Privacy Policy
TrackHound

Application: TrackHound (iOS)
Provider: Pondstack Software, represented by Jürgen Frosch
Address: Segeberger Chaussee 162, 22851 Norderstedt, Germany
E-Mail: info@pondstack.com
Last updated: April 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for the processing of personal data in connection with the app TrackHound is:

Jürgen Frosch
Pondstack Software
Segeberger Chaussee 162
22851 Norderstedt
Germany
E-Mail: info@pondstack.com

2. Data Processing Principles

TrackHound is an iOS app for recognizing and managing music tracks at DJ sets and live events. The app stores all user data exclusively on the user's iPhone. Pondstack Software does not operate its own servers and does not receive any personal data from the app.

No personal data is transmitted to Pondstack Software servers.

Some features of the app communicate with third-party services (Apple ShazamKit, Apple MusicKit, streaming services). This communication is technically necessary for the respective feature and is explained in detail below.

3. Locally Stored Data

TrackHound stores the following data exclusively on the user's device (via Apple SwiftData):

• Tracklists (Sessions): Recorded track lists with timestamps, recognition status, and order.
• Track metadata: Artist name, title, BPM, key, genre, and retrieved cover artwork.
• Session metadata: Session name, optional venue name, date and time.
• Cover artwork: Cover images retrieved from streaming services are cached locally to avoid repeated network requests.
• App settings: User preferences such as language, display options, and enabled features.
• OAuth access tokens: Access tokens for linked streaming services (Spotify, Tidal, Deezer) are stored encrypted in the iOS Keychain on the device and are not transmitted elsewhere.

4. Microphone Access and Music Recognition (ShazamKit)

The core function of TrackHound — automatic music track recognition — requires access to the device's microphone. The app uses Apple ShazamKit for music recognition.

What happens during recognition:

• The app records short audio fragments via the microphone and generates an anonymized acoustic fingerprint (signature) from them.
• This fingerprint — not a raw audio recording — is transmitted to Apple ShazamKit servers to identify the corresponding track.
• Apple returns the recognition result (track information). Pondstack Software does not receive any audio data and has no visibility into this communication.
• An active internet connection is required for music recognition.

Apple's processing of audio data is governed by Apple's privacy policy: apple.com/legal/privacy

Microphone access can be revoked at any time in iOS Settings under Privacy & Security → Microphone. Without microphone access, automatic track recognition is not possible; however, tracks can still be added manually.

5. Location Access (Optional)

TrackHound can optionally determine the device's current location to automatically populate the venue name of a session. This feature is entirely optional and is only activated when the user explicitly triggers a location request.

• Location is only accessed while the app is in the foreground (no background location tracking).
• GPS coordinates are passed to Apple's CoreLocation/Geocoding service to resolve a place name.
• Location data is not transmitted to Pondstack Software and is not permanently stored in the app.
• Location access can be disabled at any time in iOS Settings under Privacy & Security → Location Services → TrackHound.

6. Streaming Services (Spotify, Tidal, Deezer)

TrackHound allows optional linking with Spotify, Tidal, and Deezer to automatically add recognized tracks to playlists and retrieve extended track information.

• Linking is done via the industry-standard OAuth 2.0 flow. The user logs in directly with the respective streaming service; TrackHound never receives the password.
• The access token issued by the service is stored encrypted in the iOS Keychain on the device and is only used for communication with that specific service.
• When adding a track to a playlist or retrieving track metadata, the app calls the service's API, transmitting the track name and token to the service.
• Pondstack Software does not receive any credentials and has no visibility into this communication.

Data processing by these services is governed by their respective privacy policies. Connections can be removed at any time in the app's settings under "Connected Services."

7. Apple Music (MusicKit)

If the user uses the Apple Music integration, TrackHound accesses the user's Apple Music library via Apple's MusicKit framework. This requires an Apple ID. Processing occurs directly between the device and Apple; Pondstack Software has no access to Apple ID data or library contents.

8. iCloud Sync (Optional)

TrackHound offers optional iCloud synchronization, allowing tracklists to be available across multiple Apple devices sharing the same iCloud account. This feature is disabled by default and must be explicitly enabled by the user in the app settings.

• Synchronization is performed via Apple's CloudKit service and is tied to the user's iCloud account.
• Pondstack Software has no access to the user's iCloud data.
• iCloud sync can be disabled at any time in iOS Settings under Apple ID → iCloud → Apps Using iCloud → TrackHound.

9. Push Notifications and Live Activity

TrackHound may send local push notifications — for example, when the app detects that music recognition has been interrupted due to inactivity (idle timeout). These notifications are triggered locally on the device and are not sent via Pondstack Software servers. No personal data is transmitted for notifications.

TrackHound supports Live Activities (Dynamic Island and Lock Screen widget), which display the current recognition status and the most recently identified track in real time. This information is processed exclusively on the device and is not transmitted.

10. TestFlight (Beta Distribution)

TrackHound is currently in beta and is distributed via Apple's TestFlight service. Apple collects certain usage and diagnostic data through TestFlight (including crash reports and installation data). This collection is performed by Apple in accordance with Apple's privacy policies and is not within Pondstack Software's control.

For more information: apple.com/legal/privacy

11. Diagnostics and Crash Reports

If the user has consented in iPhone settings to share diagnostic data with Apple, anonymized crash reports may be transmitted to the developer via Apple in the event of app crashes. Pondstack Software receives technical crash logs without any personal reference.

The user can disable diagnostic data sharing at any time in iPhone Settings under Privacy & Security → Analytics & Improvements.

12. No User Tracking

TrackHound contains no tracking technologies, analytics SDKs, advertising libraries, or behavioral observation tools. No usage profiles are created and no data is used for advertising purposes.

13. Permissions

TrackHound may request the following permissions on the user's iPhone:

• Microphone: Required for automatic music recognition via ShazamKit.
• Location Services (optional): For automatic venue detection when starting a session.
• Notifications (optional): For local alerts on idle timeout or recognition pauses.
• Network access: For music recognition (ShazamKit), streaming service APIs, and optional iCloud sync.

All permissions are managed by iOS and can be restricted or revoked in Settings under Privacy & Security.

14. Rights of Data Subjects

Since Pondstack Software does not collect or process personal data during normal operation of the app, the typical GDPR rights primarily apply with respect to data stored on the user's own device — i.e., by the user themselves.

To the extent that personal data is collected through email communication (e.g., a support request), you have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise these rights, please contact: info@pondstack.com

15. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority. The supervisory authority responsible for Pondstack Software is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
(Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany
datenschutz.hamburg.de

16. Data Security

Since all app data is stored locally on the user's device, the security of that data is the user's responsibility. Pondstack Software recommends keeping the iPhone screen lock and device encryption active, and performing regular iCloud or computer backups.

17. Children

TrackHound is not designed specifically for children under the age of 13. The app does not collect user data through Pondstack Software; therefore, no specific privacy risks for children exist.

18. Changes to this Privacy Policy

This Privacy Policy may be updated in the event of significant changes to the app or legal requirements. The current version is always available at pondstack.com/trackhound-privacy.

Last updated: April 2026