Who we are
Soundtrack is an iOS running app developed by Isaak Hernandez. This Privacy Policy describes what data the app collects, how it's used, and your choices.
If you have questions, contact hello@soundtrack.run.
What we collect
To deliver the core experience — recording your runs and the music you listened to — Soundtrack collects:
- Account info. When you sign in with Apple, we receive your name (if you share it), your email address (or Apple's private relay address if you choose "Hide My Email"), and a stable user identifier. We store these and a username you choose.
- Workout data. While a run is active, we record your route (precise latitude/longitude points with timestamps), and at the end of the run we store its distance, duration, and estimated calories. Location is collected only during an active run, with your explicit permission, and never in the background otherwise. Heart rate and live pace power the live display and optional adaptive music. A heart-rate series may be stored with your saved run for GPX export. Your workout is also saved to Apple Health on your device.
- Music library. The Apple Music IDs, titles, artists, and durations of songs in your library. We use this to know what's available to play and to record what you listened to during a run.
- Training plans. Your goal, confirmed easy pace, running availability, generated schedule and completed or skipped workouts are stored with your account. Plans use structured templates, not a language model. We also retain per-song skip and listening counts to personalize music selection; these counts are not sent to Google.
- Playback log. The songs that played during each run, with start/end timestamps and positions, so we can show your tracklist on the run detail screen.
What we don't collect
- We do not collect device identifiers (IDFA) or run any third-party advertising or analytics SDKs.
- We do not collect contacts, photos, or any other personal data outside the categories listed above.
- We do not store audio recordings or any music files. Playback is performed by Apple Music on your device.
Where your data is stored
Soundtrack uses the following services to operate:
- Supabase (supabase.com) — hosts our user database and authentication. Servers in the United States (us-east).
- Railway (railway.com) — hosts our application server. Servers in the United States (us-east4).
- Google Gemini — if you enable adaptive music, chooses songs using a shortlist of song titles, artists, audio features, your chosen effort and a musical direction such as “ease off.” We do not send Google your heart rate, pace, route, account details or lyric text. You can select shuffle instead at any time before a run.
- Hugging Face and LRCLIB — receive song metadata (title, artist and, where needed, duration) to look up audio features and timed lyric structure. We cache recording-level features and timing fingerprints across users; we do not send these services your identity, workout or location.
Workout data and playback history are written to Supabase. The route geometry of each run is stored as part of the run record.
Sharing
If you mark a run as unlisted (the default), anyone with the share link can view its route, stats, and tracklist. Your username and display name appear on the page.
You can change a run's visibility to private at any time, which makes the share link return a 404 for anyone other than you.
We do not sell your data or share it with advertisers. Data is processed by the service providers described above to operate the app. We may disclose data if required by law.
Apple Music & Health
Music playback during a run is performed by Apple's MusicKit on your device. The Apple Music app and your Apple ID's listening history are governed by Apple's privacy practices, not ours.
Workouts are recorded as standard HKWorkout entries in Apple Health. You control what apps can read or write Health data via iOS Settings.
Your rights
You can:
- Access your data via the app — every run you've recorded is visible under Activities and on your profile.
- Delete your account and all associated data via Profile → Account → Delete Account. This is irreversible and removes your auth record, library, runs, and playback history within seconds.
- Revoke permissions for Health, Location, and Apple Music at any time via iOS Settings → Privacy. The app will continue to function but features depending on those permissions won't work.
For any other request, email hello@soundtrack.run.
Children
Soundtrack is not directed to children under 13 and we do not knowingly collect data from them.
Retention
We keep your data for as long as your account exists. Deleting a run removes its route, stats, and playback log; deleting your account removes everything, including your auth record and library. We don't keep server-side backups of deleted accounts beyond our host's standard short-lived database backups.
Changes
If we make a material change to this policy we'll update the "Last updated" date at the top of this page. Continued use of the app after a change means you accept the updated policy.