Effective date: 15 October 2026
This policy explains what data the Real Darbuka app for Android (“the app”) handles, and why. The app is made by M. Bibas (“we”, “us”). Contact: matanbib24@gmail.com.
No account and no sign-in. We never ask for your name, email, contacts or location.
Your recordings, videos and projects stay on your phone unless you choose to share them.
The app shows ads and uses Google Firebase for usage statistics and crash reports. In Europe (the EEA, the UK and Switzerland) the app asks you first whether ads may be personalised and whether usage statistics may be stored, and you can set each one separately in Settings.
We do not sell your personal data.
The app shows ads through Unity LevelPlay (formerly ironSource) mediation, with ads from ironSource and Unity Ads. To show and count ads, these companies receive your device’s advertising ID (and Google’s App Set ID), your IP address, information about your device and the app (such as model, Android version and language) and how you interact with the ads.
Personalised ads in Europe. If you are in Europe, the app asks you before the ad system starts. If you choose “Decline all”, or later turn off “Personalised ads” in Settings › Privacy & ads, the app tells the ad partners that you did not consent, and they should only show you ads that are not personalised. You still see ads either way.
Everywhere. You can reset or delete your advertising ID in your phone’s settings (usually Settings › Google › Ads, or Settings › Privacy › Ads). If you buy “Remove ads”, the app stops showing banner and full-screen ads; the ad system itself still starts, because it also provides the optional videos below. Some features let you choose to watch a video ad to unlock something for a while; that is always your choice.
Unity’s policy (covers Unity Ads and LevelPlay): unity.com/legal/game-player-and-app-user-privacy-policy
Google Analytics for Firebase. The app records how it is used: which screens are opened; which instruments, drum kits, scales, effects and tempos are chosen; which settings are changed; roughly how long playing sessions and vocal-studio takes last (in ranges); what kind of thing is shared (and to which app, when it goes straight to one); and the name of a MIDI device you connect. Firebase adds an app-instance ID, device information, and an approximate location worked out from your IP address. We never record your name, email or the content of your recordings.
If you are in Europe, the app uses Google’s consent mode to pass on your two choices. With “Analytics” off, Firebase is told not to store analytics identifiers. With “Personalised ads” off, it is told not to store advertising identifiers and not to use the data for ads. “Decline all” turns both off, “Accept all” turns both on, and until you answer both are off. Outside Europe these are allowed.
Firebase Crashlytics. If the app crashes, a crash report is sent to Google: where in the code it failed, the device model, Android version, app version and an installation ID. Crash reports are always on, because we need them to keep the app working (our legitimate interest). Google keeps crash data for 90 days.
More: firebase.google.com/support/privacy and policies.google.com/privacy
In-app purchases (such as Remove ads and extra instruments) go through Google Play Billing. Google handles the payment; the app never sees your card or bank details. The app only receives what Google Play reports about your purchases, so it can unlock what you bought.
Sound packs, styles and loops are downloaded from our files hosted on Cloudflare. These are plain downloads and the app sends no personal data with them, but Cloudflare, as our host, processes your IP address in order to deliver the files. Cloudflare’s policy: cloudflare.com/privacypolicy
YouTube. The app’s YouTube playlist screen shows youtube.com directly. YouTube (Google) receives your IP address and device information and may use cookies or similar storage under its own policy: policies.google.com/privacy
Microphone: only when you use a feature that records or listens (recording, the vocal studio, voice pads, tempo and key listening, the latency test). The audio is processed and saved on your phone. The app never uploads it. Party lights react to the music the app itself is playing, not to the room; Android still asks for the microphone permission for that feature.
Camera: only in the video recorder, to film you while you play. The video is made and saved on your phone.
Your music and video library: when you open the Music tab of the backing-track playlist, the app lists the songs on your phone (title, length and album art) and keeps that list in its own database on the phone, so it opens at once next time; pulling the list down refreshes it. When you open the app’s own window for importing a loop from the device, it lists the audio or video files on your phone (name, artist, folder, length, size and date added) for as long as that window is open. Both need the media permission you allow. Neither list is ever sent anywhere by the app; the saved song list is part of the app’s data, so it is included in your backups (section 6).
Files: the app reads the contents of an audio or video file only when you pick it, or send it to the app from another app (for example to import a loop or a backing track). Exported recordings are saved on your phone (for example in the Music folder). Anything leaves your phone only when you share it yourself, through Android’s share menu.
The app’s own backup creates a .rdbk file in your Downloads folder, only when you ask for it. It holds your projects, recordings, settings and other app data. If you set a password, the file is encrypted with it (AES-256) and only someone who knows the password can open it; we cannot recover a forgotten password. Without a password the file is only scrambled with a key built into the app, so anyone who has Real Darbuka can open it: set a password before you send a backup to someone else. Where the file goes next is up to you; we never receive it. Separately, if Android backup is turned on in your phone, Android may copy the app’s data to your Google account, within Android’s own size limit: settings, projects, downloaded sounds and some saved files (vocal-studio takes, voice-pad recordings, imported songs, your purchase cache and your privacy choices are left out). That backup is between you and Google.
No accounts, no sign-in, no email collection.
No location permission and no GPS. No access to your contacts.
We do not sell your personal data.
Real Darbuka is a music app for a general audience. It is not directed at children under 13, and we do not knowingly collect personal data from them. In Europe, if you are younger than the age at which you may give consent yourself (between 13 and 16, depending on the country), please ask a parent before choosing “Accept all” or turning either choice on.
Consent: personalised ads and the advertising identifiers; the analytics identifiers (two separate choices in the app).
Legitimate interests: crash reports; ads that are not personalised, which keep the app free; delivering downloads.
Contract: handling your purchases.
Google (including YouTube), Unity and Cloudflare may process data outside your country, including in the United States, under the safeguards described in their own policies.
Change your choices: in the app, Settings › App › Privacy & ads (shown in Europe, and to anyone who has answered before), with one switch for personalised ads and one for analytics. Analytics follows a new choice at once; ads follow it fully from the next time you open the app.
Under the GDPR (and the UK and Swiss laws) you may ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable form. You may withdraw consent at any time; this does not affect what happened before. You may also complain to your data protection authority. Because the app has no accounts, we usually cannot tell which data is yours; for data held by Google or Unity, their own tools are usually the fastest way. Write to matanbib24@gmail.com and we will help. Uninstalling the app deletes what it keeps in its own storage on your phone; files you exported (for example to Music or Downloads) stay until you delete them.
If this policy changes, we will update the date at the top. If a change affects what you agreed to, the app will ask you again.
M. Bibas · matanbib24@gmail.com