Privacy Policy

This policy explains what TrackBeat collects, why, and what happens to it. The short version: we keep the minimum needed to run your library and your account, your recordings are private to you, and we never listen to or store your microphone audio.

1. What we collect

• Account. Your email address and, if you sign in with Apple or Google, the identifier and name those services share. Sign-in is operated by Clerk. If you use a password, Clerk stores it hashed; we never see it.
• Your music. The recording you upload is kept in your library, privately, so you can play along with the drums on. The upload itself is removed from our processing storage as soon as separation finishes, and the isolated drum track exists only inside the processing job and is discarded with it.
• Your library. For each song: the title you gave it, its length and tempo, the drumless mix and the chart we created, and a fingerprint (hash) of the original file used to recognise re-uploads. Stored until you delete the song or your account.
• Your playing. For each completed take: the difficulty, how many notes were hit well, late or missed, your best combo, which kind of kit you used, and when. We do not record audio or MIDI from your takes; scoring happens on your device and only the totals are sent.
• Microphone. On an acoustic kit, the app listens through the microphone to detect hits, to measure your device’s audio latency, and to learn what each of your drums sounds like. That processing happens entirely on your device. No microphone audio leaves it, and the learned drum profile is stored only on that device.
• Billing. If you subscribe on the website, Stripe handles your card and we store only your Stripe customer id and your plan. If you subscribe in the iOS app, Apple handles payment and we store only that your plan is active. We never see card numbers.
• Settings on your device. Your kit type is saved on your account; your device’s latency calibration, drum profile and pad assignments are saved on that device only.
• Technical. Standard server logs (IP address, browser or app version, request times) kept for a short period for security and debugging.

2. What we don’t do

• We don’t sell or share your personal data with advertisers.
• We don’t use your recordings, mixes, charts or playing data to train models.
• We don’t share your library with other users; it is private to your account.

3. Why we process it

To provide the Service you asked for (processing your song, storing your library, scoring your takes), to bill you, to keep the Service secure and within its usage limits, and to respond when you contact us. Where the law requires a legal basis, it is performance of our contract with you and our legitimate interest in running the Service securely.

4. Who processes it for us

These providers handle data on our behalf under their own security commitments:

• Clerk — sign-in and account identity.
• Neon — the database holding your library index, scores and plan.
• Cloudflare R2 — storage for uploads in transit and for your drumless mixes and charts.
• Modal — the computing service that separates and transcribes your song.
• Vercel — hosts the website and API.
• Stripe (website) and Apple (iOS app) — payments.

Data may be processed in the United States. We may also disclose data when the law requires it or to protect the rights and safety of TrackBeat and its users.

5. How long we keep it

• Library (your recording, the drumless mix, the chart, titles, scores): until you delete the song or the account.
• Account and billing records: until you delete the account; billing records as long as tax law requires.
• Server logs: typically 30 days.

6. Your choices and rights

• Delete any song from your library at any time.
• Delete your account in Settings: this cancels any subscription, erases your library and scores, and removes your sign-in identity.
• Ask us for a copy of your data, or to correct it, at support@trackbeat.studio. Depending on where you live you may have further rights (for example under GDPR or the CCPA), which we will honour.
• Revoke microphone access in your device settings; acoustic-kit features then won’t work.

7. Children

The Service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

8. Security

Data moves over encrypted connections; your library files are reachable only through short-lived signed links issued to your signed-in session; access between our own systems uses secret tokens. No system is perfectly secure, so please use a strong, unique password or a sign-in provider.

9. Changes

We will post updates here and, for material changes, tell you by email or in the Service.

10. Contact

Privacy questions and requests: support@trackbeat.studio.