MetroTune™ Privacy Policy

1. Introduction

Archet Studio LLC ("Archet Studio," "we," "our," or "us") develops and operates MetroTune™, a mobile application that provides metronome and chromatic tuning capabilities for musicians.

This Privacy Policy explains how we collect, use, and disclose information when you use the MetroTune™ application or visit our website at https://archetstudio.com, and describes your privacy rights and choices.

2. Scope

This policy applies to the MetroTune™ mobile application developed and published by Archet Studio LLC, including versions distributed through the Apple App Store and Google Play Store, as well as the Archet Studio LLC website (archetstudio.com) as it relates to MetroTune™. This policy applies globally to all users regardless of location, with jurisdiction-specific rights described in Section 10.

3. Current Data Collection

This policy describes the data practices of MetroTune™ during normal operation and distribution through public app stores. The only data we directly collect is through direct email contact. This includes messages sent to any of our email addresses: inquiry@archetstudio.com (general inquiries), support@archetstudio.com (app support), and privacy@archetstudio.com (privacy requests). If you contact us for support, we receive the information you voluntarily provide, such as your email address and any technical details (device type, OS version) you include. We use this information only to resolve your technical issues and improve our products. We do not sell this information or use it for marketing purposes. Email correspondence is retained for 12 months after the inquiry is resolved, after which it is permanently deleted.

Data we do not collect:

• Your name or any in-app account credentials
• Email addresses entered within the app
• Contacts, call logs, or SMS data
• Photos, camera, or video content
• Precise or coarse geolocation
• Payment information or financial data
• Biometric identifiers or health data
• Browsing history or cross-app behavior

4. Application Data Practices

MetroTune™ adheres to the Privacy Manifest and Data Minimization principles outlined in this document. The following describes the data practices built into the application:

4.1 Microphone Audio (Transient)

MetroTune™ accesses the device microphone for real-time audio analysis, including pitch detection (tuner) and optional hands-free control via double-clap detection (metronome). All audio is processed entirely in-memory on the user's device using pure signal processing. It is never recorded, stored, or transmitted. No speech recognition is performed. We do not derive or infer your identity, biometrics, or any personal characteristics from audio data.

4.2 User Preferences (Local Only)

MetroTune™ stores user preferences (such as color theme and premium unlock status) locally on the device using AsyncStorage. This data never leaves the device and is not transmitted to any server.

4.3 Third-Party SDK Data

Third-party advertising SDKs currently integrated for ad serving and bidding:

• Google Mobile Ads SDK (AdMob) — primary ad delivery and mediation
• Pangle (ByteDance) — bidding-source ad demand
• Vungle / Liftoff — bidding-source ad demand
• PubMatic — bidding-source ad demand provided through AdMob mediation
• OpenX — bidding-source ad demand provided through AdMob mediation

MetroTune™ also integrates an analytics SDK:

• Firebase Analytics (Google) — app-usage analytics linked to Google AdMob so that estimated ad revenue, impression, and interaction data flow into Firebase for reporting by region, session, app version, and cohort. Used for analytics, ad delivery, fraud prevention, and monetization reporting.

Upcoming: Unity Ads may be added as an AdMob mediation partner in an upcoming release. When integrated, it will be subject to the same data practices described in this section and to Unity's own privacy policy.

MetroTune™ itself does not collect or upload these data. Each ad network may, when an ad is requested or shown, collect:

• Android Advertising ID (AAID)
• iOS IDFV (per-app identifier; no user consent required)
• iOS IDFA — only if you grant tracking permission via Apple's App Tracking Transparency (ATT) prompt
• IP-based approximate location
• Ad request, impression, click, reward, and performance data
• Estimated ad revenue per impression (forwarded to Firebase Analytics for monetization reporting when AdMob impression-level revenue is enabled)
• App version, device type, country or region, session and event data used by Firebase Analytics for app-usage and ad-performance reporting
• Device and SDK diagnostics needed for fraud prevention, ad delivery, measurement, and reliability

Ad personalization is determined dynamically based on user consent and platform tracking permissions (see Section 7 for the full logic). We do not maintain a server-side database of user data; we relay only what these SDKs collect during ad delivery.

Firebase Analytics is the only analytics SDK integrated. No crash-reporting, social, or other first-party telemetry SDKs are integrated.

Each ad network's privacy policy:

• Google AdMob: policies.google.com/privacy
• Pangle: pangleglobal.com/privacy/policy
• Vungle: vungle.com/privacy/
• PubMatic: pubmatic.com/legal/privacy-policy/
• OpenX: openx.com/legal/privacy-policy/
• Firebase Analytics (Google): firebase.google.com/support/privacy
• Unity Ads (upcoming): unity.com/legal/privacy-policy

4.4 Rewarded Ad Value Exchange

MetroTune™ offers a 24-hour premium content unlock in exchange for watching a rewarded video advertisement. When a user completes a rewarded ad, we process the ad completion event to grant temporary access to premium features (e.g., additional sound packs).

• The ad completion timestamp is stored locally on the device via AsyncStorage
• Access expires automatically after 24 hours
• No payment information, account credentials, or personal data is collected during this exchange
• The AdMob SDK records the rewarded ad conversion event for ad network reporting

4.5 Geolocation Data

MetroTune™ does not collect Precise Geolocation Data. In the event that any future feature requires temporary location access, it will be accompanied by a clear, obvious on-screen indicator as required by applicable law.

5. Data Storage & Security

Archet Studio LLC does not operate its own backend servers or cloud storage. User preferences and app state are stored locally on the device. Ad data is transmitted to Google's servers by the AdMob SDK.

• Local storage: Preferences are stored via AsyncStorage (SQLite on Android, NSUserDefaults on iOS). This data is non-sensitive — containing only UI preferences such as color theme and a premium unlock timestamp, with no personal identifiers — and is therefore not encrypted at rest.
• Network security: All network connections (AdMob) are enforced over HTTPS/TLS.
• Data retention: Local data persists until the user uninstalls the application, at which point all local data is permanently deleted. Data collected by the AdMob SDK is retained according to Google's data retention policies. We do not control Google's retention schedule. To review and manage data Google holds about you, visit Google's Data & Privacy controls.
• Data breach notification: In the event of a data breach affecting personal information, we will notify affected individuals and relevant authorities in accordance with applicable law, including within 72 hours for GDPR-covered incidents and as required under California Civil Code § 1798.82.

6. Third-Party Services

MetroTune™ integrates or will be distributed through the following third-party services. Third-party partners (in particular, Google/AdMob) collect data directly from your device as described below — this collection occurs independently of Archet Studio LLC and is subject to the partner's own privacy policy.

Firebase Analytics is the only analytics SDK integrated; no crash-reporting or social SDKs are integrated. Archet Studio LLC does not independently sell user data. The advertising and analytics SDKs listed above collect data as described in Section 4.3 as part of their standard operation, including ad measurement and monetization reporting.

7. Advertising & Tracking

MetroTune™ displays advertisements through Google AdMob, which mediates additional bidding sources (Pangle, Vungle/Liftoff, PubMatic, OpenX). Ad performance and estimated ad revenue events are also forwarded to Firebase Analytics, which is linked to the same AdMob account, for monetization reporting. Ad personalization is determined dynamically based on the following logic:

On Android, the AAID may be used by the ad SDKs to serve personalized advertisements and to track ad conversions that unlock premium content (see Section 4.4). On iOS, the IDFA is used only when ATT permission has been granted; otherwise, ads are non-personalized.

iOS Ad Serving (App Tracking Transparency)

On iOS, MetroTune™ integrates Apple's App Tracking Transparency (ATT) framework. The ATT permission prompt is presented the first time you attempt to view a rewarded video advertisement (premium content unlock). Subsequent rewarded-ad attempts use your cached decision. Declining ATT does not block any other app feature.

• If you grant ATT: the IDFA may be made available to the ad SDKs (Google AdMob, Pangle, Vungle/Liftoff, PubMatic, OpenX) and to Firebase Analytics for ad attribution, personalization, measurement, and fraud prevention.
• If you decline ATT (or have not yet been prompted): iOS itself zeros the IDFA at the operating-system level, and MetroTune™ additionally sets requestNonPersonalizedAdsOnly: true on every ad request, so ads are served as non-personalized.
• IDFV (Identifier for Vendor), a per-app identifier that does not require user consent, may be sent to the ad mediation networks for fraud prevention and ad attribution regardless of ATT status.

MetroTune™ itself does not directly collect, store, or upload IDFA, AAID, or IDFV. Identifier handling occurs only inside the bundled ad SDKs when an ad is requested or shown. MetroTune™ does not track users across apps or websites owned by other companies for its own purposes.

EU/EEA/UK Consent (Google UMP)

For users located in the European Economic Area, the United Kingdom, or Switzerland, MetroTune™ implements the Google User Messaging Platform (UMP) consent framework. At first launch (or when consent status has lapsed), a Google-hosted consent form is presented. This form explains the categories of data collected, the purposes of processing, and the third-party partners (Google/AdMob, Firebase Analytics, and the supported mediation networks — including Pangle, Vungle/Liftoff, PubMatic, OpenX, and Unity Ads if added in a future release) that may access data. Your UMP consent choices are used to configure the supported mediation partners. On iOS, both UMP consent and ATT permission must be granted for personalized ads; otherwise ads are served as non-personalized.

Ad Supply Chain Transparency

Our ad supply chain is authorized via an app-ads.txt file hosted at archetstudio.com/app-ads.txt, identifying Archet Studio LLC as a DIRECT publisher (ID: pub-8090048526672531). Google's TAG (Trustworthy Accountability Group) certification authority ID f08c47fec0942fa0 is included to provide users and advertisers with a verified, transparent ad supply chain.

To limit ad personalization:

• iOS: Settings > Privacy & Security > Tracking — turn off "Allow Apps to Request to Track" (blocks the ATT prompt and zeros the IDFA system-wide), or decline the ATT prompt when MetroTune presents it. With ATT not authorized, all ads are non-personalized.
• Android: Settings > Google > Ads > Opt out of Ads Personalization (prevents the ad SDKs from using the AAID).
• EU/EEA/UK: The Google UMP consent form is shown at first launch. To change your consent choice, contact us at privacy@archetstudio.com to request a consent reset.

8. Privacy Manifest & Required Reason APIs

MetroTune™ is developed in accordance with Apple's Privacy Manifest policy and integrates Apple's App Tracking Transparency (ATT) framework. The IDFA is requested only with the user's explicit consent, via the ATT prompt presented on the first attempt to view a rewarded advertisement.

• NSPrivacyTracking: Enabled (true). MetroTune™ presents the ATT prompt before any tracking can occur, and ad SDKs receive the IDFA only when the user grants permission.
• NSPrivacyTrackingDomains: Intentionally omitted from the app-level PrivacyInfo.xcprivacy. Per-SDK tracking-domain disclosure is delegated to each bundled advertising SDK's own privacy manifest, which Apple aggregates into the binary at build time. This configuration was accepted by App Review for the current production build.
• Required Reason APIs: MetroTune™ uses UserDefaults (via AsyncStorage) strictly for storing user preferences such as color theme and premium unlock timestamps. File Timestamp APIs, if accessed, are used solely for cache management of bundled assets. These APIs are never used for device fingerprinting or cross-app identification.

MetroTune™ itself does not collect, store, or upload IDFA, AAID, or IDFV. Identifier handling occurs only inside the bundled advertising SDKs (Google Mobile Ads, Pangle, Vungle/Liftoff, PubMatic, OpenX, Google UMP) when an ad is requested or shown, and the Firebase Analytics SDK for app-usage and ad-measurement reporting. No crash-reporting or other first-party telemetry SDKs are integrated.

All current and future releases adhere to these Privacy Manifest and Data Minimization principles.

9. Device Permissions

MetroTune™ may request the following device permissions:

iOS

• Microphone: Required for real-time audio analysis features such as pitch detection (tuner) and optional hands-free control via double-clap detection (metronome).
• Microphone (Background): Used for real-time audio analysis while the app is in the foreground. Background audio is not enabled; playback and microphone listening stop when the app is backgrounded or the screen is off.
• Internet (network access): Used by the advertising SDKs (Google AdMob, Pangle, Vungle/Liftoff, PubMatic, OpenX; Unity Ads if added in an upcoming release) for ad delivery, and by Firebase Analytics for analytics and ad-measurement reporting. Best-effort — if no network is available, ads will not be shown but all other app features continue to function normally.

Android

• Record Audio: Required for real-time audio analysis features such as pitch detection (tuner) and optional double-clap detection (metronome).
• Modify Audio Settings: Required for audio routing during simultaneous playback and recording.
• Internet: Used by the advertising SDKs (Google AdMob, Pangle, Vungle/Liftoff, PubMatic, OpenX; Unity Ads if added in an upcoming release) for ad delivery, and by Firebase Analytics for analytics and ad-measurement reporting. Best-effort — if no network is available, ads will not be shown but all other app features continue to function normally.

10. Your Rights

The only data Archet Studio LLC directly holds is information you voluntarily provide via email correspondence to privacy@archetstudio.com.

All locally stored preferences are automatically deleted when the user uninstalls the application. For data collected by the AdMob SDK, users may refer to Google's privacy tools to manage their data.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of personal information we hold about you. To submit a data deletion request, email privacy@archetstudio.com with the subject line "Data Deletion Request."
• Right to Correct: Under CPRA § 1798.106, you may request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: We do not "sell" personal information. However, our use of the advertising and analytics SDKs (Google AdMob, Pangle, Vungle/Liftoff, PubMatic, OpenX, Firebase Analytics) on Android, and on iOS when ATT permission has been granted, may be considered "sharing" for cross-contextual behavioral advertising purposes under the CPRA. You may opt out by adjusting your device settings (see Section 7).
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under the CPRA (e.g., Social Security numbers, financial account details, precise geolocation, racial or ethnic origin, biometric data for identification).
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your California privacy rights.

Authorized Agent

You may designate an authorized agent to submit a request on your behalf. To do so, provide a signed, written authorization to the agent and contact us at privacy@archetstudio.com so we can verify your identity and the agent's authority.

Financial Incentive Disclosure

MetroTune™ offers a rewarded ad value exchange in which users may watch a rewarded video advertisement to receive a 24-hour premium content unlock (see Section 4.4). This exchange may involve the processing of ad request data and advertising interaction data by the advertising SDKs. Participation is entirely voluntary, and you may use the application without participating. The value of the premium content unlock is reasonably related to the value of the rewarded ad placement.

To exercise any of these rights, contact us at privacy@archetstudio.com. We may need to verify your identity before processing your request; we will ask you to confirm the email address from which your inquiry was sent. We will respond within 45 days as required by California law.

European Economic Area (EEA) / GDPR Rights

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) provides you with additional rights regarding your personal data.

Data Controller

Archet Studio LLC is the data controller for personal data it directly collects, specifically email correspondence and website contact interactions. For data collected through the Google AdMob SDK and Firebase Analytics SDK, Google LLC acts as an independent data controller (for AdMob personalization and Firebase Analytics product improvement) and as a processor on Archet Studio's behalf (for measurement and monetization reporting performed at Archet Studio's direction), in accordance with the Google Privacy Policy and the Firebase Privacy & Security documentation.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent (Art. 6(1)(a)): Relied upon for EEA/UK users. MetroTune™ implements Google UMP, which presents a consent form to EEA/UK users at first launch. Personalized advertising is served to EEA/UK users only with explicit consent (Android only; iOS always serves non-personalized ads). You may withdraw consent at any time (see "Right to Withdraw Consent" below).
• Legitimate Interest (Art. 6(1)(f)): Non-personalized advertisement delivery (where consent is not given or not applicable) and email correspondence to respond to inquiries.

Your GDPR Rights

Under the GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete personal data
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — request restriction of processing of your personal data
• Data Portability — receive your personal data in a structured, commonly used, machine-readable format
• Object — object to processing of your personal data based on legitimate interest
• Withdraw Consent — withdraw previously granted consent at any time (see below)
• Lodge a Complaint — file a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us at privacy@archetstudio.com. We will respond within 30 days as required by the GDPR.

International Data Transfers

Data collected by the AdMob SDK may be transferred to Google servers located in the United States and other countries outside the EEA. These transfers are governed by the EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs) as implemented by Google. For more information, see Google's data transfer frameworks.

EU Representative

Archet Studio LLC is a small business whose processing of EEA personal data is occasional, does not include large-scale processing, and does not involve special categories of data or data relating to criminal convictions. Accordingly, we rely on the exemption under GDPR Article 27(2) and have not appointed an EU representative. You may contact us directly at privacy@archetstudio.com for any data protection inquiries.

Automated Decision-Making

Archet Studio LLC does not engage in automated decision-making or profiling that produces legal or similarly significant effects. The AdMob SDK may use automated processes to select and serve personalized advertisements; for details, refer to the Google Privacy Policy.

Right to Withdraw Consent / Limit Ad Personalization

You may withdraw or limit ad personalization consent at any time:

• iOS: Decline the ATT prompt when MetroTune presents it (or change your choice in Settings > Privacy & Security > Tracking). With ATT not authorized, all ads are non-personalized.
• Android: Settings > Google > Ads > Opt out of Ads Personalization.
• EU/EEA/UK — UMP consent: To reset your consent choice, contact us at privacy@archetstudio.com to request a consent reset. We will respond within 30 days.

South Korea (PIPA)

If you are located in the Republic of Korea, the Personal Information Protection Act (개인정보 보호법, "PIPA") provides you with additional rights and protections regarding your personal information. For the complete Korean-language privacy policy with full PIPA compliance, please refer to our 한국어 개인정보 처리방침.

To exercise any of your rights under PIPA, contact the Privacy Officer at privacy@archetstudio.com. We will respond without delay and within 10 days as required by PIPA. You may also file a complaint with the Personal Information Protection Commission (PIPC) at pipc.go.kr.

11. Children's Privacy

MetroTune™ is a general-audience utility application and is not directed at children under 13. Archet Studio LLC does not knowingly collect personal information from children. If we become aware that personal data from a child under 13 has been inadvertently collected, we will take steps to delete it promptly.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us at privacy@archetstudio.com.

12. Changes to This Policy

Current version: v2.3

We may update this Privacy Policy from time to time, including when features, legal requirements, or data practices change. Any changes will be posted on this page with a revised effective date. For material changes, we will provide prominent notice within MetroTune™ before changes take effect. We encourage you to review this page periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: