NOMOS METRONOME · LAST UPDATED 27 OCTOBER 2026
PRIVACY POLICY.
Nomos Metronome (“the app”) is a metronome and practice trainer for iPhone and Android. This policy explains what personal data the app processes, why, who helps us process it, how long we keep it and what your rights are.
In short: the app works without an account. If you create one, we keep only what is needed to sync your things between your devices. The free Standard plan shows a few ads from Google; Premium and the free week show none. Whether the ads are personalised is up to you: on iPhone only if you allow it when the app asks; in the EEA, the UK and Switzerland only with your consent in Google’s form; on Android elsewhere unless you turn it off in your device’s ad settings. Your account and practice data are never used for ads.
1. Who is responsible
The controller of your personal data is Ivan Korniienko, sole proprietor (FOP Korniienko Ivan Serhiiovych), 18/20 Herzen Street, Kyiv, Ukraine (“we”, “us”). For anything about your data write to nomosmetronome@gmail.com.
2. Without an account
Your presets, setlists, practice log, goals, reminders and settings, the day your free week of Premium began, the times the app last showed you an ad and how many ads you watched to open a Premium feature are stored only on your device; we do not receive them. Reminders are local notifications scheduled on your device; we do not use push tokens. The app does not use the microphone, camera, contacts or the location services of your device. There are three exceptions: to know what you have bought, the app checks with RevenueCat under a random ID created on your device; on Android, so that the free week is given once per device, the app sends our server a one-way code made from the ID Android gives our app on your device, with the day your free week began; and on the free Standard plan, after the free week, the app loads ads from Google (sections 3 and 4).
3. What we process and why
| Data | When | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Email address; your name if Google or Apple provides it; account ID | You create an account or sign in with an email code, Google or Apple | Create and run your account; send sign-in codes | Contract, Art. 6(1)(b) |
| Presets, setlists, folders, practice log (minutes, goals, sessions), app settings, items unlocked in the app | While you are signed in | Sync between your devices; restore on a new device | Contract, Art. 6(1)(b) |
| Crash reports: error details, app version, device model, operating system. No IP address, no email, no name; at most your account ID | When the app crashes, unless you switch crash reports off (Help & Feedback → Crash reports → Off) | Find and fix faults | Legitimate interest in a working app, Art. 6(1)(f) |
| Bug reports and suggestions: your text, an email if you give one, a screenshot of the app screen and device details if you choose to attach them | Only when you send one | Answer you; fix the problem | Your request, Art. 6(1)(b); consent for the optional parts, Art. 6(1)(a) |
| Purchases and subscriptions: what you bought and when, the store’s record of each purchase, its country and currency; a random ID created on your device, or your account ID while you are signed in; with each check, its time, the device model, operating system, app version, language settings and, on iPhone, the device ID Apple gives our apps (IDFV). RevenueCat works out a country from the connection’s IP address and does not keep the address | When you open the app, buy or restore purchases | Unlock what you bought, keep it on all your devices and count our sales | Contract, Art. 6(1)(b); for counting sales, legitimate interest, Art. 6(1)(f) |
| The free week on Android: a one-way code (SHA-256 hash) made from the ID Android gives our app on your device, and the day your free week of Premium began. The ID itself never leaves your device, and the code is linked to no account | On Android, at the first start after the app is installed (if our server cannot be reached, at the next start) | Give the free week once per device, even if the app is deleted and installed again | Legitimate interest in preventing abuse of the free week, Art. 6(1)(f). The app does not ask for consent to read this ID: doing so is strictly necessary to give the free week once per device (ePrivacy Directive, Art. 5(3)) |
| Ads on the free Standard plan: your IP address, from which Google estimates an approximate location; the device model, operating system, app version and language; which ads were requested, shown and tapped, and how they played; how the app and the ad component perform (such as launch time, hangs, crashes and energy use); an identifier limited to our apps (on iPhone the IDFV, on Android the app set ID); your device’s advertising ID (on iPhone only if you allow tracking, on Android unless it has been deleted in the device settings) and, on Android where applicable, identifiers related to accounts signed in on the device | On the free Standard plan after the free week, when the app loads or shows an ad. Never with Premium or in the free week | Fund the free plan with ads, personalised only as described below; limit how often you see them, count them and protect them against fraud | In the EEA, the UK and Switzerland, for storing and reading information on your device and for personalised ads, your consent in Google’s form, Art. 6(1)(a); otherwise, legitimate interest in funding the free plan and preventing fraud, Art. 6(1)(f) |
| Sign in with Apple token: a technical key from Apple that links the app to your Apple Account | You sign in with Apple | Disconnect the app from your Apple Account when you delete your account, as Apple requires | Contract, Art. 6(1)(b) |
Ads come from Google’s AdMob. Google may store and read information on your device, such as identifiers, to show, count and protect ads. Where the law asks for your consent (the EEA, the UK and Switzerland), the app shows Google’s consent form before the first ad; you can change your choice at any time in Help & Feedback → Ad privacy. If you refuse, Google may still show limited ads, which are not personalised and use information on your device at most to protect against fraud. On iPhone, when ads begin, Apple’s window asks you once whether the app may track you (unless you have already refused personalised ads in Google’s form); if you do not allow it, the ads are not personalised and do not use the advertising ID. You can change the answer at any time in Help & Feedback → Tracking or in iPhone Settings → Privacy & Security → Tracking. On Android you can reset or delete the advertising ID in the device settings (Google → Ads, or Privacy → Ads); a deleted ID can no longer be used for ads. To report an ad: Help & Feedback → Report an ad.
Giving us data is optional: without an account the app works fully on one device. We make no automated decisions and build no profiles about you; if ads are personalised, Google does that under its own policy (section 4).
If you sign in with Google or Apple, we receive your name and email address from them. With Apple you may hide your email; we then receive an Apple relay address.
4. Who processes data for us
| Provider | What for | Where; safeguard |
|---|---|---|
| Supabase, Inc. (USA) | Account and sync database, sign-in; on Android, the free-week check | Stored in the EU (Ireland); any access from the USA is covered by Standard Contractual Clauses |
| Functional Software, Inc. — Sentry (USA) | Crash reports, bug reports and suggestions | Stored in the EU (Germany); EU–US Data Privacy Framework and Standard Contractual Clauses |
| Resend, Inc. (USA) | Sends the sign-in emails | USA; EU–US Data Privacy Framework and Standard Contractual Clauses |
| RevenueCat, Inc. (USA) | Checks purchases with the App Store and Google Play and tells the app what you own | USA; Standard Contractual Clauses |
| GitHub, Inc. (USA) | Once a week makes a copy of the database and encrypts it before it is stored | USA; EU–US Data Privacy Framework and Standard Contractual Clauses |
| Google LLC (USA) — Google Drive | Keeps the encrypted copies of the database; Google cannot read them | Google’s servers worldwide; EU–US Data Privacy Framework; the copies are encrypted with a key Google does not have |
| Google Ireland Limited (Ireland) and Google LLC (USA) — AdMob | Chooses, shows and counts the ads on the free Standard plan and protects them against fraud. Google acts as an independent controller of this data under its own policy | Google’s servers worldwide; EU–US Data Privacy Framework and Standard Contractual Clauses |
| Google LLC, Apple Inc. | Sign in with Google or Apple; payments in Google Play and the App Store. They act as independent controllers under their own policies: Google, Apple | Under their own policies |
Card details are handled only by Apple or Google; we never see them. Your account, presets and practice data are never sold, shared for advertising or used for ads. Under some US state laws, letting Google use data from the app for personalised ads can count as “selling” or “sharing” personal information or as targeted advertising; in those states you can opt out at any time in Help & Feedback → Ad privacy, and the ads are then not personalised. How Google uses data from apps that show its ads is described on Google’s page about partner sites and apps. The app does not respond to browser “Do Not Track” signals; your choices about ads are the ones described in section 3 and here.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. How long we keep it
- Account and synced data: until you delete the account. Deleting removes it from the live database at once; backup copies are overwritten within 30 days.
- Purchase records at RevenueCat: until you delete the account or ask us to delete them.
- The free-week code on Android: 12 months from the day your free week began; then it is deleted.
- The Sign in with Apple token: until you delete the account; then it is revoked at Apple and deleted.
- Crash reports: at most 90 days.
- Bug reports and suggestions: until handled, at most 24 months.
- Ad data: kept by Google under its own rules (section 4). Your consent choice, where it is asked, the times ads were shown and how many ads you watched to open a Premium feature are kept on your device.
- Records the law requires, such as tax records of sales: as long as the law requires.
6. Deleting your account
In the app: menu → Account → Delete account. Without the app: see Delete your account. Deleting the account also deletes your purchase records at RevenueCat and, if you signed in with Apple, disconnects the app from your Apple Account; what you bought stays with your Apple or Google account and can be restored. Deleting the account does not cancel a subscription; cancel it in the App Store or Google Play.
7. Your rights
You may ask us to access, correct, delete or export your data, to restrict its processing or to stop processing based on our legitimate interest, and you may withdraw consent at any time; this does not affect processing before the withdrawal. Write to nomosmetronome@gmail.com; we answer within one month and no later than 30 days after we receive your request. You may also complain to a data protection authority: in the EU the authority of your country, in the UK the Information Commissioner’s Office, in Ukraine the Ukrainian Parliament Commissioner for Human Rights.
Ads: you can change your choices at any time. Google’s consent form and the US privacy choices, where they are shown: Help & Feedback → Ad privacy. Tracking on iPhone: Help & Feedback → Tracking. The advertising ID on Android: your device settings. Premium shows no ads at all.
When data is processed outside your country, for example in the USA, this is necessary to provide the service you asked for and is protected as described in section 4.
8. Children
Nomos Metronome is for musicians of all ages but is not directed at children under 13, and we do not knowingly collect personal data from children under 13. You must be at least 13 to create an account; if you are under the age of digital consent in your country (up to 16 in the EU), ask a parent or guardian first. If you believe a child under 13 has given us personal data, write to us and we will delete it.
9. Security
Data travels only over encrypted connections (HTTPS). Your sign-in session is kept in the secure storage of your device (iOS Keychain, Android Keystore). On our server each account can read and change only its own data. If a breach affects your data, we inform the authorities and you as the law requires.
10. Changes
When we change this policy we update the dates at the top. For important changes we tell you in the app before they take effect.
11. Language versions
This policy is published in English and Ukrainian, on our website and in the app. Both versions have the same content. If they ever differ, the version more favourable to you applies.