Privacy policy

1. Who we are

Traack is a diet, macro, and weight-tracking app. For the purposes of data protection law, the operator of Traack is the data controller for the personal data described here. If you have any question about this policy or your data, contact us at privacy@traack.app.

2. Information you give us

When you create an account and use Traack, you provide:

• Account details: your name, email address, and a password. Passwords are handled by Firebase Authentication and are never stored in readable form by us. If you sign in with Google, we receive your name, email, and profile picture from Google.
• Profile details: a display name, an optional public handle (tag), and an optional profile picture. Your profile is public — see section 6.
• Diet and nutrition data: meals and ingredients you log, their macros (calories, protein, carbs, fat), portion sizes, daily targets, and your goal (bulk, cut, or maintain).
• Body and activity data: your weight entries, daily activity and calories burned, and the nutrition statistics we calculate from your logs. This is health-related information, which we treat as sensitive.
• Photos: pictures you take or upload of meals, ingredients, and your profile. Meal and ingredient photos and profile pictures are stored in Google Firebase Storage. Each image is limited to 5 MB.
• Voice recordings: if you use voice logging, the audio you record is sent for transcription so it can be turned into a meal or ingredient entry (see section 4).
• Social content: meals you choose to share, and the comments, likes, and follows you create. This content is visible to other users — see section 6.
• Payment details: when you subscribe to Pro or buy AI credits, your card details are entered directly with Stripe. We never see or store your full card number; we keep your subscription and credit status and the Stripe customer, subscription, and purchase identifiers needed to manage billing.

3. Information we collect automatically

To run the app and keep it secure, we also process:

• Device and notification data: if you enable push notifications, we store a device push token so we can send them.
• Technical and diagnostic data: basic logs from our servers (for example timestamps and error information) used to operate, secure, and debug the service.
• Cookies and analytics: our website uses cookies. Analytics are only loaded if you consent. Full details are in our Cookie policy.

4. AI features and OpenAI

Traack uses artificial intelligence to recognise food and estimate nutrition. To do this, certain inputs are sent to OpenAI, our AI processing provider, and processed on its infrastructure:

• Photos of meals and ingredients you submit to the AI are sent to OpenAI so it can identify the food and estimate macros.
• Text descriptions, chat messages, and your diet or metrics data used to generate suggestions are sent to OpenAI to produce a response.
• Voice recordings used for logging are sent to OpenAI to be transcribed into text.
• We send only what is needed for the feature you are using. OpenAI processes this data to return a result to Traack and, under its API terms, does not use it to train its models. If you never use the AI features, no diet content is sent to OpenAI.

5. How we use your information

We use your data to:

• Provide the core service — log meals, track macros, weight, and activity, and show your trends and statistics.
• Run the AI features you choose to use.
• Process payments, manage subscriptions and AI credits, and prevent payment fraud (through Stripe).
• Send transactional emails (such as email verification and password resets) and, if enabled, push notifications and product or weekly-summary updates.
• Operate the social features — public profiles, shared meals, comments, likes, and follows.
• Keep the service secure, debug problems, and improve Traack.
• Comply with our legal obligations.

6. What is public

Some data is intentionally public so the social features work. Your user profile and public handle, and any meals you share, including their photos, comments, and likes, can be read by other people. Your private data — your email, weight history, daily logs, targets, payment details, and meals you have not shared — is not public and is protected by our database and storage security rules so that only you (and our backend) can access it.

7. Service providers we share data with

We do not sell your personal data. We share it only with the providers that help us run Traack, acting on our instructions:

• Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, and hosting) — stores your account and app data and runs our backend.
• OpenAI — processes the AI inputs described in section 4.
• Stripe — processes payments and stores your card details securely.
• Our email provider — delivers account and notification emails.

8. International transfers

Our database and storage are hosted in the European region. Some providers, such as OpenAI and Stripe, may process data on servers outside the European Economic Area. Where that happens, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. How long we keep your data

We keep your personal data for as long as your account is active. When you delete your account, we delete or anonymise your personal data, except where we must keep certain records (for example payment and tax records) for a limited period to meet legal obligations.

10. Your rights

Depending on where you live, you have the right to access the data we hold about you, correct it, delete it, export it, restrict or object to certain processing, and withdraw consent (for example for analytics cookies) at any time. You can edit much of your data directly in the app and delete your account from your settings. To exercise any other right, contact us at privacy@traack.app. You may also complain to your local data-protection authority.

11. Security

Data is encrypted in transit, access to your private data is restricted by per-user security rules, and passwords and payments are handled by specialised providers (Firebase Authentication and Stripe). No system is perfectly secure, but we take reasonable measures to protect your information.

12. Children

Traack is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you in the app.

14. Contact

For any question about this policy or your personal data, contact us at privacy@traack.app.