TradMate Android — Optional Usage Statistics
Notice version 1 · Updated October 23, 2026 · Android only. This notice covers optional remote usage snapshots in Android releases that implement this feature. It does not replace the iOS policy, the policy for offline-only releases, or the policies of RT Analyzer and AeroMeter. A website backend cannot activate reporting in an installed app.
Consent and scope
Remote reporting must remain off until you explicitly agree in the app. Declining or withdrawing consent must not restrict core functions. Local-only releases and releases with remote reporting disabled do not send these snapshots. Publishing this notice is not an announcement that every available Android release supports remote reporting.
Android 0.31.77/build77 offers optional real usage reporting, off until explicit consent. Only activity after consent is eligible; earlier local history and simulated counters are not converted into real reports. While running, the app checks every 45 seconds and on leaving the foreground. Normally it allows at most one successful automatic upload round per UTC day, which may include pending daily snapshots; consenting again can trigger an additional round. Registration can occur immediately after consent. Failed uploads retry with backoff, and delivery is not guaranteed while Android suspends or closes the app. Reports are cumulative UTC-day snapshots, not a live action stream; newer revisions replace earlier snapshots without adding totals twice.
Data sent and purpose
The service uses a random installation UUID and a per-installation credential; the server stores only the credential’s SHA-256 hash. The identifier can associate records across days, so it is pseudonymous, not fully anonymous, and does not identify a natural person or permanent hardware device.
Allowed fields are the protocol and consent versions; installation ID; Android platform; UTC date and revision; app version and build; cold-launch count; foreground-session count and seconds; playback seconds; accompaniment-start count; and successful CSV-import count. The server also stores registration, last-activity and snapshot-update timestamps. The purpose is to assess feature usage and improve product experience and reliability.
This statistics service does not receive tune names, ABC notation, tune IDs, library or CSV contents, filenames, search terms, recordings, microphone data, names, phone numbers, advertising IDs or precise location. It does not send usage records to advertising networks or third-party analytics services, and it does not join identifiers across other apps.
Website processing and hosting
The service is operated by Andy Xu at galeonwhistles.com. Contact: andyxuhang@gmail.com. On the Hawk Host copy of this service, the website origin and database are hosted in Hong Kong. Automatic Acronis backups are stored in Los Angeles, California, USA, with seven-day rolling retention. The host confirms that these backups are not encrypted. Depending on your location, consented summaries may be transferred to Hong Kong and included in backups in the United States.
The host records visitor IP addresses in webserver logs and retains those logs for 30 days. Request URLs may also be logged; statistics deletion URLs can contain a pseudonymous installation identifier. This confirmation does not establish a retention period for every other security or infrastructure log. The analytics database does not retain raw IP or User-Agent strings; that does not prevent infrastructure logging. Security rate counters use keyed digests and stop applying after at most two hours; non-identifying operational aggregates contain no installation ID.
No whole-site CDN is enabled by default by Hawk Host, and none was found in the inspected website configuration. Website visits may separately load Google Fonts or embedded YouTube resources, as described in the website privacy information. These browser connections are not third-party analytics SDKs in the app.
Android75/76 simulation builds use separate test identities beginning 74726164-0075-; these are not real user counts. Build77 disables the simulation controls and uses a separate ordinary installation identity for consented reporting. Updating the app or publishing this page does not grant consent. Existing refusals remain respected, and other apps or iOS releases are not enabled by this change.
Retention and deletion
The backend is configured to expire online installation-linked daily snapshots outside the latest 180 UTC days, registrations after 180 days without activity, and non-identifying operational aggregates outside seven UTC days. Scheduled cleanup removes expired online records; its execution is monitored separately. These database periods do not apply to manual backups.
In a release implementing these controls, withdrawing consent stops subsequent uploads. It does not itself erase already uploaded data. A separate deletion/reset action must authenticate with the installation credential, erase the installation record and daily snapshots, and reset the local identifier. An offline deletion remains pending until the server confirms it. You can contact the operator for assistance; do not email the credential.
Automatic Acronis backups have seven-day rolling retention and are not encrypted; separate manual and local backups currently have no fixed automatic expiry. Online deletion or database expiry does not immediately remove records from existing backup copies. The online database periods above do not govern backup retention. If a site backup is restored, the operator must clear restored analytics registrations and snapshots before reopening reporting; historical analytics must not be recovered from backups. The restored test statistics on this Hawk Host copy were cleared while intake remained paused.
iOS and other apps
This Android feature makes no statement that an iOS release collects usage data. iOS privacy disclosures must reflect that release’s actual implementation. RT Analyzer, AeroMeter and future apps have their own scope; adding them to a multi-app backend does not by itself change their behaviour or permit them to upload.
TradMate Android — 可选使用统计说明
说明版本 1 · 更新于 2026 年 10 月 23 日 · 仅适用于 Android。本页说明实现可选远程使用快照功能的 Android 版本，不替代 iOS、仅本地运行版本、RT Analyzer 或 AeroMeter 的隐私政策。网站安装后台不会自动开启已安装 App 的上报。
同意与适用范围
远程上报在明确同意前必须关闭，拒绝或撤回同意不得影响核心功能。仅本地统计或远程上传关闭的版本不发送这些快照。发布本页不代表所有可下载 Android 版本都已支持远程上报。
Android 0.31.77/build77提供可选真实使用统计，明确同意前关闭。只将同意后的活动纳入上报，不把同意前的本地历史或模拟计数转换为真实数据。App运行时每45秒及切到后台时检查发送；通常每个UTC日最多成功一轮自动上传，可包含待发送的每日快照；重新同意可额外触发一轮，同意后可立即注册。失败会退避重试，Android挂起或关闭App时不保证发送。上报按UTC自然日累计，不是实时事件流；较新修订替换旧快照，不重复相加。
数据字段与目的
使用随机安装实例 UUID 与独立凭据，服务端仅保存凭据的 SHA-256 哈希。该 ID 可关联跨天记录，属于假名化标识，不是完全匿名数据，也不代表自然人或永久硬件设备。
允许字段为协议和同意版本、安装 ID、Android 平台、UTC 日期与修订号、App 版本及 Build、冷启动次数、前台会话数与秒数、播放秒数、伴奏开始次数、CSV 成功导入次数。服务端还保存注册、最后活动及快照更新时间。目的为了解功能使用并改进产品体验和稳定性。
本统计服务不接收曲名、ABC、曲目 ID、曲库或 CSV 内容、文件名、搜索词、录音、麦克风数据、姓名、手机号、广告标识或精确位置，不向广告平台或第三方统计平台提供使用记录，也不将标识与其他 App 关联。
网站处理与托管
运营者为 Andy Xu，网站为 galeonwhistles.com，联系邮箱：andyxuhang@gmail.com。本服务的 Hawk Host 副本将网站源服务器和数据库托管于香港；Acronis 自动备份远程存放于美国加利福尼亚州洛杉矶，按 7 天滚动保留，服务商确认备份未加密。根据您所在位置，同意后的汇总数据可能传输至香港，并包含于美国的备份中。
服务商在网页服务器日志中记录访客 IP，日志保留 30 天。日志中的请求 URL 也可能包含假名化安装标识，例如统计删除请求。该确认不代表所有其他安全或基础设施日志均采用相同期限。统计数据库不保存原始 IP 或 User-Agent，不等于基础设施不记录连接信息；限流使用带密钥摘要，最长两小时后不再参与限流，非关联运维汇总不含安装 ID。
Hawk Host 不默认启用整站 CDN，已检查的网站配置亦未发现额外整站 CDN。网站访问可能另外加载 Google Fonts 或 YouTube 嵌入资源，见网站隐私说明。这些浏览器连接并非 App 内的第三方统计 SDK。
Android75/76模拟测试包使用74726164-0075-开头的独立测试身份，不代表真实用户数。77版关闭模拟入口，使用独立普通安装身份上报同意后的真实统计。升级或发布本页不等于用户同意；仍尊重已有拒绝状态，不会因此开启iOS或其他App的上报。
保留与删除
后台配置为：在线每日关联明细保留最近180个UTC日，180天不活跃的注册到期，非关联运维汇总保留最近七个UTC日；由计划清理任务删除到期在线记录，执行需独立监测。这些数据库期限不适用于手动备份。
在实现相关控制的版本中，撤回同意会停止后续上传，但不自动删除历史记录。应通过独立的删除／重置操作，以安装凭据验证后删除服务端注册和每日记录，再重置本地 ID；离线删除需等待服务端确认。可联系运营者协助，请勿通过邮件发送凭据。
Acronis 自动备份按 7 天滚动保留且未加密；另行制作的手动和本地备份目前没有固定的自动到期日。在线删除或数据库到期不会立即删除既有备份副本中的记录，上述在线数据库期限不决定备份保留期限。恢复整站备份时，运营者必须先清空恢复出的统计注册和快照，再开放上报，不从备份恢复历史统计。本 Hawk Host 副本恢复出的测试统计已在接收暂停期间清空。
iOS 与其他 App
本 Android 功能不表示 iOS 版本已收集使用数据，iOS 声明应与其实际版本一致。RT Analyzer、AeroMeter 及未来 App 分别按自身范围适用，加入多 App 后台不等于自动改变行为或获得上传许可。