Your data

Privacy Policy

This policy explains what RhythmRun processes during its invite-only beta, why it is needed, and how you can ask us to remove it.

Effective September 12, 2026

Information we process

  • Spotify and Supabase account identifiers, including your email address and Spotify user ID, when you connect your account.
  • Your Spotify Liked Songs, including track names, artists, durations, identifiers, and album artwork, while generating a playlist.
  • Your target BPM, requested run duration, and generation time for basic service history.
  • The playlist name, description, and selected tracks when you ask RhythmRun to save a playlist to Spotify.

How we use it

We use this information only to authenticate you, find songs that match your chosen cadence, create the playlist you request, keep the beta reliable, and protect the service from misuse.

RhythmRun does not sell personal information and does not use advertising or analytics trackers.

Services involved

Supabase provides authentication, Spotify provides your music library and playlist saving, and GetSongBPM receives track and artist names to resolve tempo information. GetSongBPM does not receive your RhythmRun or Spotify account identifier from us. Hosting and database providers process information only as needed to operate RhythmRun.

Cookies and security

RhythmRun uses essential session and provider-token cookies to complete Spotify sign-in and authorized requests. These cookies are not used for advertising. Provider access tokens are stored in secure, HttpOnly cookies where applicable and are cleared on sign-out or expiration.

Retention and deletion

Liked Songs are processed for playlist generation and are not stored as a permanent copy in RhythmRun's database. Account identifiers and generation history are retained while needed to operate the beta. Playlist names and descriptions are sent to Spotify when you save and are not stored in RhythmRun's generation history.

To request access, correction, or deletion, contact the RhythmRun operator through the same channel where you received your beta invitation. We may need to verify that the request belongs to your account.

Changes

We may update this policy as the beta changes. The effective date at the top will be updated when material changes are published.