Privacy Policy

DrumShell (“we,” “us,” or “our”) operates the DrumShell mobile application and website (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Service.

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process your audio files and deliver stem separation results.
• Manage your account, subscriptions, and payment processing through third-party app stores.
• Communicate with you, including sending service updates, security alerts, and support messages.
• Analyze usage patterns to improve features, performance, and user experience.
• Detect, prevent, and address technical issues, fraud, and security threats.
• Enforce our Terms of Service and protect against misuse or abuse of the Service.
• Comply with legal obligations and respond to legal requests.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We use the following categories of third-party services to operate the Service:

• Authentication & Database: We use Supabase for user authentication and data storage.
• Subscription Management: We use RevenueCat and the Apple App Store / Google Play Store to manage subscriptions and payments.
• Audio Processing: We use cloud-based GPU infrastructure to process audio stem separation.
• Analytics & Crash Reporting: We may use analytics tools to understand usage patterns and crash reporting services to identify and fix bugs.

These third-party services have their own privacy policies governing their collection and use of data. We encourage you to review their policies. We are not responsible for the privacy practices of third-party services.

Audio Data: Audio files you submit are processed transiently on our servers for the sole purpose of stem separation. Source audio is automatically deleted from our processing servers within 24 hours of upload. Separated stems are downloaded to your device, and we do not retain persistent copies of your audio files or stems on our servers.

Account Data: We retain your account information for as long as your account is active or as needed to provide you the Service. If you request account deletion, we will delete your personal data within 30 days, except as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

Log & Usage Data: We retain anonymized usage and log data for up to 12 months for analytics and service improvement purposes.

We implement industry-standard technical and organizational security measures to protect your information, including encryption in transit (TLS/SSL) and at rest, access controls, and regular security reviews. However, no method of electronic transmission or data storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.

The Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at hello@drumshell.app.

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where data protection laws may differ. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions where we or our service providers operate. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Portability: Request a portable copy of your data in a structured, commonly used format.
• Opt-Out: Opt out of non-essential data collection and marketing communications.
• Do Not Sell / Share: We do not sell or share your personal information. If this changes, we will provide a mechanism to opt out.

To exercise any of these rights, contact us at hello@drumshell.app. We will respond to your request within 30 days or as required by applicable law.

If you are a California resident, you have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collect personal information, and the business purpose for collecting your personal information. You also have the right to request deletion of your personal information and the right not to be discriminated against for exercising your privacy rights. To exercise these rights, contact us at hello@drumshell.app.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and/or within the app, and by updating the “Last updated” date above. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at hello@drumshell.app.