Who we are
Soundtrack is an iOS running app developed by Isaak Hernandez. This Privacy Policy describes what data the app collects, how it's used, and your choices.
If you have questions, contact hello@soundtrack.run.
What we collect
To deliver the core experience — recording your runs and the music you listened to — Soundtrack collects:
- Account info. When you sign in with Apple, we receive your name (if you share it), your email address (or Apple's private relay address if you choose "Hide My Email"), and a stable user identifier. We store these and a username you choose.
- Workout data. While a run is active, we record your route (precise latitude/longitude points with timestamps), and at the end of the run we store its distance, duration, and estimated calories. Location is collected only during an active run, with your explicit permission, and never in the background otherwise. Heart rate and live pace may be processed during the run to power the live display, but are not retained on our servers after the run ends; your workout itself is saved to Apple Health on your device.
- Music library. The Apple Music IDs, titles, artists, and durations of songs in your library. We use this to know what's available to play and to record what you listened to during a run.
- Playback log. The songs that played during each run, with start/end timestamps and positions, so we can show your tracklist on the run detail screen.
What we don't collect
- We do not collect device identifiers (IDFA) or run any third-party advertising or analytics SDKs.
- We do not collect contacts, photos, or any other personal data outside the categories listed above.
- We do not store audio recordings or any music files. Playback is performed by Apple Music on your device.
Where your data is stored
Soundtrack uses two third-party services to operate:
- Supabase (supabase.com) — hosts our user database and authentication. Servers in the United States (us-east).
- Railway (railway.com) — hosts our application server. Servers in the United States (us-east4).
Workout data and playback history are written to Supabase. The route geometry of each run is stored as part of the run record.
Sharing
If you mark a run as unlisted (the default), anyone with the share link can view its route, stats, and tracklist. Your username and display name appear on the page.
You can change a run's visibility to private at any time, which makes the share link return a 404 for anyone other than you.
We do not share or sell your data to advertisers or other third parties. We may disclose data if required by law.
Apple Music & Health
Music playback during a run is performed by Apple's MusicKit on your device. The Apple Music app and your Apple ID's listening history are governed by Apple's privacy practices, not ours.
Workouts are recorded as standard HKWorkout entries in Apple Health. You control what apps can read or write Health data via iOS Settings.
Your rights
You can:
- Access your data via the app — every run you've recorded is visible under Activities and on your profile.
- Delete your account and all associated data via Profile → Account → Delete Account. This is irreversible and removes your auth record, library, runs, and playback history within seconds.
- Revoke permissions for Health, Location, and Apple Music at any time via iOS Settings → Privacy. The app will continue to function but features depending on those permissions won't work.
For any other request, email hello@soundtrack.run.
Children
Soundtrack is not directed to children under 13 and we do not knowingly collect data from them.
Retention
We keep your data for as long as your account exists. Deleting a run removes its route, stats, and playback log; deleting your account removes everything, including your auth record and library. We don't keep server-side backups of deleted accounts beyond our host's standard short-lived database backups.
Changes
If we make a material change to this policy we'll update the "Last updated" date at the top of this page. Continued use of the app after a change means you accept the updated policy.