Privacy Policy
The short version: we keep as little as possible, and you can delete all of it in one tap.
Effective September 2, 2026
Who we are
bpkm is a running app that matches music to your stride and coaches you by voice. It's made by bpkm (“we”). This policy covers the bpkm iOS app and this website. Questions: hello@bpkm.app. A person answers.
What the app asks for, and why
bpkm asks permission in the moment it needs something, and each request explains itself. Nothing below is collected until you say yes. Here is what each permission is used for:
Apple Music. To read the songs in your library so we can match their tempo to your cadence, and to play them during a run. We store song titles, artists, artwork links and industry track IDs (ISRCs) for your library. We never copy or store audio.
Motion & fitness. To read your step cadence, which is the whole point: it's how the music stays locked to your stride.
Location. During a run only, to measure distance, pace, elevation and draw your route. This continues in the background while a run is active so the run isn't lost when your screen locks; it stops when the run ends. Your home screen shows a map of where you are, which isn't stored.
Apple Health. Only to save your finished runs as workouts, if you choose. We do not read any other Health data.
Microphone. Only while the voice coach is on, so you can talk to it mid-run. Your voice is streamed and processed in real time to respond to you; we do not record or keep it.
Camera. To scan a friend's code and to take a photo for your run share card. Photos stay on your device unless you choose to share them.
Your account
You sign in with Apple, Google, or an email address. We keep the email and name your sign-in provider gives us, plus the handle and profile you set in the app. If you use Apple's “Hide My Email,” we only ever see the relay address Apple creates, and we register our sending domain with Apple so messages still reach you.
Your runs
Each run is saved to your account: distance, time, pace, cadence, splits, the route you ran, the weather, and which songs played when. This is the ledger that powers your history, your ghost races against your own past runs, and your coach's memory of how you actually run.
Sharing is yours to control. Every run is private by default. You can make one visible to friends, or make a public share page. Any route shown to anyone but you is trimmed so it never reveals your exact start or end points, and you can set a privacy zone around your home that is always cut from shared maps.
The community beat library
When bpkm learns a song's tempo, it contributes that tempo to a shared table keyed only by the song's industry ID, so the next runner doesn't have to work it out again. This contains no information about you: not who added it, not that you own the song.
Coaching and AI
The voice coach and your post-run stories are generated by AI. To do that, we send your run statistics, your song history and your stated goals to our AI providers (Anthropic for language, Cartesia for the coach's voice, LiveKit to carry the live conversation). They process it to respond and, under our agreements, don't use it to train their models. Song feedback (skips, thumbs) trains your queue only.
Subscriptions
bpkm Pro is billed through Apple. We use RevenueCat to check whether your subscription is active. Neither we nor RevenueCat ever see your card or payment details; Apple handles all of it.
Analytics and diagnostics
We use PostHog to understand how the app is used (which screens, which features), tied to your account. The app also sends anonymous crash and performance diagnostics keyed to a device identifier so we can fix what breaks; those are kept for 30 days and then deleted. No advertising trackers, ever.
Who else touches your data
We run on a small set of services, each used for one job: Apple (music, sign-in, payments, weather, Health), WorkOS (sign-in), Convex (our database), RevenueCat (subscriptions), PostHog (analytics), LiveKit, Cartesia and Anthropic (the coach), Deezer (looking up a song's tempo by its industry ID; nothing about you is sent), and OpenFreeMap (map tiles on this site). We don't sell your data, and we don't share it for advertising.
Deleting everything
Open the app, go to your profile, and tap Delete account. That removes your account, your runs, your routes, your friends and any race records, your song feedback and your diagnostics from our systems immediately. Runs you saved to Apple Health stay in Health, because that's yours. If you can't get into the app, email us and we'll do it for you.
Your rights
Wherever you are, you can ask us what we hold about you, ask for a copy, correct it, or delete it. Email hello@bpkm.app. We respond to every request.
Children
bpkm is not directed at children under 13, and we don't knowingly collect data from them. If you believe a child has created an account, email us and we'll remove it.
The waitlist and this site
If you joined the waitlist, we stored your email and the page you joined from, to tell you when bpkm launched. Reply to any email and we'll remove you. This site sets no analytics cookies and runs no ad trackers.
Changes
If this policy changes in a way that matters, we'll update the date at the top and tell you in the app. The current version always lives at this address.