Privacy Policy

Last updated: 15 August 2026 · Questions? mark.yourapps@gmail.com

The short version

Rodrum is offline-first. By default, with no account, your practice data never leaves your device — it lives in your browser's local storage on your phone or computer. We never sell your data. The free version of the mobile app shows ads (Google AdMob); Rodrum's public tool pages (rodrum.com's metronome, tap tempo, rudiments, and about pages) may also show ads (Google AdSense) once that's enabled. Premium removes ads everywhere they can appear (see below); the practice-tracking app itself — streaks, logging, routines, sync — never shows ads, on any platform. A few optional features send data off your device only when you choose to use them; each is described below.

Offline by default

The whole core app — streaks, freezes, fast logging, routines, and stats — works with no account and no internet connection. When you use it this way, nothing you record is transmitted anywhere. You can export all of your data to a file at any time from Settings.

1. Accounts & sync (Supabase)

• What: if you choose to sign in, we store your email address and your practice data (sessions, songs, routines, streak state).
• Why: so your progress syncs across your devices. This is optional — the app is fully functional without an account.
• Where: with Supabase, our database and authentication provider, acting as our processor. It is encrypted in transit (HTTPS/TLS).
• Signing out: signing out removes the practice data cached on that device — your sessions, songs, routines and streak state are cleared locally, so the next person to use the device does not see them. Your data stays in your account and comes back when you sign in again. A random device identifier and sync bookkeeping are kept on the device so that syncing works correctly next time; neither contains your practice data, your email, or anything that identifies you personally.
• If you are offline: anything you log is stored on your device and sent when you reconnect. Until then it has not left the device.

2. AI practice coach (Anthropic)

• What: when you use the voiced AI coach (a premium feature), the practice text you submit is sent to Anthropic to generate the coaching response.
• Why: to produce a reply about what you actually practiced. This happens only when you use the coach — it is opt-in.
• Where: Anthropic acts as our processor for that request. The request is encrypted in transit (HTTPS/TLS) and is transient — we do not retain your coach prompts on our servers.

3. Purchases (RevenueCat)

• What: if you buy Premium, purchase and entitlement information (which plan you own) is processed by RevenueCat and the app store / payment provider. We do not receive or store your card details.
• Why: to unlock and validate your premium features. This applies only if you choose to purchase.
• Where: RevenueCat and the payment provider act as processors, and the data is encrypted in transit (HTTPS/TLS).

4. Ads (Google AdMob & AdSense — free tier only)

• What (mobile app — Google AdMob): the free version of the Rodrum mobile app shows ads served by Google AdMob. To do this, Google's advertising SDK may access device and advertising identifiers and similar signals to select and measure ads.
• What (public tool pages — Google AdSense): Rodrum's public tool pages — rodrum.com's metronome, tap tempo, rudiments, and about pages, reached without signing in — may show ads served by Google AdSense, a different processor from AdMob, once that's enabled. This never applies to the practice-tracking app itself (streaks, logging, routines, sync), which shows no ads on any platform.
• Consent (AdMob, mobile app): where the law requires it (for example in the EEA and UK), you are shown Google's consent form before any personalised ad is requested. If you do not consent, ads are not shown.
• Consent (AdSense, public tool pages): the same rule applies on the web — once AdSense ads are enabled, where the law requires it (for example in the EEA and UK) a consent choice is shown before any ad is requested, and if you do not consent, no ad is requested.
• Removing ads: buying Premium removes ads entirely — on the mobile app and on the public tool pages alike — and never for signed-in Premium users on any platform. The practice-tracking app itself has never shown ads, free or Premium.
• Where: ad data (from either AdMob or AdSense) is handled by Google under Google's Privacy Policy. Unlike our other providers, an ad network uses this data for its own ad delivery and measurement, not solely as our processor.

5. Product analytics (Google Analytics, Firebase Analytics & Vercel Web Analytics)

• What: non-identifying product events — practice actions (like a session logged), streak milestones, and a handful of funnel events (such as reaching the app from one of rodrum.com's public tool pages, creating an account, or subscribing). We never send your email address or the content of what you practiced.
• Why: to understand which pages and features are actually used, so we can improve them.
• Where: Google (Google Analytics 4 on the web, Firebase Analytics on the mobile app) and Vercel (Vercel Web Analytics, page-view counts only) act as our processors for this data.
• Off by default: product analytics is off entirely unless we've configured a Google Analytics measurement id or Firebase project for a given build — no id, no analytics, not even a silent request.
• Consent (web): where the law requires it (for example in the EEA and UK), analytics on rodrum.com — the public tool pages and the practice-tracking app alike — needs its own consent choice, separate from the ad consent choice in section 4 above — accepting ads does not turn on analytics, and vice versa. Analytics fails closed the same way ads do: if consent is not affirmatively granted, no analytics event is sent. (This web consent check does not apply to the native mobile app, which uses Firebase Analytics instead of the web analytics tag.)

What we never do

• No data sale. We never sell your data to third parties. (Showing ads is not selling your data — we are not paid for your personal information, and no ad network receives your practice history.)
• No third-party analytics or trackers on this page itself — this policy page loads zero external resources by design. See section 5 above for what the app and public tool pages use, and how consent works.

Your data & deletion

• Export: export all of your data to a JSON file at any time from Settings.
• Reset: wipe all local data on a device from Settings (this can't be undone).
• Deleting individual items while signed in: when you delete a session, song or routine, it disappears from your devices immediately. On our server the record is marked as deleted and kept rather than erased straight away. We do this so the deletion reaches your other devices and cannot be undone by a device that was offline when you deleted it — without it, a stale copy would bring deleted practice back. These marked-deleted records are not shown to you anywhere in the app, and are removed when you delete your account.
• Account deletion: to delete your account and its synced cloud data, email us at mark.yourapps@gmail.com and we will remove it, including any records marked as deleted.

Contact

Questions about privacy, data, or deletion? Email mark.yourapps@gmail.com.