Privacy Policy
This privacy policy applies to the Draw a Song: Music Maker app for mobile devices, together with any related services operated by Packet Bracket (collectively, the "Application"). Packet Bracket is hereby referred to as the
"Service Provider".
Information Collection and Use
The Application does not require you to create an account and does not ask for your email address, phone number or contacts. The Service Provider operates no server that receives or stores your drawings, songs, typed names,
photos or voice.
Songs are made on your device. Sounds are generated by the Application's own audio engine, and your drawings are turned into music on your device.
The following information is stored on your device, in the Application's private storage, and is not sent to the Service Provider:
- Your songs: drawings, titles, instruments, tempo, sound settings and creation dates.
- Progress: XP, level, streaks, badges, game stars and usage counts, such as the number of songs created or shared.
- Settings: theme, haptics, colour-blind patterns, reminder time, language, measured audio latency, the last song, mood and instrument used, how many times the Application has been opened, and whether the welcome screens and
review request have been shown.
- Purchase and unlock status: whether Pro is active and when any temporary unlock expires.
- Your ad consent choice, where one applies.
Features that use your content
- Hum to draw (microphone): the Application asks for permission and listens only while you hold the hum button. Audio is analysed in a small temporary memory buffer to detect pitch. It is never recorded, written to storage or
sent anywhere. Only the resulting notes are kept, as part of your drawing.
- Photo to melody: you choose a picture with the Android system photo picker, and the Application can read only the picture you choose. It is reduced to a small greyscale copy in memory, and its outline is converted into
strokes on your device. The photo is not copied into the Application or sent anywhere. Only the resulting drawing is kept.
- Write your name: the text you type is converted into strokes on your device. It may become the song's title, which is stored with the song and may then appear in anything you export or share, as described below.
- Export and share: videos, audio files, ringtones, alarm sounds and MIDI files are created on your device. Temporary copies are kept in the Application's cache and cleared later. A file leaves your device only if you share
it. Files you save go to shared folders such as Music, Movies or Ringtones, where other apps with access to those folders can see them. Exported videos and MIDI files can contain the song title. The Application does not set
a ringtone or alarm for you; you choose it in your system settings.
- Song links and codes: a song link contains the song itself, including its title and drawing, inside the link. The Service Provider does not host or store it. Anyone who receives the link can open the song, so share it only
with people you choose. If a link is opened in a browser rather than the Application, the website at that address and its hosting provider may process standard web log data, such as your IP address and the requested address,
which contains the song code.
Advertising
Unless you have Pro, the Application may display advertisements, including banner, native, interstitial, app-open and optional rewarded ads, using the Google Mobile Ads SDK (AdMob). Pro users do not see ads.
When ads are enabled, Google and its advertising partners may collect and use your advertising ID, IP address, approximate location derived from your IP address, device and app information, and information about the ads you
see and interact with. This is used to deliver, measure and, where permitted, personalise ads, and to prevent fraud.
Where the law requires it, including in the EEA, the UK and Switzerland, the Application uses Google's User Messaging Platform to ask for your choice before ads are requested. Where this applies, you can change your choice in
Settings under "Ad privacy choices". You can also reset or delete your advertising ID in your device settings.
Analytics and crash reporting
The Application uses Firebase Analytics to understand how it is used. This can include screens viewed, songs created and played, the brushes, instruments, moods and helpers used, exports and shares, challenges, streaks,
levels, game results, ads shown, purchases of Pro, whether you use the free or Pro version, how the Application was installed, and device, language and approximate location information. Firebase may use an app instance or
installation identifier and, where available, your advertising ID.
The Application uses Firebase Crashlytics to find and fix problems. Crash and error reports can include technical logs, an installation identifier, the app and Android version, device brand and model, audio latency
measurements, the free or Pro status, and the area of the Application where the problem occurred.
The Application is not designed to send your drawings, song titles, typed names, photos or voice to these services. Analytics and crash reporting are not controlled by the ad consent form, and the Application has no separate
in-app switch for them. They stop if you uninstall the Application.
Purchases and reviews
Pro is a one-time purchase handled by Google Play Billing. Payment details are handled by Google, and the Application never sees your card or bank details. The Application checks your Google Play purchases to activate and
restore Pro. The Service Provider may receive the order records Google Play provides to developers, such as the product, price, date and order number.
The Application may ask for a rating using Google Play's in-app review feature. Your rating and review are handled by Google Play under its own terms.
Device features and permissions
The Application uses the following device features only for the purposes described:
- Internet and network state (INTERNET, ACCESS_NETWORK_STATE): for ads, ad consent, purchases, analytics and crash reporting.
- Microphone (RECORD_AUDIO): for Hum to draw only, as described above. The Application works without it.
- Notifications (POST_NOTIFICATIONS): for the optional daily challenge reminder. It is scheduled on your device and can be turned off in Settings.
- Vibration (VIBRATE): for haptic feedback, which can be turned off in Settings.
- Storage on Android 8 and 9 only (WRITE_EXTERNAL_STORAGE): to save exports you choose to save to shared folders. Newer Android versions do not need this permission.
- Motion sensor: the accelerometer detects a shake for Shake to remix while you are editing a song. Readings are not stored or sent.
- Advertising and install information (AD_ID, ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_TOPICS, install referrer): added by the Google advertising and analytics SDKs for the purposes described
above.
- Google Play Billing (BILLING): to buy and restore Pro.
- Background work (WAKE_LOCK, FOREGROUND_SERVICE): added by Android and Google libraries for short background tasks, such as scheduling your reminder.
- Home screen widgets and shortcuts: if you add them, they read only the Application's own data.
The Application does not use precise location or the camera, and does not read your contacts. It does not read your files or photos, other than a picture you choose yourself.
Links to external services
When you tap "Privacy policy", "Terms of use" or "Contact", or use the system share sheet, the Application hands the address or content to the browser, email app or other app you choose. From that point on, it is handled by
that service under its own privacy policy.
Cookies and tracking technologies
The Application does not set cookies of its own. The Google Mobile Ads SDK and Firebase may use advertising IDs, app instance or installation identifiers, cookies in ad views and similar technologies, as described in this
policy. Where required by applicable law, consent is requested for advertising as described above.
Your Rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict its processing, to withdraw consent, and to complain to your local data
protection authority. To exercise these rights, contact the Service Provider at packetbracket@gmail.com.
Because the Application has no accounts, the Service Provider may be unable to identify which analytics or crash data is yours without further information from you. Data stored only on your device can be deleted by you, as
described in this policy.
Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete or correct personal information, the right to opt out of the sale or sharing of personal information, and
the right to non-discrimination for exercising these rights.
The Service Provider does not sell personal information for money. When ads are enabled, disclosing identifiers and activity to Google and its advertising partners for personalised ads may count as "sharing" or a "sale" under
California law. You can opt out using "Ad privacy choices" in Settings, where shown, or through your device's advertising settings. To exercise your CCPA/CPRA rights, contact the Service Provider at packetbracket@gmail.com.
Third Party Access
The Service Provider uses the following third-party services, which process data as described in this policy and under their own terms:
- Google Mobile Ads SDK (AdMob) and User Messaging Platform
- Firebase Analytics
- Firebase Crashlytics
- Google Play Billing and Google Play in-app review
- Google Play Services
Google's privacy policy: https://policies.google.com/privacy
How Google uses information from apps that use its services: https://policies.google.com/technologies/partner-sites
Privacy and security in Firebase: https://firebase.google.com/support/privacy
The Service Provider may disclose information:
- as required by law, such as to comply with a subpoena or similar legal process;
- when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
- with their trusted service providers who work on their behalf and have agreed to adhere to the rules set forth in this privacy statement.
International Data Transfers
The Service Provider and its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards
for international transfers, appropriate mechanisms will be used, such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions or other legally recognized transfer mechanisms
- Your consent, where required and legally permitted
Data protection laws in other countries may differ from those in your jurisdiction.
Android Backup
If backups are enabled on your device, Android may include your songs, settings and progress in the backup stored in your own Google account, under Google's privacy policy, and may copy them when you move to a new device. The
Service Provider has no access to that backup. Pro status is not backed up; it is restored from Google Play.
Opt-Out Rights
- Ads: buy Pro, use "Ad privacy choices" in Settings where shown, or reset or delete your advertising ID in your device settings.
- Microphone and notifications: deny or revoke these permissions in your device's app settings. The rest of the Application continues to work.
- Daily reminder and haptics: turn them off in the Application's Settings.
- All further collection through the Application: uninstall the Application.
To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at packetbracket@gmail.com.
Data Retention Policy
- Microphone audio: held in temporary memory only while you hold the hum button. Never recorded or stored.
- Picked photos: processed in temporary memory and not kept by the Application.
- Songs, progress and settings: kept on your device until you delete them or clear the Application's data. You can delete a song from the Home screen. Uninstalling removes the Application's private data.
- Exported files saved to shared folders: kept until you delete them, and they may remain after you uninstall the Application.
- Ad, analytics and crash data: kept by Google according to its own policies and the retention settings of the services used.
- Emails you send: kept as long as needed to respond to you and to meet legal obligations.
- Data required for legal compliance: retained as long as required by applicable law.
If you want the Service Provider to delete information you have submitted, contact them at packetbracket@gmail.com.
Children
The Application is not intended for children under 16 years of age, or such higher age as required by applicable law, and the Service Provider does not market it to them. The Service Provider does not knowingly collect
personal information from children under 16 in violation of applicable law. If you are a parent or guardian and believe your child has provided personal information, please contact the Service Provider at
packetbracket@gmail.com so that the necessary action can be taken.
Security
Your songs, progress and settings are protected by your device's own security features, such as your screen lock and device encryption. Data sent by the Google services used in the Application is encrypted in transit. The
Service Provider applies reasonable safeguards to information it processes, such as emails you send. No method of storage or transmission is completely secure.
Data Breach Notification
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach
and the steps being taken to address it.
Changes
The Service Provider may update this Privacy Policy from time to time. Material changes will be notified by posting the updated Privacy Policy with a new effective date. Where required by law, the Service Provider will seek
your consent to material changes before they take effect.
Previous versions of this Privacy Policy are available upon request by contacting the Service Provider at packetbracket@gmail.com.
This privacy policy is effective as of 2026-11-05
Your Consent
Where processing is based on consent, you provide that consent by making a choice in the ad consent form, or by granting a permission such as the microphone or notifications when asked. You may withdraw consent at any time
without affecting processing carried out before withdrawal. Pro purchases are processed to provide what you bought. Analytics and crash reporting are carried out on the basis of the Service Provider's legitimate interests in
keeping the Application working and improving it, except where applicable law requires consent.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at packetbracket@gmail.com.