Privacy Policy
Last updated: May 2026
Soundtracks is a personal music memory journal. You write down what songs mean to you — moments, places, feelings. That's intimate data. We take that seriously, and we want to be straightforward about what we collect, why, and how it's handled.
Soundtracks is operated by Joshua Phelps. If you have any questions, email us at founder@soundtracks.app.
What we collect
Account information
- Email address — used to log you in and contact you about your account.
- Apple ID — if you sign in with Apple, we receive a unique identifier and, on first sign-in, your name and email address if you choose to share them.
- Display name and profile photo — set by you, visible to members of shared albums you create or join.
Your moments
Everything you log in Soundtracks is yours. We store it so you can access it across devices and revisit it over time.
- Reflection text — the free-form writing you attach to a moment. This is the most personal data in Soundtracks. It is never read by us, never used for advertising, and never sold.
- Song metadata — title, artist, album, and Apple Music ID for songs you attach to moments. Sourced from Apple's catalog.
- Photos — photos you choose to attach to moments, stored securely.
- Mood tags, people tags, location, and date — optional fields you fill in to give your moments more context.
Music preferences (optional, collected at signup)
To help surface songs that are likely to hold personal meaning for you, we may ask for:
- Birth year — used to calculate the era when music tends to form the strongest memories (roughly ages 13–25).
- Country — used to match regional chart data so suggestions are culturally relevant.
- Favorite artists and songs — used to find songs you're likely to have emotional connections to.
- Genre preferences — used to weight suggestions toward music you actually listen to.
This information is optional (except birth year and country, which improve suggestions significantly). It is never shared with third parties and is only used to personalize your experience inside Soundtracks.
Albums
- Album names and invite codes — stored to enable shared albums between users.
- Membership — we track which users have joined which shared albums.
- Contributor attribution — in shared albums, your display name is shown alongside moments you contribute.
Technical data
- Push notification token — if you enable notifications, we store a token to send them to your device. No notification content is stored on our servers after delivery.
- Notification preferences — which notification types you've enabled or disabled.
- App usage data — anonymous events like "moment created" or "notification opened" to help us understand how the app is used. Collected via PostHog. No personally identifiable information is attached.
- Crash reports — anonymized technical data when the app crashes, collected via Sentry. Helps us fix bugs.
- Deep link data — if you arrive at Soundtracks via an invite link, the invite code is temporarily stored in your device clipboard so it can be retrieved after app install. This data never leaves your device.
How we use your data
- To store and sync your moments across your devices.
- To surface relevant resurfacing features — On This Day, A Month Ago, and song-prompted notifications.
- To enable shared albums and contributor attribution.
- To send push notifications you've opted into.
- To improve the app using anonymous usage analytics and crash reports.
We do not use your reflection text, mood data, or personal memories for advertising. We do not sell your data. We do not share your personal data with third parties except the infrastructure providers listed below, who process it on our behalf.
Third-party services
| Service | Purpose |
|---|---|
| Supabase | Database, authentication, and photo storage |
| Apple (Sign In with Apple, MusicKit, APNs) | Authentication, song catalog, push notification delivery |
| Expo / Expo Push Notifications | Push notification infrastructure |
| Clipboard (device) | Deferred deep links for invite codes (no external service) |
| PostHog | Anonymous usage analytics |
| Sentry | Crash reporting |
| Vercel | Web app hosting |
| iTunes Search API | Song metadata lookup |
Data storage and security
Your data is stored on Supabase, which runs on AWS infrastructure. Photos are stored in Supabase Storage with a public CDN for delivery. All database access is protected by row-level security — only you can read your moments.
We use HTTPS for all data in transit. We do not have access to your Apple ID credentials.
Your rights
- Access — you can view all your data inside the app at any time.
- Correction — you can edit or update any moment, your display name, and your profile photo.
- Deletion — you can delete your account from the Profile screen. This permanently removes your account, all moments, all photos, and all associated data from our systems. This cannot be undone.
- Data portability — we plan to add an export feature. In the meantime, email us at founder@soundtracks.app and we can provide a data export.
- Complaints — EU residents have the right to lodge a complaint with their local data protection supervisory authority.
Children
Soundtracks is not intended for children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected data from a child, please contact us and we will delete it.
Changes to this policy
We will update this policy as Soundtracks grows — new features may involve collecting additional data. When we make material changes, we will notify you in the app and update the "Last updated" date above. Continued use of Soundtracks after a change constitutes acceptance of the updated policy.
Contact
Questions, concerns, or requests: founder@soundtracks.app