Privacy Policy

Account Information

You can create an account with Sign in with Apple or with Google. From Apple we receive your Apple-provided user identifier and, if you choose to share it, your name and email address; Apple's Hide My Email gives us a relay address instead of your real one. From Google we receive your Google account identifier, name, email address, and profile picture. We never receive or store your Apple ID or Google password.

Practice Data

The app records what you practiced: drills completed, tempo, duration, streaks, personal records, achievements, and your progress through skill paths. This is stored on your device and, if you are signed in, synced to our servers so it is available across your devices and survives reinstalling the app.

Drummer Profile

Your profile holds the details you enter — display name, avatar, skill self-assessment, playing stance, practice preferences, and optionally a bio, favorite artists, and links to your TikTok, Instagram, or YouTube. Some of this is public; see “Content You Share Publicly” below.

Content You Create

Beats, fills, sessions, and collections you build are stored on our servers so they sync across your devices. They stay private to your account unless you publish or share them.

Subscription Information

Purchases are handled by Apple's In-App Purchase on iOS and Google Play Billing on Android. We receive confirmation of your subscription or purchase status from the app store, and we store a per-account identifier that lets us tie a verified purchase to your account. We never see or store your card number, billing address, or store account password.

Device and Technical Information

To operate the service we store the device identifier, model, OS version, and app version for each device you sign in from, plus a push notification token if you enable reminders, and your time zone so reminders arrive at the right local time. We also log IP addresses briefly to rate-limit sign-in and purchase endpoints and protect against abuse.

Email Communications

We send four categories of email to the address linked to your account:

• Account emails — security alerts, sign-in links, billing receipts, and other messages necessary to operate your account. These are sent whenever required and cannot be turned off while you have an account.
• Account check-ins — occasional messages about the state of your account, such as a one-time reminder with an offer if you sign up but never get started. These are on by default because they relate to your account, and every one includes an unsubscribe link that stops them permanently.
• Product updates — announcements about new features, drill packs, and improvements. Sent only if you opt in.
• Offers and promotions — discounts, sales, and other marketing beyond account check-ins. Sent only if you opt in.

You choose your product-update and promotional preferences during signup and can change them any time in Settings → Notifications; account check-ins stop via the unsubscribe link in the email. We record every choice (with timestamp and source) so we have an auditable consent trail.

Support and Contact Forms

If you contact us through the website or submit in-app feedback, we receive the name, email address, and message you provide, so we can reply and investigate.

Apple and Google

We use Sign in with Apple and Google Sign-In for authentication, and Apple's In-App Purchase and Google Play Billing for purchases. Apple's and Google's own privacy policies govern their handling of your data.

Apple Music

If you connect Apple Music, we use it to search the Apple Music catalog when you pick favorite artists for your profile, and to control playback for play-along practice. We do not read your music library contents or your listening history, and we do not store your Apple Music data on our servers.

YouTube

If you connect your YouTube account for play-along practice, we use YouTube API Services to search for and play videos within the app.

To keep the connection working between sessions, we store your YouTube OAuth access and refresh tokens on our servers, along with your channel ID, channel name, and channel avatar so we can display the connected account and optionally show it on your profile. We use these solely to enable playback and to show which account is connected. We do not read your watch history, subscriptions, or any other YouTube account data, and we do not share this information with third parties.

You can disconnect your YouTube account at any time in the app's settings, which deletes the stored tokens and channel details from our servers. You can also revoke DrumShed's access directly through Google's security settings.

Your use of YouTube features is also subject to YouTube's Terms of Service and Google's Privacy Policy.

AI Features

When you use AI-powered features (such as the session builder or beat and fill generation), your messages and practice context are sent to our servers for processing. Conversations are stored with a conversation identifier to maintain session context and enable conversation history.

If you submit AI feedback through the in-app feedback form, your feedback is linked to the associated conversation. We may review the conversation history connected to your feedback to identify issues and improve AI quality. Conversation data is used solely for service improvement and is not shared with third parties for marketing or advertising purposes.

AI responses are generated by third-party AI providers, which we reach through the AI routing service OpenRouter. Your messages are processed to generate responses but are not used to train third-party AI models.

Crash Reporting and Analytics

We use Sentry for crash reporting and performance monitoring. Your account identifier and subscription tier are attached to error reports to help us diagnose issues. Sentry may also collect device information, app state, and network request metadata.

We also record aggregate operational metrics — request counts, error rates, and feature usage totals — to monitor the health of the service. This data is used solely to keep the service running well and is never shared for advertising purposes.