Your practice stays with you.

The data controller is the publisher identified on DrumPeak's Google Play listing (“DrumPeak”, “we”, “us”). Privacy contact: percodestudio@gmail.com.

The publisher's full legal name and address will match the public developer details shown by Google Play.

With your permission, DrumPeak uses the microphone to detect the timing of nearby taps. Audio is analysed live and solely in device memory.

• we do not save audio recordings;
• we do not upload audio to our server or Google;
• we do not listen in the background; analysis only runs during a visible exercise or calibration session.

Declining microphone access prevents tap scoring but does not cause any data to be sent.

Settings, calibration, completed exercises, and results are stored locally in the app's private storage. DrumPeak requires no account and does not sync progress to the cloud. Clearing app data or uninstalling removes local progress.

When you buy or restore access, Google Play processes payment under its own policy. DrumPeak receives a technical purchase token, product identifier, status, and transaction time, not your card number, name, address, or Google Account email.

We send the token over an encrypted connection to our server, store it encrypted, and use it only to confirm Full access, handle refunds, and prevent abuse. A one-way token hash identifies repeat requests for the same transaction.

We use Google Play Integrity when verifying a purchase. A cryptographic request hash is sent to Google, and our server receives verdicts about app authenticity, licensing, and device integrity. We do not use this information for profiling or advertising.

The server processes the time and result of verification, entitlement state, and Google Play event identifiers. The IP address is processed transiently for transport and rate limiting. We do not keep routine request logs containing the IP address, path, or request body. A limited operational-event log contains only an error category or service status, without tokens or request content. Purchase records are retained as needed to provide access, process refunds, keep accounting records, and meet legal obligations.

Google reviewer access codes are stored only as secure hashes and have an expiry and use limit.

• contract: providing the app and Full features;
• legitimate interests: securing purchases, diagnosing failures, and preventing abuse;
• system permission: microphone access, which you may withdraw in Android settings;
• legal obligation: accounting records and binding legal requests.

We use Google Play for payment, licensing, and Integrity, plus a hosting provider for the server. Providers act as independent controllers or processors under appropriate terms. We do not sell data, share it with advertisers, or use third-party analytics. Google may process data outside the EEA using safeguards described in its documentation.

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to processing. You may also complain to your local data-protection authority; in Poland this is the President of the Personal Data Protection Office (UODO). Because we have no accounts, locating a purchase record may require transaction details from Google Play; do not send them in an ordinary email until we provide secure instructions.

DrumPeak is intended for users aged 9 and above and may participate in Google Play Families. We do not ask children for contact details or create profiles. A parent or guardian should approve purchases using Google Play controls.

We will show a new effective date for material changes and provide in-app notice where required. Send privacy questions and requests to percodestudio@gmail.com.