Last updated: 2026-05-20
TrackID ("we", "our", "us") is built by Kris Syphers. This Privacy Policy explains what information the TrackID app ("TrackID", the "app") collects, how we use it, and the choices you have.
When you sign in with Apple, we receive a unique Apple identifier and (optionally, if you choose to share them) your name and email. We store your chosen username, optional display name, optional bio, and optional avatar image on our server (Supabase).
TrackID uses your device's microphone to listen for music while you have the app open and listening. The audio is processed locally using Apple's ShazamKit framework to generate a small acoustic signature. Only the signature — not the audio itself — is sent to Apple for matching. We do not record, store, or transmit your raw audio.
If you grant location access, we use your approximate location to:
If you enable contact discovery, TrackID computes SHA-256 hashes of the phone numbers in your address book on your device, then uploads only those hashes to check for matches against other TrackID users' hashed numbers. Your raw contacts never leave your device.
If you upload an avatar or attach a background photo to a shared session recap, those images are uploaded to our storage.
If you grant push notification permission, we store your device's Apple Push Notification service (APNs) token to deliver notifications about friend activity, messages, and reactions.
We do not run third-party analytics. We collect minimal server-side logs (Supabase access logs) for debugging and abuse prevention. These contain IP addresses and may include user IDs.
We do not sell or share your data with advertisers.
We do not share data with any other third parties.
We retain your data while your account is active. When you delete your account, all server-side data associated with you is deleted within 30 days. Backups containing residual data are purged within 90 days.
Temporary popup venues you drop are deleted from the server when they expire (you set the duration).
TrackID is not intended for users under 13. We do not knowingly collect data from children under 13. If we learn we have collected such data, we will delete it.
TrackID's servers are hosted in Tokyo, Japan (via Supabase). By using the app you consent to your data being transferred to and processed in Japan.
We may update this Privacy Policy from time to time. Material changes will be announced in-app and the "Last updated" date above will be updated.
Questions or concerns? Email formandtangle@gmail.com.