Privacy Policy
Short version. We collect what the app needs to run your account and share what you publish. We don't sell your data, show ads, or track you across other apps. Your recordings and library stay on your device unless you publish them. Crash reports are on by default and can be switched off; usage sharing is off unless you switch it on. Both settings are in Settings ▸ Privacy & Legal.
Who we are
DrumSumDrum is published by DrumSumDrum, a sole proprietorship based in Cocoa, Florida, USA ("we", "us"). We're responsible for your information under this policy. Contact: [email protected], or 334 Mc Leod Drive, Cocoa, FL 32922, USA.
What we collect, and why
| What | When | Why |
|---|---|---|
| Account: username and email; for Google sign-in, your Google account id, name and email | You create an account or sign in | To give you an account that works on every device. Passwords are handled by Amazon Cognito; we never see them. |
| Profile: display name, picture, what you've unlocked | You set them up, or buy something | To show your profile and give you what you paid for |
| Content you publish: challenges, kits (including the audio samples in them), and videos you host with us or link to | You press publish | To store and show it to other players. Published content is public. |
| Purchases: the store's receipt (Steam, Apple, Google) | You buy something | To check the purchase with the store and unlock it. We never receive card details. |
| Steam: your Steam id and persona name; friends' names and pictures for invites | You play through Steam | To show who's playing and let you invite friends. Friends lists aren't stored on our servers. |
| Multiplayer: room codes, player names, game moves | You join a party | Passed between players through our relay in real time. Not kept after the room closes. |
| Crash reports: the error, device type, OS, app version, and the last actions before the crash (which buttons and screens) | The app crashes. On by default; switch off in Settings. | To find and fix crashes |
| Usage logs: which screens and controls you use, errors, device type. Tied to a random install id, not your name. | Only if you turn on "Share usage" | To learn which features get used and what to improve |
| Problem reports: recent logs plus anything you write | You press "Send a problem report" | To help with the problem you reported |
| Reports about content: your message, and for copyright notices your name, address, phone and email | You report something | To review it, and as the law requires for copyright notices |
| Technical logs: IP address and request times, on our servers | Any online feature | To keep the service working and secure |
What stays on your device: your library, recordings from your microphone or camera, and the app's local activity log. The camera preview and microphone recordings are never uploaded unless you attach them to something you publish. Logs never record what you type, your file names, or your audio.
Our legal bases, if you're in the EU/UK: providing the service you asked for (account, content, purchases, multiplayer); legitimate interests (crash reports, security logs); and your consent (usage sharing, problem reports).
Who else handles it
We use these companies to run the service. They process data on our behalf and only for that:
- Amazon Web Services (USA): accounts, database, file storage, servers, relay
- Cloudflare (USA): hosting for published videos
- Sentry (USA): crash reports
- Google: sign in with Google
- Valve (Steam), Apple, Google Play: purchases and platform features, under their own privacy policies
We don't sell or rent personal information, and we don't share it for advertising. We disclose information only if the law requires it, or to protect people or the service. If DrumSumDrum is ever sold, this policy continues to apply to what we hold.
How long we keep it
- Account and profile: until you delete your account
- Published content: until you unpublish it or delete your account
- Usage logs: 90 days
- Problem reports: 180 days
- Crash reports: up to 90 days
- Reports about content, including copyright notices: 3 years, as a legal record
- Purchase records: as long as the law requires for tax and accounting
Your choices and rights
- Switch crash reports and usage sharing on or off at any time in Settings ▸ Privacy & Legal.
- Play as a guest, with no account.
- Ask for a copy of your data, a correction, or deletion of your account and everything tied to it: email [email protected] from your account's address. We reply within 30 days.
- Depending on where you live (for example the EU, UK or California), you may have further rights, including to object, to restrict processing, and to complain to your data-protection authority. We treat every request the same way, wherever you are.
Children
DrumSumDrum isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email us and we'll delete it.
Security and transfers
Data travels over encrypted connections and is stored with AWS, Cloudflare and Sentry, which encrypt it at rest. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires. We're based in the USA, so your information is processed there.
Changes
If we change this policy in a way that matters, we'll say so in the app before the change takes effect. The date at the top shows the current version.