Privacy Policy

Last updated: 25 June 2026

High Notes ("High Notes," "we," "us") lets friends and family leave short voice memos for a runner, which the runner plays back during their race. This policy explains what we collect, why, who we share it with, and how to delete it.

What we collect

Organizer account. If you create a race page, we store your email address and a securely hashed password (bcrypt — we never store your password in readable form).
Supporter contributions. When someone leaves a memo, we store what they provide: the name/label they type, an optional relationship, and the voice-memo audio (and any text, photo, or video) they record for the runner.
Technical data. Your IP address is used transiently to rate-limit and prevent abuse. To enforce a block, we keep a one-way hashed identifier derived from it — not the IP address itself. We also keep basic server logs.
Analytics. We may use Google Analytics on our website pages (not inside the app) to understand aggregate, non-identifying usage.

How we use it

To deliver supporters' memos to the runner and let the organizer manage them.
To operate, secure, and improve the service, and to prevent abuse and objectionable content.

We do not sell your personal data, and we do not use the voice memos for advertising.

Who we share it with

We use a small number of service providers (sub-processors) that process data on our behalf:

Cloudflare R2 — stores the uploaded audio/media files.
Supabase (PostgreSQL) — hosts our database (accounts, memo metadata).
Google Analytics — aggregate website usage analytics (web pages only).

How long we keep it & how to delete it

Memos are kept until the organizer removes them or deletes their account. Deleting your account permanently removes your account, your race pages, every memo left for you, and the audio files in our storage — see Delete your account (or, in the app, Account → Delete account). Supporters can ask the organizer, or contact us, to remove a memo.

Children

High Notes is not directed to children under 13 and is intended for users aged 17+. We do not knowingly collect personal information from children.

Your choices

You can delete your account and data at any time (above), and you can contact us to request deletion or ask a privacy question.

Changes

If we change this policy we'll update the date above and, for material changes, give notice in the app.

Contact

Questions or requests: [email protected].