Data Policy
Updated 8 November 2026 · DraftSounds · hello@draftsounds.com
DraftSounds is a music idea app for Android and iPhone (free download), plus a free library app for Mac and Windows. Recording, arranging, and exporting work on your phone with no account. Cloud Sync ($2.99 a month) is optional. If you subscribe and sign in, a mix of each saved idea can appear on your other devices while the subscription is active.
What stays on your device
Unless you export, share, or turn on Cloud Sync, this stays on the device:
- Audio you record or import
- Lyrics, notes, hashtags, project names
- Optional cover photos
- Optional place and weather tags you choose to add
- App settings (metronome, count-in, mic calibration)
- A sign-in session if you create an account
You can delete an idea in the app without deleting your account. Uninstalling DraftSounds removes the local library. Signing out does not wipe local ideas.
Account and Cloud Sync
Sign-in is Google or email (one-time code), provided by Supabase. The same account works on the phone and on the Mac and Windows library.
When Cloud Sync is unlocked and you save an idea that has audio, we upload:
- One bounced mix (usually AAC
.m4a, or a small WAV when that is enough) - Title, folder, tags, optional cover, and timing
- Stem files only when that sync is switched on
The full multi-track project also stays on the phone and in .dsn exports. You can use the phone app with no account. A zip backup in Settings stays on the device (share sheet).
Payment
The phone app is a free download with a 7-day Pro trial. After that you can keep the free version or unlock Pro with a one-time in-app purchase through Google Play. Users who bought the app earlier as a paid app keep full access; Google processed that payment. DraftSounds does not store your card number.
Cloud Sync is $2.99 a month, with a 7-day free trial. On Mac or Windows, Stripe handles the subscription. We store that your account is subscribed, plus a Stripe customer id, so the same login works on your other devices. If you cancel, or a payment fails, Cloud Sync turns off. Mixes already stored only on your phone stay on your phone. The cloud copies are removed when you delete the account, or after the subscription has ended and the library is cleared.
On Android, the Pro unlock and the Cloud Sync subscription are charged by Google Play instead of Stripe. Google processes those payments under its own rules.
Delete your account
In the app: drawer → Account → Delete account. We remove your login, uploaded mixes and covers, and idea metadata from the DraftSounds library. Ideas stored only on the phone stay until you delete them or uninstall.
Or email hello@draftsounds.com from the address you use to sign in, with the subject Delete DraftSounds account. We handle that as soon as we can, usually within 14 days.
Sign-out only ends the session. It does not delete the account.
What leaves the device
The services used by app features are listed below. New Android and iPhone releases integrate Google Analytics for Firebase; see the separate analytics section below. Earlier versions may not contain this SDK.
- Sign-in and sync: Supabase (login, database, private file storage)
- Google sign-in: Google, if you tap that button
- Payment: Google Play (Pro unlock, Cloud Sync on Android) or Stripe (Cloud Sync on Mac and Windows)
- Place tag: a geocoding lookup from the location you allow
- Weather tag: Open-Meteo, using that place
- Rhyme helper: the word you typed is sent to a rhyme service
- Export, share, zip backup: files go where you send them
The microphone is used to record into your idea. The camera is optional, for a cover. Location is optional and only used to label an idea.
Android float recorder
On Android, the float bubble can record while DraftSounds is in the background. It uses the microphone. If Android asks to capture playback, that is so the beat already playing can be included in your take. iPhone records from Home or the DAW. We do not sell recordings.
Children
DraftSounds is a music tool. It is not directed at children under 13.
Controller
Chand Lal, Kurfürstendamm 11, 10719 Berlin, Germany · hello@draftsounds.com · +49 172 8541260.
Purposes and legal bases (GDPR)
- Delivering this website and server logs (IP address, time, page, browser): Art. 6(1)(f), our legitimate interest in a secure, working site. Logs are deleted after [7] days.
- Account, Cloud Sync, and the free trial: Art. 6(1)(b), performing the contract you asked for.
- Payments, invoices, tax records: Art. 6(1)(b) and (c). Billing records are kept for the statutory period (up to 10 years, § 147 AO, § 257 HGB).
- Support emails: Art. 6(1)(b) or (f). Deleted once your request is done, unless the law requires longer.
- Optional features (place and weather tags): Art. 6(1)(a), your consent through the system permission, which you can withdraw anytime.
Processors and recipients
- Hosting: ALL-INKL.COM – Neue Medien Münnich, Germany (web server, logs), under a data processing agreement.
- Supabase Inc. (login, database, file storage), region [SUPABASE REGION], under a data processing agreement.
- Stripe Payments Europe Ltd., Ireland (card payments and subscriptions on web and desktop). Stripe may transfer data to the USA.
- Google Ireland Ltd. / Google LLC (Google Play billing, Google sign-in) and Apple Distribution International Ltd. (App Store billing).
- Open-Meteo and a rhyme lookup service, only when you use those features.
Transfers outside the EU
Google, Stripe, Supabase, and Apple may process data in the USA. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, otherwise on EU Standard Contractual Clauses (Art. 46 GDPR).
Retention
Account and cloud data are kept while your account exists. They are deleted when you delete the account, or [30] days after a Cloud Sync subscription ends. Billing records are kept as tax law requires.
Your rights
You can ask for access (Art. 15), correction (16), erasure (17), restriction (18), and data portability (20), and you can object to processing based on legitimate interest (21). You can withdraw consent at any time for the future. You can also complain to a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.
Website analytics, cookies and Google Ads
We use Google Analytics 4 (GA4), provided for users in the EEA by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The website uses the web stream G-XGZQXE8VXG in our DraftSounds Analytics property. GA4 measures page visits, technical browser/device information, approximate location and clicks on Google Play, App Store and desktop-download buttons (app_store_click, with store, page language and button position). No recordings, lyrics or project contents are sent by this website analytics implementation. Page URLs sent through our configuration exclude query strings.
Analytics is optional and loads only after you choose “Allow analytics”. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG (formerly TTDSG). Rejecting does not restrict the website. We use basic Google Consent Mode v2: before consent the analytics script is blocked, no analytics requests or cookieless measurement pings are sent, and analytics/ad storage, ad user data and ad personalisation default to denied. Granting analytics enables analytics storage only; advertising consent remains denied and Google Signals and personalised advertising features are disabled in our tag configuration.
GA4 uses first-party cookies such as _ga and _ga_* to distinguish visits. Our tag limits these cookies to 13 months without renewing the expiry on each visit. Google receives your IP address when the tag connects; GA4 uses it for approximate geolocation but does not log or store individual IP addresses. This does not mean all processing is anonymous. Google may also process data in the USA; see the international-transfers section above and Google’s privacy policy.
Your acceptance or refusal is stored locally in your browser for up to 180 days, solely to remember your choice (§ 25(2) no. 2 TDDDG). Use “Privacy settings / withdraw consent” in the footer to change it at any time. Rejecting there stops future collection, removes accessible GA cookies and reloads the page without the Google tag. Withdrawal does not affect earlier lawful processing. You can also clear browser storage or use Google’s browser opt-out add-on.
Our Analytics property is linked to the DraftSounds Google Ads account (231-431-9613). This supports campaign reporting and conversion imports if separately configured in Google Ads; it does not by itself make every event an Ads conversion. This website does not load a separate Google Ads conversion tag, Meta Pixel or remarketing tag. Advertising storage, ad user data and ad personalisation remain denied. Google Play download links contain only the fixed campaign labels utm_source=draftsounds.com, utm_medium=website and the page language as campaign; they contain no visitor ID. These labels reach Google Play when you choose that link.
Firebase Analytics in the apps
New Android and iPhone releases integrate Google Analytics for Firebase, operated by Google Ireland Limited / Google LLC, in the same DraftSounds project. Depending on the released version and its collection settings, Firebase Analytics can process pseudonymous app-instance/device identifiers, app and OS versions, usage events, installations and purchase events to understand app use and campaign performance. Recordings, lyrics and project contents are not intended analytics data. Website consent does not enable or disable the app SDK: app collection and consent settings must be managed separately in the app. Earlier app releases may not contain Firebase Analytics. This website notice does not replace the privacy disclosures and consent controls required in the released apps and their stores.
Website fonts are served directly from our own hosting, not from Google Fonts servers.