privacy policy

Overview

This Privacy Policy describes how tracck ("we," "us," or "our") collects, uses, and shares your information when you use the tracck mobile app (the "Service"). By using the Service, you agree to this policy.

Our website is an informational landing page (it hosts this policy) and does not collect or store any personal information — the contact form simply opens a pre-filled message in your own mail app. This policy therefore covers the app.

Questions? Contact us at support@tracck.app.

1. Who we are

tracck operates this Service and is responsible for the personal information handled through it. For any privacy request, email support@tracck.app.

2. Information we collect

Stored in our cloud database (Google Firebase):

• Name — the name you enter during onboarding.
• Approximate location — your city and country, derived from your IP address by a third-party service. We do NOT store your IP address; it is used transiently to determine your city/country, which we then store.
• Activity status — whether your account is active. You are "active" when you use the app; this is set to inactive if you clear the app's data.
• Account creation date — when your record was first created.
• Subscription status — your plan (weekly, monthly, yearly) or none.
• Anonymous account identifier — a device-bound anonymous ID from Firebase Authentication. It is not linked to your real-world identity, email, or Apple ID.

Stored only on your device (not in our cloud database):

• The meals and nutrition you log, and any meal photos you take or choose.
• Your optional profile photo.
• Details you provide during onboarding: age, gender, height, weight, activity level, and your goals.
• Your habits, tasks, streaks, and daily scores.

This on-device information stays on your device and is also mirrored into your iOS home-screen widgets. It is removed when you clear the app's data or uninstall the app.

Sent to third parties to power specific features (see "Third-party services" and "AI features" below):

• Meal photos, voice input, and typed meal descriptions — sent to Google to analyse and estimate nutrition.
• Product barcodes — sent to Open Food Facts to look up packaged foods.
• Usage events and purchase outcomes — sent to our analytics provider.

3. How we use your information

We use your information to:

• Provide, operate, and maintain the Service.
• Analyse the meal photos, voice, or text you submit and return nutrition estimates.
• Look up packaged products you scan by barcode.
• Process and manage your subscription.
• Understand which regions our users come from and how the app is used, to improve the Service.
• Communicate with you if you contact us for support.

4. AI features and how your content is processed

tracck's food-logging features rely on artificial intelligence. When you scan a meal, describe it by voice, or type a description:

• Photos and typed text are sent to Google's Gemini models (via Firebase AI) to identify the food and estimate its nutrition. This processing is governed by Google's privacy terms.
• Voice input is first converted to text using your device's speech recognition (provided by Apple), and the resulting text is then sent to Google for analysis.

AI nutrition estimates are approximations for general wellness and convenience only. They are not medical, dietary, or health advice, and should not be relied on for any medical decision. Consult a qualified professional for dietary or medical guidance.

5. Device permissions

With your consent, the app requests these permissions. You can change them anytime in your device settings:

• Camera — to photograph meals for AI analysis.
• Photo library — to pick meal photos and set a profile picture.
• Microphone — to log meals by voice.
• Speech recognition — to transcribe your spoken meals into text.
• Siri — to let you log food, habits, and tasks with voice shortcuts.

6. Legal bases for processing (GDPR)

If you are in the EEA or UK, we process your information under these legal bases:

• Performance of a contract — to provide the Service you requested (e.g. your name, activity status, and AI food analysis).
• Legitimate interests — to understand our user base and improve the Service (e.g. approximate-location and usage analytics), where not overridden by your rights.
• Consent — where required, including for camera, microphone, photo, and speech access. You may withdraw consent at any time.

7. Third-party services

We use the following providers to operate the Service. We do not sell your personal information to them or anyone else; each processes your information only to provide its service and under its own privacy policy:

• ipapi.co and ipwho.is — receive your IP address to return your city and country (fallback provider).
• Google Firebase — database, hosting, and anonymous authentication. https://firebase.google.com/support/privacy
• Google (Gemini via Firebase AI) — analyses the meal photos, voice transcripts, and text you submit.
• Open Food Facts — receives scanned barcodes to return product information. https://world.openfoodfacts.org
• RevenueCat and Apple — process and manage your subscription purchases. We do not receive your full payment details.
• Mixpanel — receives usage events (such as onboarding steps, purchase outcomes, and AI errors) tied to your anonymous identifier, and may collect basic device and app information (such as device model, operating system, app version, and region).

If we add other providers in the future, we will update this policy.

8. International data transfers

Your information may be processed on servers outside your country, including in the United States, whose data-protection laws may differ from yours. Where data is transferred out of the EEA or UK, we and our providers rely on appropriate safeguards such as Standard Contractual Clauses.

9. Data retention

We keep your information only as long as necessary for the purposes in this policy.

You can delete your information at any time by clearing the app's data. This removes the meals, photos, onboarding details, habits, and tasks stored on your device, and strips your cloud record down to a single "inactive" flag (removing your name, location, creation date, and subscription status from our database). Uninstalling the app also removes the on-device data.

You may also email support@tracck.app to request deletion (see "Your rights").

10. Data security

We take reasonable technical and organisational measures to protect your information, and all network requests are transmitted over encrypted (HTTPS) connections. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights

Depending on where you live, you may have the right to: access a copy of your data; correct inaccurate data; delete your data ("right to be forgotten"); restrict processing; obtain your data in a portable format; and object to processing based on our legitimate interests.

To exercise any of these, email support@tracck.app. We respond within the timeframe required by law. If you are in the EEA or UK, you may also lodge a complaint with your local data-protection authority.

12. California privacy rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the CCPA, as amended by the CPRA.

Categories of personal information we collect: identifiers (name, anonymous ID); geolocation data (approximate city/country); audio/visual information (meal photos and voice input you submit); health and dietary information (the food you log and your onboarding details); internet or other activity (usage events, activity status, account creation date); and commercial information (subscription status).

We do NOT sell or share your personal information, and have not done so in the preceding 12 months.

You have the right to know, delete, and correct your personal information, and not to be discriminated against for exercising these rights. Contact support@tracck.app to exercise them.

13. Children's privacy

The Service is not directed to children under 13 (or the applicable age of digital consent in your country), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact support@tracck.app and we will delete it.

14. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

15. Contact us

Questions or concerns about this policy or your personal information? Email us at support@tracck.app.