PRIVACY POLICY

Privacy Policy — Drumtune PRO

Effective date: 28 May 2026.

EXALTD CO., Ltd. ("us", "we", or "our company") operates the drumtunepro.com website and the Drumtune PRO mobile application for iOS and Android (the "Service").

This privacy policy explains how we use the personal data we collect from you when you use the Service.

Our primary goal in collecting personal information and usage data is to let you sign in to your app account and to give you a friendly, customised, and efficient experience.

By using the Service you confirm that you have read and accepted this Privacy Policy, the EULA, and our Terms and Conditions. Unless otherwise defined here, the terms used in this policy have the same meanings as in our EULA and Terms and Conditions.

We know that you care about how your personal information is used. We respect your privacy and comply with the GDPR, the CCPA, and equivalent laws in other regions, regardless of where you are located. We use your data only to provide and improve our apps and website. Read on for the details.

Quick contents

Definitions
What data we collect
How we collect it
How we use it
Who we share it with
Where and how long we store it
Marketing
Payments
Your rights under the GDPR
Account and data deletion
Cookies (website only)
Third-party websites and services
Changes to this policy
How to contact us

Definitions

Service.

The drumtunepro.com website and the Drumtune PRO mobile application (iOS and Android) operated by EXALTD CO., Ltd.

Personal identification information.Data about a living individual who can be identified from that data.

Usage data.

Data collected automatically, either generated by your use of the Service or by the Service infrastructure itself (for example, the duration of a screen visit).

Cookies.

Small files stored on your device (computer or mobile device) when you use the website. Cookies arenotused inside the mobile app.

Drumtune PRO is an app of EXALTD CO., Ltd. The websites drumtunepro.com, exaltd.com, drumtuner-ez.com, and cymlok.com belong to EXALTD CO., Ltd.

Our Service is GDPR-compliant.

If you are in the European Economic Area (EEA), our legal basis for processing depends on the specific category of data, as described below in How we use it.

What data we collect

We collect the categories of data listed below.

Most of it is required to keep your account working; some is optional.

Account identity

Username, email address, and password (for email sign-in).
Apple Sign-In: the stable Apple user identifier returned by Apple for your account. We never see your real Apple ID email if you chose private relay.
Google Sign-In: the signed Google identity token returned at sign-in. We only retain the parts we need to identify your account.
Facebook Limited Login: an anonymised Facebook authentication token. We do not request advertising permissions and we do not enable Facebook's advertiser-tracking signals.

Your password is hashed end-to-end so neither we nor anyone else can read it.

That is why a forgotten password cannot be recovered or emailed to you — we do not know it.

If you forget your password, we send a secure link to your email that lets you create a new one.

Profile

Your name and optional band name.
Your optional profile picture (selected by you from your iOS Photo Library or via the camera).
Your optional shipping address, if you chose to enter one in the app's Addresses section.

Drum and tuning data

Your custom drums, tuning presets, and kits. Stored on your device by default; uploaded to our backend only when you choose to back up so you can restore on a new device or after a reinstall.

Audio

Tuner microphone.The tuner uses your microphone to analyse drum hits in real time — impact strength, fundamental, timbre, overtone frequencies. This audio stays in memory on your device. It is never written to disk, never sent to our servers, and never shared with third parties.
Recorder microphone.The recorder lets you capture songs, rehearsals, practice sessions on iOS. The audio is saved on your device. It only leaves your device if you explicitly back up to your own iCloud Drive, attach a recording to a bug report, or share via the iOS share sheet.

Device data

Apple Push Notification (APNS) device token. Used to deliver expansion-pack-availability and product-update notifications. Stored in the iOS Keychain on your device. You can disable notifications in iOS Settings at any time.
Device model, operating system version, and an anonymous device install identifier. Used to fix bugs and improve compatibility across the wide range of Apple and Android devices.
App performance and crash diagnostics — exception traces, OS version, the device model in anonymised form. Used to find and fix bugs.

Bug reports (only when you initiate one)

If you tap "Report a problem" or shake the device to file a bug (iOS), the app prepares an email to support@drumtunepro.com.

The email may include the screenshots you attached, a short voice memo if you chose to record one, a brief screen recording if you chose to capture one, your contact email (so we can write back), and a small technical summary (device model, OS version, app version, free disk space, microphone permission state).

You see the email content before it is sent and you can edit or cancel it.

Nothing is sent without your explicit Send tap.

iCloud Drive (optional, your iCloud, your data)

You can choose to back up your tuning presets and audio recordings to your own iCloud Drive from the Backup screen.

When you do this:

The backup is created insideyouriCloud container.
We do not receive a copy and cannot read it.
Apple's at-rest encryption applies per Apple's published terms.
You can delete the backup at any time from the iOS Files app or from inside Drumtune PRO.

Drumtune PRO Watch App (Coming soon WatchOS)

The Watch App receives only your kits and drum definitions from the iPhone, so the watch face can display your saved tuning targets at the kit.

It receives no authentication tokens, no audio, no email address, no personal identifier.

How we collect your data

Most of your data comes directly from you when you:

Register or sign in to an app account, or place an order on one of our websites.
Optionally complete a customer survey, post to one of our message boards, or email us.
Use one of our websites (cookies — see the Cookies section below).
Back up your tuning presets via Even More → My Profile → Back-up & restore.
Email our support or send us a Facebook message.
Use a feature that needs your microphone (tuner, recorder).
Tap "Report a problem" inside the app to file a bug report.

Some data is generated automatically when the app crashes or hangs (anonymised crash diagnostics — seeThird-party services).

Third-party services

Drumtune PRO uses a small number of third-party services to keep the apps working and to fix bugs.

Every service is configured for the minimum data necessary, and we have data-processing agreements in place where required by law.

Apple— Sign In with Apple, Apple Push Notification service, App Store In-App Purchases. Apple Privacy Policy.
Google (Firebase)— Crashlytics for crash diagnostics, Firebase Analytics for anonymised usage telemetry, Firebase Cloud Messaging for push delivery, Google Sign-In for authentication. Google Privacy Policy.
Meta (Facebook)— Facebook Login, Limited Login mode. Advertiser-ID collection and auto-logged app events are explicitly disabled. Meta Data Policy.
Amazon Web Services— hosting of product and expansion-pack imagery on Amazon S3 (US-West-2 region). No personal data, only public catalogue assets.
Our backend operatorat apiv2.drumtunepro.com— auth, preset sync, address book, expansion-pack catalogue. Hosted on US-based servers.
Our development partner under license, is acting as a GDPR Article 28 processor on our behalf for the technical operation of the app.

The Drumtune PRO iOS app does not integrate Google AdSense, Google Ads, DoubleClick, AdMob, the iOS IDFA, or any other cross-app tracking SDK. If you used an older version of this policy that mentioned those services, please disregard — they are not active.

There is no in-app advertising on iOS.

How we use your data

We collect your data so that we can:

Manage your account and process your order.Lawful basis: performance of contract (GDPR Art. 6(1)(b)).
Offer the 7-day free trial of the Android version of Drumtune PRO. We deliberately do not enrol you in the Play Store's automated subscription model — we prefer a genuine free trial so you can decide for yourself whether to subscribe, purchase, keep the free features, or uninstall after the trial.Lawful basis: performance of contract.
Email you with support replies.Lawful basis: performance of contract.
Fix bugs and improve the apps so they run smoothly across the wide range of Apple and Android devices.Lawful basis: legitimate interest (Art. 6(1)(f)).
Restore your backed-up tuning presets to your device, or move them between iOS and Android.Lawful basis: performance of contract.
Send you product-update notifications about expansion packs and major releases (push notifications you can disable in iOS Settings).Lawful basis: legitimate interest.
Send you a quarterly newsletter, if you opted in. You can opt out from any newsletter at any time using the link at the bottom of every email.Lawful basis: consent (Art. 6(1)(a)).

Who we share your data with

We will not sell, rent, transfer, or otherwise disclose your personally identifiable information to third parties, except as described in this policy or as you have explicitly authorised.

We share data with the third-party services listed above in Third-party services.

For example, when the app crashes on your device, the crash trace is sent to Apple and to Google Crashlytics so we can see in which line of code the crash happened, on what device model, and fix it.

We may also share personally identifiable information with third parties in these specific cases:

With our service providers, when this is necessary to process a payment you have made or to provide a business, professional, or technical support function for us or for you.
When we believe in good faith that disclosure is necessary to protect our rights or those of any third party, including to investigate or prevent illegal activity, fraud, or abuse of the Service.
To respond to subpoenas, court orders, or legal process, or to provide information to law enforcement when required or permitted by law.
In connection with a merger, acquisition, restructuring, or sale of EXALTD CO., Ltd., your personal data may transfer to a successor entity. We will notify you in advance if this happens.

Where and how long we store your data

Where your data is stored.Your personal data is stored on servers located in the United States, with cloud-server providers that maintain industry-standard encryption at rest and TLS in transit. The exact provider for each service is listed under Third-party services.

EXALTD CO., Ltd. is established in Hong Kong, so personal data may be transferred between Hong Kong (the controller's seat) and the United States (where the data is processed).

By using the Service you consent to this transfer.

For residents of the European Economic Area and the United Kingdom, we rely on the European Commission's Standard Contractual Clauses (and the UK equivalent) with each of our US-based processors so that EU/UK personal data continues to receive a level of protection consistent with GDPR / UK GDPR. Where additional safeguards are required by law, we apply them.

To better protect our apps from tampering and to limit your exposure to privacy risks, we encrypt our apps and include device-integrity checks (hooked / rooted / emulator detection).

Retention periods.

Account data(email, name, addresses, presets) — kept for the lifetime of your account, plus a 30-day grace period after a deletion request, then erased.
Crash diagnostics(Firebase Crashlytics) — kept for 90 days, then automatically deleted by Firebase.
Usage telemetry(Firebase Analytics) — kept for 14 months, then automatically deleted.
Bug-report emailsin our support inbox — kept for up to 18 months, then deleted.
Audio recordings on your device— kept until you delete them yourself, or until you delete the app.
Microphone audio used by the tuner— not retained at all; it stays in memory only.
Anonymised records of past financial transactions(in-app purchases) — retained for the period required by applicable tax law, after your identity has been removed from them.

The security of your data is important to us, but no method of transmission over the Internet or method of electronic storage can be guaranteed 100% secure. We use commercially reasonable means to protect your personal data. In the event of a personal-data breach, we will notify you and the relevant supervisory authority within 72 hours, as required by GDPR Articles 33–34.

Marketing

We do not send you information about products and services of third parties.
We do not share, trade, or sell your personal information with third parties for marketing purposes.

We may send a quarterly newsletter. If you have agreed to receive it, you can opt out at any time using the unsubscribe link at the bottom of the email.

Ads during the 7-day free trial (Android only)

On theAndroid version only, we may show advertisements during your 7-day free trial to help support the cost of offering that trial. The iOS version of Drumtune PRO does not show advertisements.

On Android, the third-party ad services we may use during the trial include Google AdMob, Google Ads, and Facebook Audience Network.

To opt out of personalised advertising:

Google: Google Ads Settings.
Facebook: Facebook Ad Preferences.
Or use the ad-personalisation settings on your Android device.

Payments

Some Drumtune PRO products and services are paid.

When you decide to purchase Cymloks via exaltd.com, or to make an in-app purchase via the App Store or the Play Store, we use third-party payment processors:

Apple App Store— for in-app purchases inside Drumtune PRO on iOS. Apple Privacy Policy.
Google Play Store— for in-app purchases inside Drumtune PRO on Android. Google Privacy Policy.
PayPal— for physical Cymlok purchases made via exaltd.com (not used inside the Drumtune PRO app itself). PayPal Privacy Policy.

We do not store or collect your payment card details. That information is provided directly to the third-party payment processors and is governed by their privacy policies. These processors adhere to the PCI-DSS standards set by the PCI Security Standards Council.

Your rights under the GDPR (and equivalent rights elsewhere)

Data-protection rights

If you are a resident of the European Economic Area (EEA), the United Kingdom, California, or another jurisdiction with comparable privacy law, you have these data-protection rights. EXALTD CO., Ltd. takes reasonable steps to let you exercise them.

Right of access— you can request a copy of the personal data we hold about you.
Right to rectification— you can ask us to correct inaccurate data or complete incomplete data.
Right to erasure— you can ask us to delete your personal data, subject to certain legal conditions.
Right to restrict processing— you can ask us to limit how we process your data, in defined circumstances.
Right to object— you can object to processing based on legitimate interest.
Right to data portability— you can ask us to send your data to another organisation, or directly to you, in a machine-readable format.
Right to withdraw consent— where processing relies on consent (for example, marketing newsletters), you can withdraw it at any time.
Right to lodge a complaint— with your local supervisory authority. For EEA residents this is the data-protection authority of your country of residence. We will help you find the right one if you contact us.

To exercise any of these rights, email support@drumtunepro.com. We aim to respond within 30 days, as required by GDPR Article 12(3).

Account and data deletion

You can delete your account and all associated personal data directly from within the app:

Even More → My Profile → Delete account.

Once you confirm, the process is irreversible and the following happens:

Your server-side account record is processed by our backend: every piece of personal information (email, name, addresses, profile data) is anonymised or erased, and linked tables (social-login identifiers, device info, active sessions, custom tuning presets) are permanently deleted. This applies to both V2 and V3 endpoints.
Authentication tokens stored on your device's iOS Keychain are erased.
The link between your account identifier and Firebase Crashlytics / Analytics records is removed, so any future crash or event from the device is attributed to an anonymous session rather than you.
The local on-device database of presets and kits is wiped.
Audio recordingfileson your device arenotautomatically deleted — you keep the right to extract or delete them at your own pace via the Files app, the recorder screen, or by deleting the app entirely.
iCloud Drive backups that you previously created stay in your iCloud and are not touched by this process — they belong to you. Remove them from the iOS Files app whenever you wish.

Data obtained from third-party authentication providers (Apple, Google, Meta) is removed in step 1, unless retention is required by applicable law.

If you would like to keep a copy of your tuning presets before deleting the account, you can save a local backup first via:

Even More → My Profile → Back-up & restore tuning presets → Make local backup.

Your app license and past purchases are not affected by deleting your account.

Purchases are linked to your Apple ID or Google account, not to your Drumtune PRO account. Anonymised records of past transactions are retained for the period required by applicable tax law.

Cookies (website only)

The Drumtune PRO mobile app does not use cookies.

The drumtunepro.com, drumtuner-ez.com, and exaltd.com websites do. The information below applies only to the websites.

Cookies are small text files placed on your computer to record standard Internet log information and visitor-behaviour information.

When you visit our websites we may collect information automatically through cookies or similar technology.

How we use cookies on the websites

To keep you signed in.
To understand how you use the website and how it performs on your system.
To show localised pricing.

Cookie categories on the websites

Functionality cookies— let the site recognise you and remember your preferences (language, location). A mix of first-party and third-party cookies.
Analytics & advertising cookies— Google Analytics and Google Ads. These collect information about your visit, the content you viewed, the links you followed, your browser, your device, and your IP address. Google may share limited aspects of this data with advertising partners.

How to manage website cookies

You can set your browser not to accept cookies. allaboutcookies.org explains how. A few site features may not work fully if you decline cookies.

Third-party websites and services

Our websites and apps may contain links to third-party sites or services. Those sites are not under our control. Their privacy and security practices are governed by their own privacy policies, not by this one. We are not responsible for the privacy or security practices of those third-party sites or services.

Apple App Privacy and Apple App Tracking Transparency

Drumtune PRO for iOS ships with an Apple Privacy Manifest that declaresNSPrivacyTracking = false. We do not track you across other companies' apps or websites within the meaning of Apple's App Tracking Transparency framework. We do not read the iOS advertising identifier (IDFA). Our App Store privacy nutrition labels reflect the categories described inWhat data we collect, above.

Changes to this policy

We keep this policy under regular review and post any updates on this page. We update the effective date at the top whenever we publish a change. If a change is material — for example, if we add a new category of data or a new processor — we will surface a notice inside the app on next launch, in addition to updating this page.

By continuing to use the Service after the effective date of an updated policy, you accept the updated policy.

How to contact us

If you have any question about this privacy policy, about the data we hold on you, about exercising any of your rights, or if you wish to report a complaint, please email us at support@drumtunepro.com.

EXALTD CO., Ltd.
Des Voeux Road 61–65, CBB 6F 603
Central, Hong Kong

For European Economic Area residents, our representative under GDPR Article 27 can be contacted via the email above. We will route your enquiry to them within 5 working days.