Skip to main content

Privacy Policy

Rail: Concert Log & Setlist

Last updated: 10/6/2026

Overview

Rail keeps your concert history on your device and in your own private iCloud. Artist searches are sent to setlist.fm to fetch show data. If you turn on artist alerts, your chosen city is sent to Rail's alert server as an approximate location.

This Privacy Policy is specific to Rail: Concert Log & Setlist and explains what information the app handles and how. Your content is stored on your device and, if you enable sync, in your own private iCloud. For our company-wide policy, see the Pixel Fox Studio Privacy Policy.

Information We Collect

Personal Information

Rail: Concert Log & Setlist does not require an account. We only receive your name or email address if you choose to contact us for support.

Automatically Collected Information

  • Device type and operating system version
  • App version
  • Usage statistics, not linked to your identity (see Analytics below)
  • Crash reports and error logs, not linked to your identity (see Crash Reporting below)
  • Your purchase status, held by RevenueCat against a random app user ID (see Third-Party Services below)

Notifications

If you follow an artist, Rail can send a push notification when a new setlist is posted. You control this per artist and in iOS Settings. To do this, Rail's server stores your device's notification token, the artists you follow, and your chosen city as an approximate location (rounded to about 11 km), so alerts are only for shows near you. Rail never reads your device's location. Removing your city in Settings, or unfollowing every artist, deletes it from the server.

Music Library

Rail can turn a setlist into an Apple Music playlist when you ask it to. That is the only thing it does with Apple Music: it writes the playlist you requested to your library and reads nothing back. Access is granted through the system permission prompt and can be revoked at any time in iOS Settings.

Analytics

Rail: Concert Log & Setlist collects privacy-first usage analytics to understand how the app is used and to improve it. This data is not linked to your identity, and we do not track you across apps or websites.

  • That an artist search happened (not what you searched for)
  • That a setlist was viewed (not which one)
  • That a show was logged or deleted
  • That you followed or unfollowed an artist (not which one)
  • Playlist export outcomes, with the match rate and song count in broad ranges

Crash & Performance Reporting

We collect crash reports and performance metrics to keep Rail: Concert Log & Setlist stable and fast. This includes error logs, launch times, and technical diagnostics. This data is not linked to your identity. It carries a random install identifier created by Sentry's SDK on your device, which is not your name, email address, or Apple ID.

Apple Search Ads Attribution

Rail: Concert Log & Setlist asks RevenueCat to collect Apple's Search Ads attribution token (AdServices). RevenueCat uses it to learn whether your install came from an Apple Search Ads campaign, and which one.

Rail: Concert Log & Setlist itself only checks that Apple produced a token. It does not store the token, send it anywhere, or add it to analytics or crash reports.

Subscriptions & Purchases

Rail is free to download, with an optional one-time Pro unlock; the price is shown in the App Store. Purchases are processed by Apple, and your Pro purchase status is managed through RevenueCat so your access works across your devices. RevenueCat holds your purchase record (status and type) against a random app user ID rather than your name or email address. We never receive your payment details, which are handled entirely by Apple.

What We Do NOT Do

  • Track you across apps or websites
  • Sell or rent your personal information
  • Use your data for advertising
  • Collect advertising identifiers (IDFA)
  • Collect precise location data or contacts

Third-Party Services

Rail: Concert Log & Setlist relies on the following services. All maintain strong privacy standards; data you keep on your device or in your private iCloud is never shared with them beyond what is described here.

Aptabase (Analytics)

  • Purpose: Privacy-first product analytics
  • Data shared: Usage events, not linked to your identity (no device identifiers, cookies, or fingerprinting)
  • Privacy policy: https://aptabase.com/legal/privacy
  • Location: United States

Sentry (Crash & Error Reporting)

  • Purpose: Crash reporting, error tracking, and performance monitoring
  • Data shared: Crash logs, error reports, and technical diagnostics, not linked to your identity. Sentry's SDK creates a random install identifier on your device (not your name, email address, or Apple ID).
  • Privacy policy: https://sentry.io/privacy/
  • Location: United States

RevenueCat (In-App Purchase)

  • Purpose: Manage the Pro in-app purchase
  • Data shared: Your purchase status, linked to a random app user ID (not your name, email address, or Apple ID)
  • Privacy policy: https://www.revenuecat.com/privacy/
  • Location: United States

Apple (Payments & iCloud)

  • Purpose: App Store payments and CloudKit sync
  • Data shared: Payment information (handled entirely by Apple); iCloud data stays in your account
  • Privacy policy: https://www.apple.com/legal/privacy/

Apple Music (MusicKit)

  • Purpose: Create the playlists you ask for in your Apple Music library
  • Data shared: Permission to add a playlist to your Apple Music library. Songs that have no match in the Apple Music catalogue are left out; nothing about your library is read back or sent anywhere.
  • Privacy policy: https://www.apple.com/legal/privacy/

setlist.fm (Setlist Data)

  • Purpose: Provide artist, show, and setlist information
  • Data shared: The artist and show searches you make (no account or personal identity)
  • Privacy policy: https://www.setlist.fm/help/terms

Supabase (Alert Server Hosting)

  • Purpose: Hosts Rail's alert server, which sends the artist alerts you turn on
  • Data shared: Only if you follow an artist and allow notifications: your device's notification token, the names and IDs of the artists you follow, and, if you pick one, your alert city as an approximate location rounded to about 11 km. Rail never reads your device's location.
  • Privacy policy: https://supabase.com/privacy
  • Location: United States

Data Retention

  • On-device data: Kept until you delete it or remove the app. iCloud-synced data is retained in your own iCloud account.
  • Analytics data: Retained for 13 months, then automatically deleted.
  • Crash reports: Retained for 90 days, then automatically deleted.
  • Purchase records: Retained as required for financial and tax records.
  • Alert city: Kept on Rail's alert server until you remove it in Settings, unfollow every artist, or your notification token expires.

Your Rights

You have the right to:

  • Access & portability: Your data lives on your device — you can view and export it directly in the app or through iOS.
  • Deletion: Delete entries in the app, or remove the app to delete its on-device data.
  • Remove your alert city in Settings → Alert City to delete it from Rail's server.
  • Opt-out: Contact us to opt out of usage analytics.

If you are in the European Union (GDPR) or California (CCPA/CPRA), you have additional rights, including to object to or restrict processing and to lodge a complaint with your supervisory authority. To exercise any right, contact hello@pixelfoxstudio.com.

Data Security

We use appropriate technical safeguards, including HTTPS/TLS for any data in transit and on-device encryption provided by iOS. No system can be guaranteed 100% secure, but keeping your data on your device by default is our strongest protection.

Children's Privacy

Rail: Concert Log & Setlist is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact hello@pixelfoxstudio.com.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy here and revise the "Last updated" date. For material changes, we will provide additional notice in the app where appropriate.

Contact Us

Questions about this policy or your privacy? Contact us:

  • Email: hello@pixelfoxstudio.com
  • Company: Pixel Fox Studio LLC
  • Address: New York City, New York, United States