Privacy policy

Last updated: 19 August 2026

PeakMultitrack (“the app”) runs on your device. There are no accounts, and we operate no server of our own: your music never passes through us. This policy explains what stays on your device, and names the few moments in which the app connects to the internet.

What we collect: nothing

We do not collect, store or transmit personal data. The app has no account and no sign-in, so there is nothing for you to register.

• No analytics, no telemetry and no crash reporting.
• No advertising, no advertising identifier and no tracking of any kind.
• No third-party tracking or marketing components. The app’s only third-party code library is ZIPFoundation, which reads and writes zip files on your device and has no networking of its own.

Your content stays on your device

The audio you import, the stems the app separates, mixdowns, recordings, songs, setlists and settings are stored only on your device, inside the app’s own container. The app has no upload path: nothing you put into it is sent to us or to anyone else. You control that content, and deleting the app or its files removes it.

When the app connects to the internet

The app is not an offline-only program, and we would rather be exact than reassuring. There are exactly three situations in which it opens a network connection. None of them involves an account, and none of them sends your audio, your projects or your activity anywhere.

1. Downloading the stem-separation model

If — and only if — you import a plain audio file and ask the app to split it into separate instruments, the app downloads the Hybrid Transformer Demucs model, roughly 118 MB, from our public repository on GitHub (github.com/bustamantelujano/peakmultitrack-models). It is a plain request for a fixed public address: no parameters, no identifiers and no custom headers are attached. The file is verified against its SHA-256 checksum and stored on your device, so the download happens once per installation and stem separation works offline from then on. As with any request to any website, GitHub receives your device’s IP address and its default user agent. If you only play multitrack material you already have, this download never happens.

2. Importing from Google Drive

If you paste a link to a public Google Drive folder, the app contacts drive.google.com and drive.usercontent.google.com to list that folder and download the file you select. It sends only the folder or file identifier contained in the link you provided, together with a fixed user agent. There is no Google sign-in and no access to your Google account: the app reads public links only, and it only downloads — it never writes anything back.

3. Purchases

Purchases are handled by Apple through StoreKit. We operate no server and no receipt-checking service of our own, and your purchase is verified on your device. The app never sees your payment details. What Apple does with the transaction is covered by Apple’s own privacy policy.

Music analysis on your device

All musical analysis happens on your device; no audio is sent anywhere to be analysed.

• Chords are detected by ChordNet, an open-source research model (ISMIR 2019, MIT licence, Music X Lab) that is included inside the app and runs through Apple’s Core ML. Chord detection requires iOS or macOS 27 or later.
• On iOS and macOS 27 or later, song structure, key and tempo come from Apple’s on-device MusicUnderstanding framework, whose beat grid is also used to refine the timing of the chords.
• On earlier systems the app uses its own built-in signal processing for key and tempo. The results are approximate, and section detection is not available.

Files and permissions

The app works with the files and folders you explicitly choose in the system file picker, and with the Google Drive links you paste. If a feature needs a system permission, iOS or macOS asks you for it at the moment you use that feature, and you can refuse it or withdraw it later in system settings.

Children

The app is not directed at children under 13, and it collects data from no one.

Keeping and deleting data

Because we operate no server, there is nothing for us to keep and nothing for you to ask us to delete. Everything the app creates lives on your device: removing the app removes it. The downloaded separation model is a program file rather than personal data, and it is removed with the app as well.

Changes

If this policy changes, we will update this page and the date shown at the top.

Contact

For privacy questions, write to: support@peakmultitrack.com.