Privacy Policy

Last updated: September 5, 2026

Resonate Drum Tuner ("the App") is developed and operated by Sonique Digital Studios, a division of Sonique LLC, under the DrumOps brand. This policy applies to the App on both the Google Play Store and the Apple App Store, and explains what the App accesses, what leaves your device, why, and what rights you have over it.

Data Controller

The data controller responsible for the App and for this policy is Sonique LLC, the legal entity behind Sonique Digital Studios and the DrumOps brand. You can reach us at any time at admin@soniquedrums.com.

Microphone Access

The App uses your device's microphone solely to detect drum pitch and resonance in real time. All audio analysis happens entirely on your device. No audio, no recordings, and no derived measurements are ever transmitted off your device or stored outside the App. The App does not record or retain audio — incoming sound is analysed in memory and discarded.

Your device will ask for microphone permission before the App can listen. You can withdraw that permission at any time in your device settings; the App's tuning features will stop working, but nothing else is affected.

Data Stored on Your Device

Tuning profiles, kits, sessions, sound targets, reference libraries and tuning history are written to a database on your device only. They are never uploaded to us or to anyone else. We cannot see them, and we cannot recover them for you.

If you use the export features, the resulting .xlsx or .resonatelib file is created on your device and goes wherever you choose to send it. Once you share a file, it is outside our control and outside this policy.

Deleting the App deletes this data. Please export anything you want to keep first.

Crash Diagnostics

The App uses Firebase Crashlytics, a service provided by Google, to report crashes so we can fix them. When the App crashes, a report may include:

• device model, operating system version, and App version;
• the state of the App at the moment of the crash, including the drum type, lug count and head type in use, so we can reproduce the fault;
• a randomly generated installation identifier, so that repeated crashes from one installation can be recognised as related.

Crash reports contain no name, email address, contact details, location, advertising identifier or audio. The installation identifier is not linked to you and is reset if you reinstall the App. We use this data only to diagnose and fix defects.

Under the GDPR, a device-linked identifier of this kind can still count as personal data, which is why it is described here in full.

Purchases

Resonate Pro is a one-time purchase. Purchases are processed entirely by the store you bought from — Google Play Billing on Android, or the Apple App Store on iOS. We never receive, store, or have access to your payment card, billing address, or store account details.

The App asks the store whether the current device holds a valid Pro entitlement, and receives back only a yes or no. Google and Apple act as independent controllers for the purchase data they hold, under their own privacy policies.

App and Device Integrity (Android)

On Android, the App may use the Google Play Integrity API to confirm that it is a genuine, unmodified copy running on a genuine device, which protects paid features from tampering. This sends a signed integrity token to our verification endpoint, which passes it to Google for decoding and receives back a verdict. The token describes the app and device, not you: it contains no name, contact details, or content from the App, and we do not store it. This check does not run on iOS.

Legal Bases for Processing (EEA and UK)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Microphone access — your consent, given through your device's permission prompt (Art. 6(1)(a)). No personal data reaches us from this, as the audio never leaves your device.
• Crash diagnostics — our legitimate interest in keeping the App stable and secure (Art. 6(1)(f)). We have weighed this against your interests and consider it minimal in impact, since the data is anonymous to us and used only to fix defects.
• Purchases and Pro entitlement — performance of our contract with you (Art. 6(1)(b)).
• App and device integrity — our legitimate interest in preventing fraud and unauthorised use of paid features (Art. 6(1)(f)).

Who Receives Data

The App uses the following third-party services, each governed by its own privacy policy:

• Firebase Crashlytics (Google) — anonymous crash reporting. Firebase privacy
• Google Play Billing (Google, Android only) — in-app purchase processing. Google privacy
• Google Play Integrity (Google, Android only) — app and device integrity verification.
• Apple App Store / StoreKit (Apple, iOS only) — in-app purchase processing. Apple privacy

We do not sell or share personal data, and we do not disclose it to anyone else except where we are legally required to.

No advertising SDKs, no analytics platforms, and no tracking. The App does not use the advertising identifier, does not request App Tracking Transparency permission, and does not track you across other companies' apps or websites.

International Transfers

Google and Apple process data in the United States and in other countries. Where data is transferred out of the EEA or the UK, that transfer is made under the safeguards those providers maintain — the EU–U.S. Data Privacy Framework and its UK extension, and/or Standard Contractual Clauses approved by the European Commission. We hold no servers or databases of our own containing your personal data.

How Long Data Is Kept

Data stored on your device stays there until you delete it or uninstall the App. Crash reports are retained by Firebase Crashlytics for a limited diagnostic period, currently up to 90 days, after which they are deleted by Google. Integrity tokens are checked in the moment and not retained. Purchase records are kept by Google or Apple under their own retention policies, not ours.

Your Rights

If you are in the EEA or the UK, you have the right to access, correct, erase, restrict or object to the processing of your personal data, and the right to data portability. Where processing relies on consent — such as microphone access — you may withdraw it at any time in your device settings, without affecting processing carried out beforehand.

To exercise any of these rights, email admin@soniquedrums.com. We respond within one month, as the GDPR requires.

Please note one honest limitation: because the App has no accounts and we hold no identifier that links a crash report to you, we usually cannot locate data as "yours". Where we cannot identify you from the data we hold, and you cannot supply information that lets us do so, Art. 11 GDPR means some rights may not be exercisable. Everything else — your tuning data — is already entirely in your hands on your own device.

You also have the right to lodge a complaint with your national data protection supervisory authority, or with the UK Information Commissioner's Office. A list of EEA authorities is published by the European Data Protection Board.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

Children's Privacy

The App is not directed at children and we do not knowingly collect information from children under 13, or under 16 in EEA countries that apply that higher age limit. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to This Policy

If this policy changes materially, the updated version will be posted at this URL with a revised "Last updated" date. Where the change requires it, we will seek your consent again.

---

Contact

Questions about this policy, or a data protection request? Reach us at admin@soniquedrums.com.