Privacy Policy

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Display name (optional)
• Authentication provider (Apple or email/password)

1.2 Usage Data

We collect data about your practice sessions:

• Exercise name, mode, and BPM
• Session duration and completion count
• Performance metrics (score, accuracy, combo)
• XP earned and level progression

1.3 Device Information

We may collect:

• Device model and operating system version
• App version
• General crash and performance data

1.4 Microphone Access

The app requests microphone permission solely to detect drum hits for gameplay. Audio is processed locally in real-time and is never recorded, stored, or transmitted. No audio data leaves your device.

2. How We Use Your Information

We use collected data to:

• Provide and improve the app experience
• Sync your progress across devices
• Calculate XP, levels, and session statistics
• Respond to suggestions and feedback
• Fix bugs and improve performance

3. Data Storage and Security

• Data is stored locally on your device (UserDefaults) and optionally synced to Firebase Firestore when you create an account.
• Firebase provides encryption in transit (TLS) and at rest.
• Your practice data is only accessible by your authenticated account.
• Passwords are managed by Firebase Authentication and are never stored in plaintext.

4. Data Sharing

We do NOT:

• Sell your personal data to third parties
• Share your data with advertisers
• Use your data for targeted advertising
• Transfer data to third parties for marketing purposes

We may share data only:

• With Firebase/Google for infrastructure services (governed by Google's privacy policies)
• If required by law or legal process

5. Data Retention and Deletion

• You can delete your account at any time from Settings > Account > Delete Account.
• Account deletion permanently removes all your data from our servers.
• Local data remains on your device until you uninstall the app.
• Suggestions submitted are retained for product improvement but are not linked to deleted accounts.

6. Children's Privacy

Drummapp is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us.

7. Your Rights

You have the right to:

• Access your personal data (visible in the Profile tab)
• Delete your account and associated data
• Withdraw microphone permission at any time via device settings
• Opt out of account creation (use the app locally without syncing)

8. Third-Party Services

The app uses:

• Firebase Authentication (account management)
• Firebase Firestore (data sync)
• Apple Sign-In (authentication option)

These services have their own privacy policies:

• Google/Firebase: https://firebase.google.com/support/privacy
• Apple: https://www.apple.com/legal/privacy

9. Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the "Last updated" date. Continued use of the app constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests:

Email: suporte@drummapp.com