Privacy Policy

M-TrackR is developed by Jérôme Hérard. This policy describes the data processed by the M-TrackR iOS app and the mtrackr.herard.com website, and what is done with it. The philosophy is simple: the app runs almost entirely on your device, and we collect the bare minimum.

1. Data we collect

The data transmitted to our server (mtrackr.herard.com) is:

• The push notification token (APNs): an anonymous 64-character technical string assigned by Apple to your device. It is used solely to send you notifications and cannot personally identify you.
• Technical metadata attached to that token: the app version, the interface language (fr/en/es), the device model (e.g. iPhone 15), the subscription state (trial, subscribed, trial ended — with no payment information whatsoever), the total number of announcements made (a simple counter), a technical diagnostic (number of announcements triggered by Apple Music and by Spotify, last error code returned by Spotify, number of announcements that could not be played, audio output type and volume level) and the dates of first and last launch. They are used solely for aggregated, anonymous statistics (number of active devices, version and language breakdown).
• The title and artist of the track currently playing: solely to generate the DJ voice via Gradium, or ElevenLabs as a fallback (see section 4). This text passes through our server, which forwards it to that service and technically retains the generated audio (to avoid regenerating it needlessly) — never linked to your identity or your device.
• A technical advertising attribution value: see section 5a.

No other data is sent to our servers.

2. What we never collect

• Your name, email address or any personal information
• Your full listening history: only the title and artist of the current track are used, momentarily, for the voice announcement (see sections 1 and 4) - never stored alongside your identity, never used for any other purpose
• Your location
• No advertising identifier (IDFA): we never request tracking permission (App Tracking Transparency)
• No advertising cookies, no trackers, no audience measurement in the app

3. Music sources

Apple Music: M-TrackR reads the currently playing track through the iOS music player, after your explicit permission (requested at first launch). This happens entirely locally: nothing is transmitted.

Spotify: if you use the Spotify source (limited access), the app queries the Spotify API directly from your iPhone to know the current track. Your Spotify tokens are stored in your device's secure Keychain and never leave it. We have no access to your Spotify account or your listening data. You can disconnect Spotify at any time in the app's settings, which deletes those tokens.

4. Voice announcements

The DJ voice is generated using artificial intelligence technology, for a more natural result than classic speech synthesis. Our server sends the title and artist of the current track to Gradium (a French company) to generate the corresponding audio, and to ElevenLabs only if Gradium is unavailable. This text is linked neither to your identity nor to your device. Without a network connection, or if these services are unavailable, the track is simply not announced: no other voice takes over.

5. Third-party services

M-TrackR relies on the following third-party services, whose policies we encourage you to review:

• Apple (APNs push notifications, Apple Music): apple.com/legal/privacy
• Spotify (if you use the Spotify source, limited access): spotify.com/legal/privacy-policy
• Gradium (DJ voice generation): gradium.ai/privacy
• ElevenLabs (fallback DJ voice generation): elevenlabs.io/privacy
• AppsFlyer (measuring the effectiveness of our ad campaigns): appsflyer.com/privacy-policy

5a. Advertising measurement

To know which ad campaigns (Apple Ads, OpenAI Ads) lead to M-TrackR installs, we use AppsFlyer together with Apple's SKAdNetwork framework. Designed by Apple to protect privacy, this mechanism measures campaign effectiveness in aggregate, without individually identifying users: no advertising identifier (IDFA) is collected, no tracking permission (App Tracking Transparency) is requested, and no data links an install to a specific person.

5b. Subscription and payment

M-TrackR offers a monthly subscription (30 days free, then $0.99 per month). Payment is processed exclusively by Apple through the App Store: we never have access to your banking details or your identity as a buyer. Subscription verification happens locally on your device via StoreKit; no purchase information is sent to our servers.

6. Retention and deletion

• The push token is kept for as long as it is valid; it becomes unusable as soon as you uninstall the app or disable notifications.
• You can request its immediate deletion by writing to jerome@herard.com.
• Disconnecting Spotify in the settings deletes the Spotify tokens from your device's Keychain.
• Uninstalling the app deletes all local data.

7. Your rights

In accordance with the GDPR, you have the right to access, rectify and delete data concerning you. Since the only data we hold is the anonymous push token, a simple email to jerome@herard.com is enough to exercise it.

8. Changes

This policy may evolve along with the app (for instance if new features are added). The last-updated date appears at the top of this page, and any significant change will be reflected here before it takes effect.