Privacy

What Spinjam collects.

Your audio files never leave your phone, and there are no ads. Your rides stay on your device by default. If you sign in, we also keep your ride summaries on Amazon Web Services in the United States. This page lists what leaves the phone.

Last updated 25 October 2026. Spinjam is a product of Wires and Wizards LLC.

Your account

On your device by default

You do not need an account to ride. Without one, your ride history, playlists and settings stay on your device, and the account sections below do not apply to you.

When you sign in

Sign-in is optional and uses Apple. We receive a stable account identifier and the email address Apple chooses to share, which may be a private relay address. Signed in, Spinjam syncs your ride summaries and settings to Amazon Web Services in the United States, so a second phone can show the same history. A summary holds the ride's date, duration, distance, your power and cadence figures, charts, the songs ridden and the scores worked out from them. It does not hold your audio.

Heart rate syncs only when you turn it on

Spinjam records heart rate from your bike on the device. Heart rate is health data, so it is synced only when you switch on the separate heart rate sync setting. The switch is off until you turn it on, and you can turn it off again at any time.

Who handles it, and why

Wires and Wizards LLC decides what is done with your account data. Amazon Web Services is our processor and acts only on our instruction. We rely on these lawful bases: performing the service you asked for (contract) for sign-in and sync, our legitimate interest in keeping the service secure and free of abuse, and your consent for heart rate sync, which you can withdraw by turning it off. We do not sell this data, use it for advertising or share it with advertisers.

How long we keep it

We keep your account data until you delete your account. Deleting a single ride removes its summary. Backups clear within 35 days.

Export and delete in the app

In Settings, Account, you can export your rides and delete your account. Delete account removes your ride summaries, settings, heart rate data and sign-in record from our servers. Both need a connection. Rides stay on your phone until you delete them there. Steps and a fallback are on the delete your account page.

The app

Your audio files never leave the device

Spinjam analyses your music on the phone. The audio itself never leaves it: no audio file and no sound recording is uploaded. A song's title and artist come from its tags. When a file has no title tag, Spinjam shows its file name as the title on the phone, and song analysis never sends a title it made that way. Your phone's own music library can also title an untagged song by its file name, which Spinjam cannot always tell apart. A ride feedback report you choose to send lists the ride's song titles as the app shows them.

Song analysis from your library

When Spinjam finishes analysing a song you own, it sends that song's shape to our server: its energy curve, tempo, sections and drops. On Wi-Fi it also sends a whole-song fingerprint, with the song's title and artist. Spinjam uses these to recognise the song in Live and to plan better rides for songs it has not heard yet. To stop it, turn off Share song analysis in Settings, under Live. It is on until you turn it off.

Live

Live listens through the microphone while you ride, in clips of about 8 seconds. Nothing is captured until you start Live and allow the microphone. To name a song, the phone works out fingerprint hashes from the clip and sends them to our server. If that finds nothing, it asks Apple's ShazamKit, which sends Apple a signature of the clip under Apple's own terms.

When a song is recognised, the phone sends us the match and two views of the clip worked out on the phone: its spectral peaks and a coarse, low-resolution spectrogram. The spectrogram is not a recording, but it is taken from whatever the microphone heard, so it can carry room sound alongside the music. We keep it to train song recognition. Turning off Share song analysis stops the peaks and the spectrogram. Live then still sends the fingerprint hashes and the match it needs. When the song ends, it sends what it heard: the energy curve, tempo and sections. It may also download the song's 30-second preview straight from the music catalogue, which sees your phone's IP address, analyse it, and send us that analysis. To fill in a recognised song's length and preview, our server looks it up at Deezer and Apple's iTunes by its ISRC code or Apple Music id. Those requests come from our server, not your phone.

Tempo lookups

When Spinjam needs a song's tempo and does not have it, it can ask GetSongBPM using the song's title and artist. Like any web request, this reaches GetSongBPM from your phone's IP address.

Ride feedback

After a ride, Spinjam asks what you thought. Nothing is sent unless you answer, and you can read the whole report before it goes. A report holds:

• your rating and notes, and any screenshots you attach
• the app version, phone model, operating system version and language
• the ride: its type, difficulty, planned and ridden time, and settings
• the songs: titles, tempos and the cadence targets set for them
• the bike: which sensors were connected and its Bluetooth name, but no readings
• for a Live ride, what Live heard and decided

The report becomes an issue in our private issue tracker on GitHub. Screenshots are deleted after 30 days. If a report cannot be sent, the phone offers it to your share sheet and you choose where it goes.

What our server keeps

Our server runs on Amazon Web Services in the United States. Song shapes, Live data and feedback reports are not linked to your account or name, even when you are signed in. It records the IP address that sent each feedback report, each beta signup and each song shape from Live or your library. We use it only to deal with abuse of the service. It is stored apart from the report or song shape, and deleted after 30 days. Song shapes sent before 17 October 2026 carry their address until they expire. Deleting your account does not delete these records.

Raw song shapes expire after 180 days and are deleted a day later. Our database backups run 35 days, so a deleted address or report leaves them 35 days after it goes. Feedback screenshots are deleted after 30 days. Fingerprints, Live spectrograms, combined song analyses and feedback reports have no set deletion date yet. We keep them to improve recognition and rides.

Everything else stays with you

Unless you sign in, ride history, playlists, settings, and your bike's cadence, power and resistance readings stay on your device. If you point Spinjam at a NAS, a media server or a streaming service, it talks to that service directly, and keeps its credentials in the operating system's secure storage. Deleting the app deletes what is on the phone, and signed-in data stays on our servers until you delete your account.

No analytics, no trackers, no ads

The app contains no analytics SDK, no advertising identifier, and no third-party tracking. We do not sell any of the data above, or share it with an advertiser.

This website

No cookies and no analytics

spinjam.app sets no cookies and runs no analytics. It loads no fonts, scripts or images from anyone else's server.

The beta list

If you give us your email address, we use it to send you beta builds and notes about what changed. We do not sell it, rent it, or share it with an advertiser. Every email carries an unsubscribe link, and you can ask us to delete your address at any time by writing to contact@wiresandwizards.com.

The signup form also notes which phone you signed up on: iPhone, Android or neither, read from your browser. We keep that with your address and use it to send the right install email. It is deleted with your address.

The list is held by an email delivery provider on our behalf. They process it under our instruction and for no other purpose.

The lifetime Premium draw

Every beta signup is entered in the lifetime Premium draw. The app has no email field in its feedback form yet, so feedback cannot carry your address today. When the field arrives, adding your signup address will be optional. We will store it with that report so the report counts towards your entries, and strip it before the report reaches our issue tracker. We will use it for the draw and nothing else, and delete it from your feedback once the draw is settled.

Spinjam Radio

The radio page collects no personal information. Pressing play connects your browser to that station's own stream.

Hosting logs

The site is served from Amazon CloudFront. Amazon records standard request logs, including IP addresses, as part of running the service. We do not use them to build a profile of you.

Your rights

The app is the fastest route: export and delete are in Settings. You can also write to privacy@spinjam.app from the address on your account to ask what we hold about you, to correct it, to export it or to have it deleted. We reply to that address to confirm it is you, then answer within one month. We never send your data to an address we have not confirmed. Records from before you signed in carry no name, so we can only delete them, not return them. Tell us roughly when you rode or sent feedback, and the songs involved, and we will find and delete them. What stays on your device is yours to delete directly.

Children

Spinjam is not directed at children under 13. You must be 13 or older to create an account. We do not knowingly collect their information, and we delete the account of a child we learn is under 13.

Changes

If this policy changes in a way that matters, we will say so in a beta email rather than quietly editing the date at the top.

Contact

Wires and Wizards LLC, privacy@spinjam.app for privacy, contact@wiresandwizards.com for anything else.