DrumChart

Privacy

Updated 1 November 2026

DrumChart is run by Adam Hockenhull, a sole trader in the United Kingdom, who decides what happens to the information below. Questions or requests go to [email protected].

What stays on your device

Recordings you link, the drums and band parts separated from them, the beat finder, and your preferences are stored on the device you use. Finding the beat and separating the drums run on that device. Backups are files you save yourself. None of this is sent to DrumChart or anyone else.

The one exception is your own Dropbox, if you connect it. See below.

Dropbox

You can connect your own Dropbox to get your recordings to your other devices. It is off until you connect it.

• Dropbox gives DrumChart one folder in your Dropbox, Apps/DrumChart. DrumChart cannot see or change anything else in your Dropbox.
• Only recordings go in that folder. A recording you link on a connected device is copied there. Your other devices get it from there when you ask.
• Your device talks to Dropbox directly. Recordings never pass through DrumChart's servers and are never stored there.
• The permission Dropbox gives DrumChart is kept on your device only. DrumChart's servers never hold it.
• DrumChart never makes Dropbox share links and never shares your recordings with anyone.
• Each chart keeps its recording's file name, size and a fingerprint of the file, so your other devices can find it in the folder. These sync with the chart.
• You can disconnect at any time in Settings. Recordings already in your Dropbox stay there for you to keep or delete. You can also remove DrumChart from your Dropbox account's connected apps.

What you keep in your Dropbox is between you and Dropbox, under Dropbox's privacy policy.

What is collected

Your account.

• Your email address, and the codes we email you to sign in. Only a scrambled form of each code is kept, and it stops working after 10 minutes.
• The devices you are signed in on: what kind of device and browser (for example "a Mac, Safari"), when it signed in and when it was last used. A device not used for a year is signed out.
• When your free trial started, whether you have bought DrumChart, and whether you want DrumChart news.
• The network (IP) address a sign-in comes from, to limit how often codes can be asked for. It is only used to count the last hour's requests.

Your charts. When you are signed in, your charts and setlists are stored on DrumChart's servers, so they sync between your devices. Recordings are never part of this, and neither are your preferences.

Sharing. When you share a setlist through a link, its charts are shown to the people who join, and you see the email address of each of them. When you join someone's link, they see your email address, and you see theirs. You are told this before you join. Recordings are never shared through DrumChart. Leaving, being removed or the sharing being stopped takes the charts off your devices.

Buying.

• On the website, Paddle sells DrumChart as our reseller (the merchant of record). Paddle collects your payment details and what it needs for tax, such as your country, and handles them under its own privacy notice. DrumChart gets from Paddle the email address you bought with, the transaction's number, the amount and the date.
• In the iPad and Mac apps, Apple takes the payment. DrumChart gets Apple's record of the purchase: what was bought, its transaction number and the date. Not your name, Apple ID or card.
• If a purchase is refunded, Paddle or Apple tells DrumChart, so the account is locked again.

Feedback. Your message and, unless you untick it, the screen you were on, the chart's title, your browser, what the player was doing and recent errors. Stored with Cloudflare and emailed to Adam.

Using the app.

• Steps you take: starting a chart, linking a recording (its type, size and length, not its name), how long finding the beat took, playing, switching views, exporting, starting the trial, buying, and errors the app hits.
• Session recordings, of about 1 visit in 10 on a computer, for the first months after launch: a replay of the app's screen as you use it, showing clicks, screens and settings. Chart titles, artists, file names, notes, lyrics, searches and feedback text are hidden before anything leaves your device. A linked recording's waveform appears as a picture; the audio itself is never recorded. Recording pauses while anything plays and is off on tablets.
• This is linked to your account's email address. Your IP address is not passed on, and nothing is stored on your device for it: no cookies.

The beta. Before launch, people asked to try DrumChart with their email address, their name if they gave it, and the link they came from. These are stored with Cloudflare and were emailed to Adam. Testers logged in to the beta through Cloudflare Access, which emailed a one-time code and kept a record of sign-ins.

The home page. Visitors from outside the UK and EU may be counted by Cloudflare Web Analytics, which uses no cookies. The video on it comes from YouTube's privacy-enhanced mode, which sets no cookies until you press play.

Why

• Your account, your charts and your purchase: to give you what you signed up for and bought. The legal basis is the contract with you.
• Records of purchases: UK tax law requires them. The legal basis is a legal obligation.
• Limits on sign-in codes, how the app is used, session recordings and feedback: to keep DrumChart safe, fix problems and improve it. The legal basis is legitimate interests.
• Emails about your account: sign-in codes, your trial, receipts and anything you ask for. These are part of the service.
• Occasional DrumChart news, to people who have signed in. You can say no when you sign in, in Settings, or with the link in any news email. The legal basis is legitimate interests, under the rule that lets a business email people who signed up for its product about that product.

Who handles it

• Cloudflare: hosting, accounts, the stored charts, beta signups and feedback.
• Paddle: payments on the website. Paddle is the seller of each order, so it is responsible for the payment details it collects.
• Apple: payments in the iPad and Mac apps, under Apple's own privacy policy.
• PostHog: app usage and session recordings, on servers in the EU (Frankfurt).
• Resend: sending emails, including sign-in codes, from the EU.
• Google Workspace: Adam's email inbox.

Cloudflare, Apple and Google are US companies, and Paddle works in the UK and the US. Transfers are covered by their data protection terms.

How long

• Your account and charts: until you delete your account in Settings. That removes your charts from DrumChart's servers at once. Charts on your devices stay there.
• When your trial started, and any purchase: kept with your email address after the account is deleted, so a trial is used once and a purchase isn't lost if you come back. Purchases are kept for 6 years, as UK tax law requires. When a trial started is kept for 2 years.
• Session recordings: deleted after 30 days.
• App usage steps: kept by PostHog for as long as its plan allows. Yours are deleted if you ask.
• Signups and feedback: until you ask for them to be deleted, or until they are no longer needed.

Your rights

You can ask to see, correct or delete what is held about you, or object to it being used. You can delete your account yourself in Settings. To stop DrumChart recording your use of the app, email [email protected] and it will be switched off for your account. You can also complain to the Information Commissioner's Office at ico.org.uk.