Privacy Policy.

Last updated: June 21, 2026

This Privacy Policy describes how Track One (“we”, “us”, or “our”) collects, uses, and shares information when you use the Track One mobile application and website at trackone.fm (collectively, the “Service”).

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

Who we are

Track One is a vinyl listening journal that helps you log records you’ve played, share them with friends, and discover music through your community. The Service is operated by Glenn Friedman as an independent developer.

Contact: [email protected]

Information we collect

Information you provide directly

• Account information. When you create an account, we collect:
  • Email and password if you sign up with email/password authentication.
  • Name, email address, profile picture, and a unique account identifier from Google (and, in the future, Apple) if you sign in with those providers.
• Username. A username is required to use Track One. Your username is always public — it is visible to anyone, including people who are not signed in and who do not have a Track One account.
• Profile information. Optional details you add to your profile, such as a bio or avatar.
• Content you create.Records you log (“spins”), the people you follow, comments, reactions, and other activity within the app.

Information collected automatically

• Usage data. We use Firebase Analytics and Amplitude to understand how the Service is used — for example, which screens are viewed, which features are used, and aggregate session information. This data is associated with a randomly generated identifier and, where applicable, your account ID. For signed-in users, your authentication method (for example, email/password or Google) is also associated with your account ID in Amplitude.
• Crash and performance data. We use Firebase Crashlytics to collect information about crashes and performance issues, including device model, operating system version, and a stack trace of what the app was doing when the issue occurred.
• Device information. Basic technical information about your device, such as device type, operating system, app version, and language settings.

Information we do NOT collect

• We do not collect payment or financial information.
• We do not collect precise location data (GPS coordinates).
• We do not access your contacts, photos, microphone, or camera unless you explicitly grant permission for a specific feature.
• We do not sell your personal information to third parties.

How we use information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate you and keep your account secure
• Display your profile and activity to others — to other users within the app and, for public content, to anyone who visits the Service
• Send you emails related to the Service, including account notifications, security alerts, transactional messages (such as password resets), and occasional product updates. You can opt out of non-essential emails at any time.
• Communicate with you in response to support requests
• Analyze usage trends to improve features and fix bugs
• Comply with legal obligations

How information is shared

Publicly — including with people who are not users

Track One is a social service, and by default the content you create is public. Unless you make your profile private (see below), your username, profile, spins, notes, ratings, photos, comments, reactions, and follows are visible to anyone on the internet, including people who do not have a Track One account and who are not signed in. Public content may also be indexed by search engines (such as Google), and may appear as a preview — including text and images — when a link to it is shared on other platforms, such as social media or messaging apps.

Please do not post anything you would not want to be public. Content you have made public may be cached, copied, or retained by third parties (such as search engines or other people) even after you delete it from Track One.

Making your profile private. You can set your profile to Private in your account settings. When your profile is private, your profile and its associated content (such as your spins, collection, and photos) are visible only to signed-in Track One users; they are not shown to logged-out visitors, are not included in link previews, and are excluded from search-engine indexing. Your username may still be visible where necessary to operate the Service. Changing this setting affects how your content is shown going forward and does not control copies others may already have made.

With service providers

We share information with third-party services that help us operate Track One. These providers are contractually limited to using your information only to provide services to us.

• Google (Firebase). Provides our backend infrastructure, including authentication, database (Firestore), analytics, and crash reporting. policies.google.com/privacy
• Amplitude. Provides product analytics that help us understand how the Service is used. amplitude.com/privacy
• Apple. When you use Track One on iOS, Apple may collect information per their standard App Store and operating system practices. apple.com/legal/privacy
• Discogs. Track One uses the Discogs database to identify records. We query Discogs for catalog information; we do not share your personal information with Discogs. discogs.com (Privacy Policy)
• Email delivery providers. We use third-party email service providers to send transactional and product emails. These providers receive your email address and the contents of messages we send you, solely for the purpose of delivering those emails.
• Hosting and infrastructure providers. We use Railway and other infrastructure providers to host portions of the Service.

For legal reasons

We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or property of Track One, our users, or the public.

In connection with a business transfer

If Track One is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

Your choices and rights

• Access and update. You can view and update your profile information within the app at any time.
• Delete your account. To delete your account, email us at [email protected]. When you delete your account, we delete your personal information from our active systems within 30 days, except where we are required to retain it for legal or security reasons.
• Email preferences. You can unsubscribe from non-essential emails using the link in those emails or by contacting us. We will continue to send essential service emails (security, account, transactional) as long as you have an account.
• Analytics opt-out. To opt out of analytics, contact us at [email protected].

If you are in the European Economic Area, UK, or Switzerland

You have additional rights under the GDPR, including the right to access, correct, delete, or restrict processing of your personal data; the right to data portability; and the right to object to processing. You also have the right to lodge a complaint with your local data protection authority.

Our legal basis for processing your information includes: performance of a contract (providing the Service), legitimate interests (improving and securing the Service), consent (where required, such as for certain analytics), and legal obligations.

If you are in California

Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, the right to delete your personal information, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. We do not sell personal information.

To exercise these rights, contact us at [email protected].

Data retention

We retain your information for as long as your account is active. When you delete your account, we delete your personal information within 30 days, except where retention is required for legal, security, or fraud-prevention purposes. Anonymized or aggregated data that cannot be linked back to you may be retained indefinitely.

Data security

We use industry-standard measures to protect your information, including encryption in transit (HTTPS/TLS), authenticated access to our backend systems, and access controls on our infrastructure. However, no system is 100% secure, and we cannot guarantee absolute security of your information.

Children’s privacy

Track One is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, please contact us and we will delete it.

If you are between 13 and the age of majority in your jurisdiction, you should use the Service only with the involvement of a parent or guardian. Because content on Track One is public by default and can be seen by anyone on the internet, we especially encourage younger users and their parents or guardians to review the privacy settings and to make the profile private if preferred.

International users

Track One is operated from the United States. If you use the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have different data protection laws than your country.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app, by email, or by updating the “Last updated” date at the top of this policy. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your information, contact us at:

Email: [email protected]