Privacy Policy

Last updated October 28, 2026

Roji Labs LLC, an Illinois limited liability company doing business as trakd ("trakd", "we", "our", or "us"), operates the trakd mobile application and website (collectively, the "Service") and is the controller of personal information processed through the Service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

On this page 13 sections

1. Information We Collect
2. How We Use Your Information
3. Legal Basis for Processing (EEA/UK Users)
4. Third-Party Services
5. Advertising Cookies and Your Choices
6. International Data Transfers
7. Data Retention
8. Data Security
9. Your Rights
10. Your California Privacy Rights
11. Children's Privacy
12. Changes to This Policy
13. Contact

Information We Collect

We collect information in the following ways:

• Account Information When you create an account, we collect your email address, username, and display name. If you sign in with Apple or Google, we receive your name and email address from the respective provider.
• Profile Photos If you upload a profile photo, we access your device camera or photo library (with your permission) and store the image on our servers.
• Audio Data When you start track identification or Record a Set, trakd captures short sound samples from your microphone only while the feature is active. The samples are converted into audio fingerprints and compared against music catalogs, which may involve sending them securely to our music recognition providers. Unless you choose Keep hunting and notify me after a failed identification, trakd does not keep the recording after the request. If you make that choice, trakd stores that short recording, no longer than about 15 seconds, in private storage linked to your account and uses it only to keep searching for the track and notify you if it is found. A recording may pick up nearby voices; trakd never uses it to transcribe speech, identify speakers, create voiceprints, infer sensitive traits, advertise, or train unrelated models. If you are offline during Record a Set, samples stay in protected app storage only until they can sync or expire after 24 hours.
• Usage Data We automatically collect information about how you interact with the app, including sets viewed, tracks saved, contributions, and social interactions (follows, likes).
• Device Information We collect device type, operating system version, and anonymous crash/performance data to improve the app.
• App Install Measurement Data To understand which advertising brought you to the app, our advertising measurement partners (currently Meta and AppsFlyer) may receive the install event, an app or device identifier, IP-derived location, device type and operating system version, and a small set of in-app milestone events such as account creation and subscription purchase. On iOS, we ask your permission through App Tracking Transparency before any identifier that can link you across apps is used; if you decline, advertising-identifier collection is disabled and Apple's privacy-preserving aggregate reporting remains available. Measurement partners may still process app events and limited device and network data for measurement. We do not send the content of your identifications, saved tracks, or recordings to these partners.
• Website Advertising Data If you choose to allow advertising cookies on our website, the TikTok Pixel may receive page views, the page URL and referring page, browser and device details, IP-derived location, cookie or advertising identifiers, and conversion events that we configure. We do not load the TikTok Pixel before you allow it.
• Spotify Data If you connect your Spotify account, we access your profile information and the ability to create and modify playlists on your behalf. Your Spotify credentials are stored securely on your device and are never sent to our servers.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the trakd Service
• Identify music tracks using audio fingerprinting
• With your separate permission, keep searching for a track we could not identify and notify you if it is found
• Improve music recognition and catalog coverage
• Personalize your experience and deliver relevant content
• Measure the effectiveness of TikTok advertising and, when you allow it, build or reach advertising audiences
• Measure which advertising campaigns lead to app installs and sign-ups, so we can spend on the ones that work and, where you permit tracking, avoid showing you ads for an app you already have
• Send you updates, marketing communications, and other information related to the Service (you may opt out at any time)
• Monitor and fix bugs, crashes, and performance issues
• Respond to your comments, questions, and support requests

Legal Basis for Processing (EEA/UK Users)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

• Contractual Necessity Processing your account information and usage data is necessary to provide you with the trakd Service as described in our Terms of Service.
• Legitimate Interest We process device information, crash reports, and usage analytics to improve our Service, detect bugs, and ensure platform security.
• Consent We rely on your consent for marketing communications and for microphone access for track identification or Record a Set. Retaining a failed-identification recording requires a separate per-hunt choice; declining does not affect normal live identification. You can withdraw that consent and delete a saved clip from Audio Hunts at any time.
• Website Advertising Consent We load the TikTok Pixel and its advertising cookies only after you choose Allow. You can decline or withdraw that choice at any time through Privacy choices on the website.

Third-Party Services

We rely on service providers to run trakd. They act on our instructions, are bound by contract to protect your data at least as well as this policy describes, and may use it only to provide their services to us. The categories below describe what each receives. A current list of the providers behind each category is available on request at privacy@trakthat.app.

• Cloud hosting, database, authentication, and file storage Your account data, profile photo, usage data, and, if you opt in to Keep hunting and notify me, the retained recording are stored with cloud infrastructure providers in the United States. Retained recordings live in a separate private bucket with a fixed deletion deadline and are never made public.
• Music recognition When an identification runs, a short sound sample or its audio fingerprint is sent to our music recognition providers and compared against their catalogs. If you choose Keep hunting and notify me after a miss, the retained recording may be checked again until the track is found, you delete it, or it expires.
• Crash and performance monitoring Anonymous crash reports and performance data, with no account details, so we can find and fix bugs.
• Email delivery Your email address and display name, so we can send account and service emails such as a welcome message. You can opt out of marketing email at any time.
• Subscription management Your purchase history, subscription status, and a pseudonymous app user ID, so we can manage in-app subscriptions. This provider does not receive your name or email address.
• App update delivery Your device may contact our update service to check for over-the-air app updates. No account data is sent with that check.
• AI-assisted tools We use third-party AI models to help organize the music catalog and to help answer messages you send to trakd's own account in the app. These tools may process public catalog content such as set titles, tracklists, and public comments, and the text of messages you send to trakd. They do not receive your email address, account credentials, or messages between you and other members.
• Spotify If you connect your Spotify account, we access your profile information and create or modify playlists on your behalf through the Spotify API. Your Spotify credentials stay on your device and are never sent to our servers. Spotify Privacy Policy
• Apple Music We use the Apple Music API for track metadata, album artwork, and audio previews, and, with your permission, to export saved track IDs to a playlist on your Apple Music account. Apple Privacy Policy
• Apple Sign-In If you sign in with Apple, we receive your name and email address (or Apple's private relay email) as authorized by you. Apple Privacy Policy
• Google Sign-In If you sign in with Google, we receive your name, email address, and profile photo from your Google account. Google Privacy Policy
• Advertising measurement partners Meta and AppsFlyer help us attribute app installs and sign-ups to advertising campaigns, subject to your App Tracking Transparency choice. Meta Privacy Policy · AppsFlyer Privacy Policy
• TikTok Advertising measurement on our website only. If you choose Allow, the TikTok Pixel receives website and browser data so we can measure campaigns and use TikTok advertising features. TikTok may use cookies and other identifiers under its own terms. TikTok Privacy Policy

Advertising Cookies and Your Choices

The TikTok Pixel is optional. On your first visit, you can choose Allow or Decline. If you allow it, we store that choice in your browser and load the Pixel; if you decline, we do not load it. Use Privacy choices to change your decision later. Withdrawing consent stops future TikTok Pixel collection from our website, but does not delete data TikTok previously received. You may also contact privacy@trakthat.app with a privacy request.

In the iOS app, the tracking permission prompt is also optional. You can change it at any time in iPhone Settings, Privacy & Security, Tracking. Declining or turning it off does not limit any feature of trakd.

International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from your jurisdiction. When we transfer data outside the European Economic Area, we rely on Standard Contractual Clauses and our service providers' compliance with recognized data protection frameworks to ensure appropriate safeguards are in place.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. An opted-in failed-identification recording is deleted within 24 hours after a verified match, within 24 hours after you delete it or withdraw consent, or no later than 30 days after capture if it remains unresolved. Account deletion also queues linked recordings for deletion within 24 hours. Temporary processing files follow the same or a shorter schedule; inaccessible disaster-recovery copies, if any, expire within 35 days. Limited consent and deletion records without audio may be retained for up to 24 months to document the request and our response. You can delete your account at any time from Settings. Some anonymized or aggregated data may be retained for analytics only when it cannot reasonably identify you. If an in-app deletion control is unavailable, contact privacy@trakthat.app.

Data Security

We use technical and organizational safeguards to protect your information, including encryption in transit and at rest, access controls, and private storage for retained recordings. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of your data
• The right to restrict processing of your data
• The right to object to processing based on legitimate interest
• The right to data portability
• The right to withdraw consent at any time
• The right to opt out of marketing communications
• The right to lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us at privacy@trakthat.app.

Your California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to Know You may request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete You may request deletion of your personal information, subject to certain legal exceptions.
• Right to Opt-Out of Sale or Sharing We do not sell personal information for money. Some state laws may treat advertising data sent through the TikTok Pixel as sharing for cross-context behavioral advertising. Decline or withdraw advertising consent through Privacy choices to opt out.
• Non-Discrimination We will not discriminate against you for exercising any of your privacy rights.

To exercise these rights, contact us at privacy@trakthat.app. We will respond within 45 days.

Browser Privacy Signals: Our Service does not currently respond to the legacy "Do Not Track" signal. When the browser exposes Global Privacy Control, our website treats it as a decision to decline advertising cookies.

Children's Privacy

trakd is not intended for use by children under the age of 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@trakthat.app. We will take steps to delete such information from our servers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Roji Labs LLC (doing business as trakd)
privacy@trakthat.app

Back to top