Last updated: September 13, 2026

FingerTune is an Android app that turns hand gestures into music: the camera watches your hands, the app plays chords, and you can record one-minute clips and share them with other players. This policy explains what data the app handles, why, and what control you have over it.

Who is responsible

FingerTune is operated by its developer, reachable at [email protected] This is the address for any question or request about your data.

What the camera sees stays on your phone

Hand tracking runs entirely on your device using an on-device model (MediaPipe Hand Landmarker). Camera frames are analysed in memory and discarded; they are never sent to us or to anyone else. The only video that leaves your phone is a clip you deliberately record and then choose to publish.

FingerTune does not request microphone access. The sound in your clips is generated by the app's own synthesiser and mixed into the recording — the app never listens to the room.

Data we collect

• Account. When you sign in with Google we receive your Google account identifier, email address, display name and profile photo URL. We store the identifier, name and photo URL; the email address is kept only by Firebase Authentication and is not shown to other users.
• Profile. The nickname you choose. It is public and shown next to everything you publish.
• Performances. Clips you publish: the video, a thumbnail, your caption, the duration, and a summary of what you played (key, instrument, chord sequence). Published performances are public to every FingerTune user.
• Likes. Which performances you have liked, so the count is correct and you cannot like the same clip twice.
• Reports and blocks. If you report a performance we store which clip you reported, its author, your account identifier, the reason you chose and the time, so the FingerTune team can review it. If you block someone we store their account identifier and nickname under your profile; the list is visible only to you and the blocked person is not notified.
• Integrity checks. Firebase App Check with Google Play Integrity attests that requests come from a genuine copy of the app. This involves Google processing a device integrity token; we receive only a pass/fail signal.
• Technical logs. Our servers record ordinary request metadata (IP address, time, request path, result) for security and to keep the service running. These logs are not linked to your profile by us and are retained for a short period by the infrastructure providers listed below.

FingerTune contains no advertising and no third-party analytics or tracking SDKs. We do not collect your contacts, location, or device identifiers beyond what is described above.

How we use it

• To sign you in and keep your session.
• To show your performances, nickname and photo in the shared feed and on your profile.
• To count likes and posts.