Privacy Policy for Rushless
Effective date: October 20, 2026
This policy covers the Android app Rushless ("the App") and the website rushless.app. It describes which personal data is processed. In short: the App has no user account, no advertising, no analytics and no tracking. Your songs, setlists and exercises stay on your device. We do not run a server of our own for the App.
1. Controller
Manuel Büttner
MB SmartSystems
Schlesierstraße 19a
64665 Alsbach-Hähnlein
Germany
Email: support@rushless.app
Further details are in the legal notice (Impressum): https://rushless.app/impressum
2. The App
2.1 Data on your device
Everything you create in the App is stored only locally on your device: songs, setlists, exercises, notes and settings. This data is not transferred to us. We have no access to it.
The data is kept in the App's protected storage area, which other apps cannot access. If you uninstall the App or clear its storage in the Android settings, this data is removed from the device.
Android backup by Google.The App does not opt out of Android's automatic backup. If you have turned on backup to your Google account on your device, Android may include the App's data in that backup and restore it when you set up a device. You control this backup in your device settings; it runs between you and Google, and we receive no data from it.
2.2 Backup export and import
In the settings you can save a backup of your data as a file. Android's save dialog opens and you decide where the file is stored. For an import you pick a file through Android's file picker. The App does not transfer anything to us in the process. What happens to the saved file (for example if you put it in cloud storage) is up to you.
2.3 Error log
If the App crashes or a program error occurs, it stores an entry on your device with the time, the error message and the technical program trace (stack trace). At most the last 20 entries are kept. The log is never sent automatically. You can save it as a text file through Android's save dialog in the settings. We only receive it if you send us that file yourself; section 2.6 then applies.
2.4 Pro purchase through Google Play
Rushless Pro is offered as a one-time purchase through Google Play. Google handles the purchase and the payment (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google's terms and privacy policy apply: https://policies.google.com/privacy. We do not receive payment data.
For the purchase the App uses Google's Play Billing Library. Through it, at start-up and when you buy, the App asks Google Play whether the store is reachable, what Pro costs and whether your Google account already holds a Pro purchase, so that a purchased Pro is unlocked again after a reinstall. On your device the App stores only whether Pro is unlocked and a counter for this check.
The Billing Library contains a Google component for sending technical log data to Google. This is why the App needs the permissions "internet access" and "view network connections". Google determines which data it processes through this component; we do not receive this data. The App itself does not open a connection to any server of its own.
The legal basis is Art. 6(1)(b) GDPR (carrying out the purchase) and, for restoring an earlier purchase, Art. 6(1)(f) GDPR. Our legitimate interest is that a paid Pro stays reliably unlocked on your device.
2.5 Playback notification and permissions
So that the metronome keeps playing while the screen is locked or the App is in the background, the App shows a media notification with play and stop. This notification is created on your device; no data is transferred to us.
The App requests the following permissions:
- Foreground service and media playback (FOREGROUND_SERVICE, FOREGROUND_SERVICE_MEDIA_PLAYBACK): so the click keeps running in the background.
- Notifications (POST_NOTIFICATIONS): for the media notification.
- Keep device awake (WAKE_LOCK): so the screen does not turn off while the App is open in the foreground.
- Purchases through Google Play (BILLING), internet access (INTERNET) and view network connections (ACCESS_NETWORK_STATE): for the Pro purchase, see section 2.4.
The App does not request access to location, contacts, camera, microphone or photos.
2.6 Feedback by email
The App has a feedback button. It opens your own email app with our address support@rushless.app as recipient. The App itself sends nothing. Whether and what you send is your choice; the email reaches us through your email provider.
If you write to us (through this button or directly), we process your email address, your name if it appears in the email, and the content of your message including attachments (for example an error log), in order to handle your request. The legal basis is Art. 6(1)(b) GDPR where it concerns use of the App or a purchase, otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering requests and improving the App.
If you want to test Rushless before its release, you send us the email address of your Google account. We add it to the App's tester list in the Google Play Console so that Google Play offers you the test version. We remove it again at your request. The legal basis is Art. 6(1)(b) GDPR.
Emails to support@rushless.app are received by our provider ALL-INKL.COM - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, and forwarded to our mailbox at Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We have a data processing agreement under Art. 28 GDPR with both. A transfer to the USA cannot be ruled out with Google; Google is certified under the EU-US Data Privacy Framework. Incoming emails are not evaluated or answered automatically.
We delete your message once it is no longer needed to handle your request, unless statutory retention obligations prevent this.
2.7 Google Play Store
The App is distributed through Google Play. When you download and update it, Google processes data under its own responsibility, such as your Google account and details about your device. We have no influence on this. Google's privacy policy applies: https://policies.google.com/privacy
2.8 Children
Rushless is also intended for children aged 9 and over, for example drum students. We ourselves do not collect any personal data through the App, including from children: there is no account, no advertising and no analysis of usage. For the Pro purchase, Google processes data under its own terms (section 2.4); for children, the purchase settings that parents set in Google Play apply.
We only receive personal data if someone writes us an email themselves (section 2.6). Children under 16 should only write to us with their parents' consent. Parents can ask us at any time to delete messages from their child; an email to support@rushless.app is enough.
3. The website rushless.app
3.1 Hosting and server log files
The website is hosted by Vercel Inc., USA. When you visit the website, the host processes technically necessary data in server log files: IP address, date and time of the request, the page requested, the previously visited page (referrer) and browser and operating system. The server needs this data to deliver the page and to keep operations secure. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and reliably reachable website.
A data processing agreement under Art. 28 GDPR is in place with the host. For the transfer to the USA we rely on Vercel's certification under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR) and on the European Commission's standard contractual clauses (Art. 46 GDPR). Vercel keeps the log files only as long as needed for operations and then deletes or anonymises them; Vercel does not state a fixed period.
3.2 No cookies, audience measurement with Umami
The website sets no cookies and uses no advertising or tracking services. There is no contact form and no newsletter.
To evaluate how the website is used, we run Umami, an analytics tool on our own servers in the EU (analytics.mb-smartsystems.de). Umami records anonymised usage data (for example pages viewed, country, device type, referrer) without building user profiles. We do not pass this data on. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving the website). The App itself does not use Umami.
The fonts are delivered by our host together with the website; your browser does not connect to Google for them.
3.3 Encryption
The website is transmitted encrypted over HTTPS.
4. Disclosure to third parties
We do not sell data and do not pass it on for advertising. Recipients of personal data are only the service providers named in this policy, to the extent described.
5. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR) against us.
Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
Because the App's data is stored only on your device, these rights usually concern only emails you have sent us. You can delete the data on your device yourself at any time. For data that Google processes for purchases or Android backup, please contact Google.
No automated decision-making, including profiling, takes place.
For any request, an email to support@rushless.app is enough.
6. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)
https://datenschutz.hessen.de
7. Changes
If the App or the website changes in a way that involves processing other data, we will update this policy and publish the new version at https://rushless.app/privacy with a new effective date.