隐私政策
DrumScore 鼓谱师（iOS / Android / 网页）· 生效日期：2026 年 11 月 6 日 · 版本 2.0
简单说：我们只收集提供服务所必需的数据（账号、你保存的鼓谱、设备日志）。你可以随时在 App「设置 → 注销账号（删除数据）」一键永久删除账号及全部数据，也可以在网页个人中心或发邮件申请删除。我们不出售你的个人信息。
1. 我们收集的信息
- 账号信息：注册/登录时提供的用户名、邮箱、昵称、加密后的密码；使用 Apple 登录或 Google 登录时，对方授权提供的基本资料（如邮箱、昵称）。
- 你创作的内容：保存在云端的鼓谱（MusicXML 文件）、标题与描述、发布到公共谱库的内容、意见反馈的正文与联系方式。
- 交易信息：通过 Apple App Store 内购或 Google Play 结算购买的会员订单号与状态。我们不接触、不存储你的银行卡号或支付凭证。（网页版如使用第三方支付，仅记录订单号与支付渠道。）
- 设备与日志：IP 地址、设备型号、操作系统版本、App 版本、崩溃与接口错误日志——用于安全风控、故障排查和服务稳定性。
- 广告相关（见第 4 节）：集成 Google AdMob 后，广告 SDK 可能收集设备标识符（如广告 ID/IDFA）、粗略位置（IP 推导）、应用使用与广告交互数据。
2. 信息的使用目的
- 提供账号、云端谱库存取、跨设备同步与会员权益；
- 保障账号安全（登录校验、异常行为识别、风控）；
- 处理你提交的意见反馈，并在 App 与网页的「沟通历史」中展示官方回复；
- 统计与改进产品功能（聚合、去标识化分析）；
- 展示广告（如启用），用于支持免费版运营；
- 履行法律法规要求（如税务、审计、配合监管）。
3. 信息的共享与第三方服务
我们不会出售你的个人信息。仅在以下情形与第三方共享必要数据：
- Apple（App Store / 内购 / Apple 登录）：处理购买与登录授权；
- Google（Google Play 结算 / Google 登录 / AdMob 广告）：处理购买、登录授权与广告投放；
- 云服务与数据库服务商：存储账号与谱面数据（服务器部署在中国大陆及/或境外数据中心）；
- 法律要求：依司法或行政机关的合法要求提供必要信息。
第三方服务商仅可在为我们提供服务的目的范围内处理数据，并受其自身隐私政策约束（如 Google 隐私权政策、Apple 隐私政策）。
4. 广告（Google AdMob）
免费版可能通过 Google AdMob 展示广告。为此：
- Google 及其合作伙伴可能收集并使用广告标识符（IDFA / GAID）、设备信息、IP 地址及广告交互数据，用于投放、频次控制、反作弊与效果统计；
- 在 iOS 上，首次启用个性化广告前会请求 App Tracking Transparency（ATT）授权；拒绝后仅展示非个性化广告；
- 你可以在系统设置中重置或关闭广告标识符（iOS：设置 → 隐私与安全性 → 跟踪/Apple 广告；Android：设置 → Google → 广告）；
- 在适用法律要求的地区（如欧盟/英国/瑞士），我们会通过 Google UMP 同意管理平台征得你对广告数据使用的同意，并支持随时撤回。
5. 数据存储、保留与安全
- 数据存储于我们自建或云服务商的服务器，传输使用 HTTPS 加密，密码以不可逆哈希保存；
- 保留期限：账号数据在你注销前持续保留；注销后立即删除或匿名化（含谱面、会员关联、反馈记录）；备份/日志中的残留数据在 30 天内轮转清除；
- 法律要求必须保留的交易记录（如订单凭证）按法规期限（通常 3 年）单独留存，且仅用于合规目的。
6. 注销账号与删除数据（如何行使删除权）
你拥有删除个人数据的权利。提供以下任一方式，均会永久删除你的账号及全部关联数据（鼓谱、会员关联、订单关联、发布内容、反馈记录）：
删除范围说明：账号本身、云端谱面与文件、昵称/邮箱等资料、会员与订单的关联关系、发布的谱库内容、意见反馈与官方回复记录。不可恢复；法律要求保留的交易凭证除外（单独隔离，不用于任何其他目的）。删除完成后你可以在 App 内重新注册，视为全新账号。
7. 你的其他权利
- 访问与导出：在 App / 网页查看你的谱面，并导出 MusicXML / MIDI；
- 更正：修改昵称、密码；
- 撤回同意：关闭个性化广告、退出登录、注销账号；
- 投诉：如对我们的处理有异议，可发邮件联系我们，或向所在地数据保护监管机构投诉。
8. 儿童隐私
本服务面向一般用户，不面向 13 岁以下儿童（欧盟为 16 岁以下）。我们不会在知情情况下收集儿童个人信息。若你是家长/监护人并发现儿童向我们提供了信息，请联系我们删除。如启用广告且受众含未成年人，我们将按 Google 家庭政策仅投放非个性化广告。
9. 政策变更
我们可能更新本政策。重大变更会通过 App 内公告或页面显著提示告知，并在本页更新「生效日期」。
10. 联系我们
数据控制者：DrumScore 鼓谱师开发团队
邮箱：support@drumscore.me
我们将在 15 个工作日内回复你的请求。
Privacy Policy
DrumScore (iOS / Android / Web) · Effective: November 6, 2026 · Version 2.0
In short: We only collect what we need to run the service (account, your saved scores, device logs). You can permanently delete your account and all related data anytime via "Settings → Delete Account (Delete Data)" in the app, from the web profile page, or by email. We never sell your personal information.
1. Information We Collect
- Account data: username, email, nickname, hashed password; basic profile from Sign in with Apple / Google Sign-In (email, display name).
- Your content: drum scores saved to the cloud (MusicXML), titles/descriptions, published scores, and feedback messages with contact details.
- Transaction data: order IDs and status for purchases via Apple In-App Purchase or Google Play Billing. We never receive or store your card numbers or payment credentials.
- Device & logs: IP address, device model, OS version, app version, crash and API error logs — for security and stability.
- Advertising data (see §4): with Google AdMob integrated, the SDK may collect device identifiers (IDFA/GAID), coarse location (derived from IP), app usage and ad interaction data.
2. How We Use Information
- Provide accounts, cloud score storage, cross-device sync and membership benefits;
- Protect account security (login validation, abuse detection);
- Respond to feedback and show official replies in the in-app / web conversation history;
- Aggregate, de-identified analytics to improve the product;
- Serve ads (if enabled) to support the free tier;
- Comply with legal obligations.
3. Sharing & Third Parties
We do not sell personal information. We share only what is necessary with:
- Apple (App Store, In-App Purchase, Sign in with Apple);
- Google (Google Play Billing, Google Sign-In, AdMob);
- Cloud/database providers hosting accounts and scores;
- Legal authorities when required by valid legal process.
Processors act only on our instructions and are bound by their own policies (e.g., Google Privacy Policy, Apple Privacy Policy).
4. Advertising (Google AdMob)
- Google and partners may collect advertising identifiers (IDFA / GAID), device info, IP address and ad interaction data for delivery, frequency capping, anti-fraud and measurement;
- On iOS, we request App Tracking Transparency permission before personalized ads; if declined, only non-personalized ads are shown;
- You can reset/limit ad identifiers in system settings (iOS: Settings → Privacy & Security → Tracking / Apple Advertising; Android: Settings → Google → Ads);
- Where required (EU/UK/Switzerland), we obtain consent via Google UMP and honor withdrawal at any time.
5. Storage, Retention & Security
- Data is stored on our or our providers' servers; transit is encrypted via HTTPS; passwords are stored as irreversible hashes;
- Retention: account data is kept until you delete your account. Upon deletion, data (scores, membership links, feedback) is deleted or anonymized immediately; residual copies in backups/logs rotate out within 30 days;
- Transaction records required by law (e.g., order receipts) are retained separately for the legally required period (typically 3 years) for compliance only.
6. Account Deletion & Data Erasure (How to Exercise Your Right)
You have the right to delete your personal data. Any of the following permanently deletes your account and all related data (scores, membership links, order links, published content, feedback):
- In the app (recommended, immediate): iOS / Android → Settings → Delete Account (Delete Data), confirm twice;
- On the web: sign in → Profile → Account → Delete Account;
- By email: write to support@drumscore.me from your registered email; we verify and complete deletion within 7 business days.
What gets deleted: the account, cloud scores and files, profile (nickname/email), membership and order associations, published library content, feedback threads and replies. This is irreversible. Records we must retain by law (transaction receipts) are isolated and used for compliance only. After deletion you may register again as a brand-new account.
7. Your Other Rights
- Access & export: view scores in app/web and export MusicXML / MIDI;
- Rectification: edit nickname and password;
- Withdraw consent: disable personalized ads, sign out, or delete your account;
- Complaint: contact us or your local data protection authority.
8. Children's Privacy
The service is intended for general audiences, not for children under 13 (16 in the EU). We do not knowingly collect children's data. Parents/guardians may contact us to delete any such data. If ads are enabled for audiences including minors, we serve non-personalized ads only, per Google Families policy.
9. Changes
We may update this policy. Material changes will be announced in-app or prominently on this page, with the effective date updated.
10. Contact
Data controller: DrumScore development team
Email: support@drumscore.me
We respond within 15 business days.