BandRoom

Appearance

Privacy Policy ​

Effective Date: October 24, 2026
Product: BandRoom (formerly TapeDrive) — Web, Mobile (iOS & Android), and Desktop (macOS, Windows, Linux)
Publisher: The BandRoom Project (bandroomapp.com)
Contact: privacy@bandroomapp.com

1. Executive Summary & Privacy Philosophy ​

BandRoom is an all-in-one band management workspace designed for musicians, rehearsal spaces, and live performers. BandRoom organizes your master Song Book, Practice Recordings, Rehearsals, and Live Gigs within a tactile vintage studio console interface.

We believe that your band's creative ideas, unreleased rehearsal takes, lyrics, chord charts, and setlists belong exclusively to you. The music software industry is filled with cloud platforms that harvest user behavior, monetize analytics, or force musicians into opaque ecosystems. BandRoom takes the opposite architectural approach:

  • Zero-Backend Architecture: BandRoom does not operate private central application servers that ingest, process, or store your music or metadata.
  • Zero Telemetry & Zero Trackers: We run no behavioral analytics, no ad tracking pixels, no telemetry SDKs, and no background session recorders.
  • 100% Client-Side Persistence: Your song catalog, setlists, rehearsal annotations, and settings are stored locally and securely on your device's on-device storage.
  • Bring Your Own Storage (BYOS): Your rehearsal audio streams directly between your device and your personal cloud storage accounts (Google Drive, Dropbox, SFTP, or local disk).
  • Isolated Multi-Device Sync: When using Google Drive for multi-device sync, BandRoom communicates strictly with a hidden, sandboxed Application Data folder (drive.appdata) that has zero access to your personal files or documents.

2. Zero Server Telemetry & Tracking ​

BandRoom is engineered as a private, standalone client application.

  1. No Third-Party Analytics: We do not embed Google Analytics, Google Tag Manager, Mixpanel, Amplitude, Segment, PostHog, or Firebase Analytics.
  2. No Advertising Trackers: We do not embed the Facebook Pixel, TikTok Pixel, Google AdSense, or any advertising retargeting beacons. BandRoom is 100% ad-free across both the Free and Pro tiers.
  3. No Behavioral Profiling: We do not track what songs you rehearse, which audio files you play, what keys or tempos you set, how frequently your band practices, or what setlists you build for live shows.
  4. No Cookies: The BandRoom website (bandroomapp.com) and web application (app.bandroomapp.com) do not use tracking or advertising cookies. Any data stored on your device is used exclusively to maintain your active theme preference, playback volume, and local catalog.

3. Client-Side Data Storage & Offline Architecture ​

All application data is managed locally on your hardware:

3.1 Local Device Database ​

BandRoom maintains an offline-first local database on your device containing:

  • Master Song Book: Song titles, original artists, musical keys, tempos (BPM), instrument tunings, vocal leads, arrangement notes, target durations, and reference chart links.
  • Multi-Take Associations: Linked rehearsal recording references, 1–5 star ratings, and 👑 Golden Take benchmark flags.
  • Gig Setlists: Venue names, dates, load-in and soundcheck schedules, stage curfews, flat setlist running orders, intermission breaks, and stage cues.
  • Practice Plans: Rehearsal dates, objective memos, and targeted song lists.
  • Song Cuts & Section Markers: Timestamped chapter markers (Intro, Verse, Chorus, Solo) and virtual song take boundaries (+ Song markers).
  • Connected Storage References: Pointers to your rehearsal folders (folder names and cloud provider references).

3.2 Audio Caching (Offline Engine) ​

When you stream audio files from your connected storage providers, BandRoom buffers audio into a local on-device cache. This allows instant offline playback during commutes or in basement rehearsal rooms with no cellular reception.

  • The cache size is configurable in Settings → Audio & Cache (from 5 to 50 tracks on the Free tier, up to 100+ tracks on BandRoom Pro).
  • Audio files reside strictly in your local device storage.
  • You can clear your cached audio at any time by tapping Clear Audio Cache in Settings.

3.3 Band Passcode Protection ​

If you enable the Band Passcode lock in Settings, your chosen password is securely hashed and stored locally on your device. BandRoom never transmits your passcode to any external server.

4. Google Drive Integration & Google OAuth 2.0 Compliance ​

BandRoom provides two distinct, sandboxed Google Drive integrations designed to uphold the highest standard of data isolation and user privacy.

4.1 Rehearsal Audio Streaming (Read-Only Public/Shared Folders) ​

To stream audio recordings from a band rehearsal folder shared via Google Drive:

  • BandRoom connects directly using secure shared folder links or API access.
  • BandRoom accesses only the specific shared folder specified by the user.
  • BandRoom requests no personal Google Drive account permissions for shared folder streaming and has zero ability to view your personal files.

4.2 Multi-Device Cloud Sync via drive.appdata (Isolated Application Sandbox) ​

To synchronize your Song Book, Gigs, Playlists, and Annotations across personal devices (e.g., between your iPhone, iPad, Android phone, and studio Mac/PC) without a third-party server, BandRoom offers optional Google Drive Multi-Device Sync.

Scope Requested: ​

https://www.googleapis.com/auth/drive.appdata

Scope Purpose & Data Isolation: ​

The drive.appdata (Application Data folder) scope is a specialized, restricted Google Drive permission that grants access strictly to a hidden, isolated sandbox directory created specifically for BandRoom.

  • Invisible Sandbox: The Application Data folder is hidden from your regular Google Drive web interface and cannot be accessed by other third-party Google Drive applications.
  • Zero Access to Personal Files: BandRoom CANNOT read, search, list, access, modify, or delete any of your personal files, Google Docs, Google Sheets, photos, videos, or folders outside of its own hidden application folder.
  • Data Stored in appdata: BandRoom writes a single encrypted or sanitized sync bundle (bandroom-backup.json) containing your Song Book metadata, setlists, practice plans, and custom markers. BandRoom does not upload raw audio files to drive.appdata.

Client-Side OAuth Token Lifecycle: ​

  • Authentication is handled exclusively through Google Identity Services (GIS) client-side OAuth 2.0.
  • OAuth access tokens received from Google are stored transiently in client-side on-device storage.
  • Tokens are never sent to BandRoom or any third party. All API requests to Google Drive originate directly from your device's browser or native runtime.
  • Revocation: You can disconnect Google Drive sync at any time in Settings → Backup & Data → Disconnect Google Drive Sync. Disconnecting immediately purges the OAuth token from your device. You can also revoke BandRoom's access globally at any time via your Google Account Permissions Page.

Google API Services User Data Policy Compliance: ​

BandRoom adheres strictly to the Google API Services User Data Policy:

BandRoom's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In accordance with Google's Limited Use requirements:

  1. No External Transfer: BandRoom does not transfer Google user data to any external server or third party. Data remains strictly between your local client device and Google Drive.
  2. No Advertising: Google user data is never used for serving advertisements, retargeting, personalized promotions, or lead generation.
  3. No AI / ML Model Training: Google user data is never used to train, retrain, or improve machine learning or artificial intelligence models.
  4. No Human Review: BandRoom employees, contractors, or developers have zero access to your Google user data. No human ever inspects your synchronized backup files unless you explicitly send a sanitized backup file to customer support for diagnostic assistance.

5. Other Third-Party Storage Integrations (BYOS) ​

BandRoom allows you to connect other storage backends to stream rehearsal takes. In all cases, communication is direct and client-centric:

  • Dropbox: BandRoom uses client-side direct API requests to read shared links and fetch audio files. Your Dropbox credentials or temporary tokens remain on your device.
  • Local File System (File System Access API): On desktop browsers and native desktop apps, BandRoom connects to local directories using the browser's native File System Access API or OS file handles. Access is granted on a per-folder basis by the user. Directory permissions are stored securely on your device.
  • FTP / SFTP (Desktop & Native Mobile): When connecting to private studio NAS servers, seedboxes, or home servers, BandRoom opens direct secure network connections. No intermediate proxy, relay, or cloud gateway is used. Your server host, port, username, and credentials remain securely stored on your local device.

6. Intellectual Property & Audio Rights ​

  • 100% User Ownership: You and your band retain complete, unencumbered ownership, copyright, publishing, and master recording rights to all musical works, lyrics, audio recordings, track names, setlists, and notes managed in BandRoom.
  • No Licensing Claims: BandRoom does not claim any license, assignment, copyright, or moral rights to user content.
  • No Content Fingerprinting: We do not scan, fingerprint, or analyze your audio takes for copyright enforcement, advertising, or automated content identification.

7. Device Permissions & Native Hardware Access ​

BandRoom requests native hardware permissions strictly to deliver musician utility features:

Platform PermissionTechnical IdentifierPurposeData Handling
Screen Wake Locknavigator.wakeLockKeeps your phone or tablet screen illuminated during Stage Mode so your setlist does not sleep mid-song.Operates entirely on-device; accesses zero personal data.
Local NetworkNSLocalNetworkUsageDescriptionAllows native desktop and mobile apps to discover and stream audio from local SFTP/FTP network-attached storage (NAS) on your rehearsal studio Wi-Fi.Direct socket connection; zero external reporting.
Background AudioUIBackgroundModes: audio / Android Foreground ServiceAllows rehearsal audio to continue playing when your screen is locked, during commute navigation, or while switching apps.Local audio playback pipeline; zero data collection.

8. In-App Purchases, Billing & Licensing ​

BandRoom offers optional commercial upgrades:

  • BandRoom Pro: A $9.99 one-time non-recurring lifetime license (or Pro access).

Payment Processing: ​

  • Mobile (iOS & iPadOS): Transactions are processed exclusively by Apple via StoreKit. Payment information is governed by the Apple Privacy Policy.
  • Mobile (Android): Transactions are processed exclusively by Google via Google Play Billing. Payment information is governed by the Google Privacy Policy.
  • Desktop (macOS, Windows, Linux) & Web: Transactions are processed by merchant-of-record providers (LemonSqueezy or Stripe Checkout). BandRoom never collects, processes, or stores credit card numbers, CVVs, or billing addresses on our infrastructure.
  • Entitlement Verification: BandRoom uses standard in-app purchase validation to activate Pro entitlements. No personally identifiable musical data is shared with billing providers.

9. Apple App Store & Google Play Privacy Disclosures ​

In accordance with Apple App Store Privacy Nutrition Labels and Google Play Data Safety standards:

  • Data Used to Track You: None. BandRoom does not track users across third-party apps or websites.
  • Data Linked to You: None. BandRoom does not collect or associate personal data with your identity.
  • Data Collected: None. BandRoom collects no Contact Info, Health & Fitness data, Financial Info, Location data, Sensitive Info, Browsing History, Search History, or Diagnostics linked to user identity.
  • Data Security: All cloud communication (Google Drive sync, Dropbox streaming, SFTP audio) is encrypted in transit using industry-standard Transport Layer Security (TLS 1.2 / TLS 1.3).

10. Data Retention, Portability & Deletion Rights ​

Because BandRoom operates on a client-centric model, you maintain total control over your data:

10.1 Data Portability ​

  • You can export your entire database at any time by navigating to Settings → Backup & Data → Export Band Data.
  • BandRoom generates a clean, standardized bandroom-backup.json file containing your Song Book, Gigs, Playlists, Annotations, and Sources. Sensitive authentication tokens and local passcodes are automatically excluded from exports.

10.2 Complete Data Deletion ​

  • Local Device Storage: To delete all local data, navigate to Settings → Audio & Cache → Clear All Data or clear your browser site data for bandroomapp.com.
  • Google Drive drive.appdata: To delete your synchronized cloud backup, navigate to Settings → Backup & Data → Disconnect Google Drive Sync and select "Delete Cloud Backup", or manually remove BandRoom permissions via your Google Account Security Settings.
  • Automated Local Backups: Delete the bandroom-backup.json file located in the local directory you selected with the File System Access API.

11. International Privacy Compliance (GDPR & CCPA/CPRA) ​

  • General Data Protection Regulation (GDPR - EU/UK): BandRoom processes data on the legal basis of performing our contract with you (delivering requested software features). Because we do not store personal data on central servers, you exercise your rights to access, rectification, portability, and erasure directly on your local device.
  • California Consumer Privacy Act (CCPA / CPRA): BandRoom does not sell or share your personal information with third parties for cross-context behavioral advertising or any commercial consideration. We have never sold user data and will never do so.

12. Children's Privacy (COPPA) ​

BandRoom is a music productivity application not directed to children under the age of 13 (or under 16 in the European Union). We do not knowingly collect or solicit personal information from children.

13. Changes to this Privacy Policy ​

We may update this Privacy Policy periodically to reflect enhancements to our features, storage integrations, or regulatory obligations. When changes are made, we will update the Effective Date at the top of this document. Continued use of BandRoom following the posting of changes constitutes acceptance of the revised policy.

14. Contact Us ​

If you have questions, concerns, or requests regarding this Privacy Policy or BandRoom's client-side data practices, please contact us:

  • Email: privacy@bandroomapp.com
  • Support: support@bandroomapp.com

Run your band from rehearsal room to center stage. Zero telemetry, pure client-side privacy.

Copyright © 2026 BandRoom. All rights reserved.