into trainingSilent

Says whether training use differs by plan or tierSilent

Lets the user keep ownership of generated outputsPartial

Data-subject rights1 of 5 disclosed

Grants a right to access your dataPartial

Grants a right to delete your dataPartial

Offers data portability in a usable formatSilent

Grants a right to correct your dataPartial

Grants a way to object to or opt out of processingDisclosed

Retention and deletion0 of 4 disclosed

States a retention period for your dataPartial

States a deletion timeline after closure or requestSilent

Sets a shorter retention for AI conversation logsSilent

Commits to collecting only the data it needsSilent

Third-party sharing2 of 5 disclosed

Lists the categories of third parties it shares withDisclosed

References a sub-processor list or data processing agreementDisclosed

Does not sell or share data for advertising, or offers opt-outPartial

Names a safeguard for international data transfersSilent

States a standard for government and law-enforcement accessPartial

Transparency1 of 4 disclosed

Discloses that you are interacting with AISilent

Marks AI-generated or synthetic outputNot applicable

Enumerates the categories of data it collectsDisclosed

Maps processing purposes to legal basesSilent

Is versioned and dated, with change noticePartial

Sensitive data and children1 of 2 disclosed

Discloses automated decisions and a human-review pathNot applicable

Limits the use of special-category dataSilent

Governs biometric data specificallyNot applicable

States protections for children's dataDisclosed

Security and accountability0 of 3 disclosed

Describes its security safeguardsPartial

Commits to breach notificationSilent

Names a certification or a privacy contactPartial

DisclosedPartialSilentAdverseNot applicable

Details

Category: Data platform
Modalities: text
Processes biometrics: No
Policy last updated: Privacy Notice: \"Last updated 17 days ago\" (no absolute date given); Terms and Conditions: UPDATED FEBRUARY 5, 2026
Region scored: Global / US-default
Last assessed: 2026-08-13

Documents examined

Other data platform apps

Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.