Legal
How The Munna Co Pty Ltd (Tention) collects, uses, shares and protects personal information, and how to access it, correct it or complain.
Tention is operated by The Munna Co Pty Ltd (ABN 14 660 483 581), 81 Watt Road, Mornington, Victoria 3931, Australia ("Tention", "we", "us"). Our Privacy Officer looks after how we handle personal information. You can contact them at privacy@tention.app.
This policy covers how we handle personal information through:
"Personal information" means information or an opinion about an identified person, or a person who can reasonably be identified. It includes what you see and hear in a video.
Your IP address, browser and device details, the pages you visit, the site or ad that sent you, and the cookies described in our Cookie Notice. Our website uses Google Analytics, Microsoft Clarity (which records how visitors move around our marketing and sign-up pages) and the Meta pixel. None of them run inside the signed-in app. They do run on every screen of our website sign-up (tention.app/join), including the setup screens after your account is made, where Clarity hides the text on the screen.
To show you a preview of your first questions, we ask for your website address, your industry and role, your country, some words about your work and the topics you care about. Your device's time zone is also read. These answers are kept in your browser. Our servers use them to build your preview, including by reading your website's home page and sending your answers and website text to our AI providers (Google Gemini and Anthropic Claude). A line under the website field tells you this before you start. We do not save your answers in our database before you subscribe. Our operational logs record your website's domain name for 30 days. Our bot check (Cloudflare Turnstile) and our request limits use your IP address.
To start a free trial at tention.app/join, you find yourself on ASIC's public registers of credit representatives and credit licensees and choose your details. We keep a copy of these registers, which ASIC publishes on data.gov.au, and use it for sign-up: to let you find yourself, to check the details you choose, and to fill in your licensee, suburb and state. If you can't find yourself, "Tell us your details" sends us your name, email address and, if you give them, your credit representative or licence number, business name and website, with a scrambled form of your IP address. A person on our team checks your request by hand. If we can confirm your details, we email you a link to finish signing up.
You then type your email address and, if you like, your website, and agree to our Terms, this policy and our AI notice. We email you a 6-digit code. Your account and your free 14-day trial are made only once you enter the right code. For the sign-up we keep:
Until your account is made, your website address stays in your browser. We read your website once your account exists (see "AI in Tention").
Your trial is set up with our payment provider, Stripe, which receives your name, email address, credit representative or licence number, and the record of when you agreed. The trial needs no card. If you add one during the trial, you do it on Stripe's own payment page, and nothing is charged until your trial ends.
We email you your sign-up code. During your trial we also email you a notice a few days before it ends, which either reminds you that it is ending or, if you have added a card, tells you the amount and date of your first payment. We may also email you offers for your trial (see "Marketing messages").
Your name, email address and, if you give it, your business name. On the web, our payment provider Stripe collects your billing address, card details and, if you give it, a tax number, and we keep a record that you agreed to our Terms and Privacy Policy (with the date and version), whether you asked to receive product updates and offers, and any referral or advertising code attached to your visit. In the iPhone app, you agree to our Terms and this policy on the same screen as our AI notice, and we keep the same record. On the iPhone, Apple takes your payment and tells us the purchase happened. We never see your full card details.
When you connect Instagram, Facebook, LinkedIn, TikTok, YouTube, X, Threads or Google Business Profile, the connection is held by our social posting provider, Zernio. We store the account handle and a reference to the connection. We receive your posts' performance figures and comments from your audience. We keep the performance figures. Comment text passes through our systems (our background job provider keeps it in its job history for a period) but is not saved in our database; we keep a record of the interaction with the commenter's identity scrambled. If you tag collaborators on Instagram, we store their handles.
If you run an office account, you give us your colleagues' names and email addresses to invite them, and our sign-in provider emails the invitation. If you belong to an office account, the office's administrators can see content you send to the office, including the question, the video, the brand check result against the office's guidelines, and whether you went ahead despite a match with one of your personal guidelines. Office guidelines are added to your own guidelines.
Your recordings, guidelines, captions and notes may include information about other people, such as clients, colleagues or people who appear in your videos. Don't include clients' names or personal details in your videos. See "Your responsibilities" below.
Some kinds of personal information are especially sensitive, including health information and information about a person's racial or ethnic origin, religious beliefs, sexual orientation, criminal record, or membership of a professional or trade association.
We do not ask for sensitive information, and Tention does not need it. But it can end up in what you record or write, for example if you mention a health condition, or if your website mentions your professional association. If you include sensitive information about yourself, we handle it only to provide the features you use, in the way this policy describes. You can delete it at any time by deleting the recording or item.
Don't include sensitive information about other people, such as a client's health.
We collect, hold, use and share personal information to:
If you do not give us the information we ask for, we may not be able to provide Tention or some of its features. For example, without your recordings we cannot transcribe or caption them, and without your email address we cannot set up an account. You can try the preview before subscribing without giving your name or email address.
Tention uses outside AI services to do what it promises:
These providers process your information to give us a result. We do not allow them to use your content to train their models. Some of them keep what they receive for a limited time to check for misuse of their service, then delete it.
Before Tention first uses AI with your information, we show you a short notice that names these services, and you agree to it once. On the web, that is part of signing up. In the iPhone app, it is the first screen after you sign in. Tention can't work without these services, so if you no longer want them to process your information, delete the recordings concerned or your account.
AI can be wrong. Suggested questions, captions, bios and brand check results can contain mistakes, so check them before you publish.
We also use AI software tools, including Anthropic's Claude, to help us build, run and fix Tention. When we investigate a problem, these tools may process account information. We do not allow them to use it to train their models, and we look at as little of your content as the problem needs.
The brand check is a self-review tool. It runs only when you tap it, with one exception: when you sign up at tention.app/join, it runs by itself once, on the first video you make during setup, to show you what it does.
What happens when you run it: we send the transcript of your take and the text of your guidelines to Google Gemini, which looks for places where your words match your guidelines. If you run it before saving a take, the take's audio is first transcribed by Deepgram.
What we save: a report attached to that take. For each match it holds the words from your transcript (up to 500 characters), a little of the text either side, the time in the video, and a copy of the guideline it matched, including its wording at the time. We also keep a separate record that a check ran, which holds only counts, identifiers and times, never your words or your guidelines.
Checks on takes you do not save: if you run a check and then do not save the take, the check's audio, transcript and results are deleted within about 25 hours.
What it is not: a brand check result shows only where your words matched, or did not match, guidelines you wrote. It is not advice, not an approval and not a finding that your content is suitable to publish. It can miss things and it can flag things that do not matter. You decide what to publish.
Office accounts: an office can require a brand check before you send a take to the office. See "Decisions made by software".
Some things in Tention happen automatically, based on information about you:
The brand check itself does not make decisions about you: it shows you matches, and you decide what to do. If you think an automatic decision affected you unfairly, email privacy@tention.app and a person will review it.
Service providers. We use outside services to host, store, transcribe, analyse, render, publish, email and bill. They receive only what they need for the job they do for us. The full list, with what each receives and where it is, is on our Service providers page. The main ones are Vercel, Neon, Cloudflare, Clerk, Inngest, Deepgram, Google, Anthropic, OpenAI, Amazon Web Services, Zernio, Stripe, RevenueCat, Sentry, Axiom, Resend (our emails) and Telegram (alerts to our team).
People and services you choose. When you publish, your post goes to the social networks you choose, and anyone who can see it there. When you send a take to your office, the office's administrators see it. When you tag a collaborator, the social network and that collaborator see the tag.
Google and Meta, through our website. Our website sends information about your visit to Google and Meta to measure our site and ads. When you start a free trial on our website, it also tells them that a trial started, with a reference number for the trial but not your name or email address. Meta can also use it for its own advertising purposes. You can control this: see the Cookie Notice.
Advisers and authorities. Our accountants, lawyers and insurers where they need it, and regulators, courts or police where the law requires or allows it.
If the business changes hands. If all or part of our business is sold or merged, personal information may pass to the new owner, who will be bound to handle it as this policy describes.
We do not sell personal information.
Our main database and our backend computing are in Sydney, Australia. Many of our service providers are in the United States, and some information is sent there, including recordings, audio and transcripts (for transcription, AI features, rendering and publishing), account details (for sign-in, payments and email) and website visit information (for analytics and ad measurement).
Some providers with worldwide networks (Google, Cloudflare, Stripe, Meta and Microsoft) may also handle information in other countries where they operate, which they do not list in advance. Our social posting provider, Zernio, is based in Spain and stores the videos it publishes for you in Western Europe. Our email provider, Resend, is a United States company. Our emails are sent from its Tokyo region in Japan, and Resend stores its account data, including its records of the emails it sends for us, in the United States. Alerts to our team go through Telegram, whose team is based in Dubai, United Arab Emirates. Telegram stores chats in data centres in several countries, which it does not name.
We choose providers that protect the information they handle for us, and we give each one only what it needs for its job. Most of them are bound by data processing terms that let them use it only to provide their service to us. Meta and Microsoft (for Clarity) are different: they also use information from our website for their own purposes, under their own terms.
We store your information with the providers listed above. We protect it by:
Our database and file storage providers (Neon, Cloudflare and Amazon Web Services) encrypt the data they store. No system is completely secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access.
We keep information only as long as we need it for the purposes in this policy, then delete it or make it anonymous.
A recording. In the app, "Delete recording" removes the video, its transcript, captions, edits and brand check report. "Delete from library" also removes the question, notes and Quote Bank lines for that item. You cannot delete a take while it is scheduled or published; unschedule it first. Deleting a take in Tention does not delete a post that is already on a social network.
A few things stay after you delete a recording: the record that a brand check ran (counts only), the topic summary, usage records, and Quote Bank lines unless you delete the whole item. On older versions of the iPhone app, a separate audio copy of a take could be made that is not removed with the recording. If you replaced a take by re-recording it, the earlier take is kept with the item until you delete the item from your library or delete your account. A copy of any edited video we rendered for you can also stay with our rendering provider, Amazon Web Services, after you delete the recording.
Your account. In the iPhone app, go to Settings and choose "Delete account". On the web, email privacy@tention.app. When you delete your account, you lose access straight away, and any web subscription you pay for is cancelled. If you subscribed through Apple, cancel in your Apple account settings as well, or Apple will keep charging you. About 30 days later, your account and the content in it are permanently deleted, including the video and audio files, rendered videos and social connections our providers hold for us. Two things are kept: campaign records (about 13 months), and content you had already sent to an office account, which stays with that office. Logs, job history and backups expire on the schedules above. Stripe and Apple keep payment records as the law requires.
We may send you messages about Tention's features, offers and events:
Every marketing message says it is from Tention and gives you a simple way to opt out, such as an unsubscribe link or replying "stop". Our offer emails carry an unsubscribe link, and your mail app's own unsubscribe button works too; either stops them straight away. We act on other opt-outs within 5 business days. You can also email privacy@tention.app to stop marketing. Messages about your account, such as sign-up and sign-in codes, invitations, trial reminders and billing notices, are not marketing and will still be sent.
You are responsible for what you record, write and publish, including information about other people. Don't include clients' names or personal details in your videos. If you feature a colleague or anyone else in a way that identifies them, make sure they have agreed, and that you meet your own obligations under privacy law and your licence. Recording a private conversation without everyone's consent can be an offence in some states.
You can see and change most of your account and profile information in the app. You can also ask us for a copy of the personal information we hold about you, or ask us to correct it, by emailing privacy@tention.app.
We may need to check your identity first. We will respond within 30 days. We do not charge for making a request or for correcting information. If giving you a copy takes significant work, we may charge a reasonable amount, and will tell you first. If we refuse a request, we will tell you why in writing and how to complain.
If you think we have mishandled your personal information, email privacy@tention.app with the details. We will acknowledge your complaint within 5 business days and aim to respond in full within 30 days.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) for information about your options: oaic.gov.au, phone 1300 363 992.
If a data breach is likely to cause serious harm to the people whose information is involved, we will tell them as soon as practicable, and tell them what they can do to protect themselves.
Tention is for people aged 18 and over who use it for their business. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.
Tention is made for Australian businesses. If you use it or visit our website from another country, we handle your information as this policy describes and under Australian law. The laws where you live may give you other rights; contact us and we will help.
We will update this policy when Tention or the law changes. The date at the top shows the current version. If we make a significant change, we will tell account holders by email or in the app before it takes effect.
The Munna Co Pty Ltd, 81 Watt Road, Mornington, Victoria 3931, Australia. Email: privacy@tention.app