Legal

Privacy Policy

Last updated: 7 October 2026

This policy explains what personal data Traack collects when you track your meals, nutrition, weight and activity, why we use it, who we share it with, how long we keep it and the rights you have. Much of it is health data, which we only process with your explicit consent. If you live in Washington, Nevada, Connecticut or another US state with a consumer health data law, also read our Consumer Health Data Privacy Policy.

1. Who we are

Traack is operated by Rent-O Software LLC, a limited liability company organised in Florida, United States, with its registered address at 111 NE 1st St, 8th Floor Suite #88886, Miami, FL 33132, United States ("Traack", "we", "us"). We are the controller of the personal data described in this policy. You can contact us at support@traack.app or by post at the address above.

2. The data we collect

We collect the data you give us, the data you choose to import from the services you connect, and a small amount of technical data:

Account data: your name, email address and password. Passwords are handled by Firebase Authentication and we never see them in readable form. If you sign in with Google or Apple, we receive your name and email address (Apple may give us a private relay address).
Profile data: your display name, optional @handle and profile photo, country and language, and the people you follow and who follow you.
Health and nutrition data: the meals and ingredients you log, their calories and nutrients, portions and photos, your daily targets and goal (bulk, cut or maintain), and the statistics we calculate from them.
Body and activity data: your sex, current and target weight, weight check-ins, planned calorie deficit, and daily activity and calories burned. If you turn on Apple Health or Health Connect sync, we read your body weight and active and resting energy (on Android, also total calories burned and basal metabolic rate). We never write anything back to Apple Health or Health Connect.
Content you create: comments, likes, follows, blocks and reports, and the messages you send to the AI coach together with its replies.
Purchase data: your plan, subscription status and renewal date, credit balance and purchases, and the identifiers Stripe, the App Store or Google Play give us for your purchases. Card details are collected by Stripe, Apple or Google, never by us.
Device and technical data: a push notification token if you allow notifications, and server logs (times, errors and identifiers such as your user ID) that we use to run and secure the service.
Cookies on our website: essential cookies and, only if you accept them, Firebase Analytics (Google Analytics) cookies. See our Cookie Policy. The mobile apps contain no analytics or advertising SDKs.

3. How we use it and our legal bases

We use personal data only for the purposes below. For people in the EU, the UK and similar jurisdictions, each purpose has a legal basis:

To provide Traack (your account, logging, trends, statistics, Pro features and the social features you use): performance of our contract with you.
To process your health data (meals, nutrition, weight, activity and goals): your explicit consent, which you give in the app before using it (Article 9(2)(a) GDPR). Traack cannot work without this data; you can withdraw your consent at any time by deleting your account.
To run AI features when you use them: your explicit consent. AI features stay off until you allow them, and you can withdraw consent in Settings > Privacy.
To show your meals to other users: your consent, only if you turn on meal sharing.
To take payments and keep tax and accounting records: performance of our contract and our legal obligations.
To keep Traack safe, prevent fraud and abuse, moderate content, enforce our Terms and defend legal claims: our legitimate interest in running a secure service, and our legal obligations.
To send transactional emails (such as verification and password changes) and the push notifications you allow: performance of our contract and the permission you give on your device.
To measure how our website is used with analytics cookies: your consent.
We do not sell your personal data, share it for targeted advertising, show ads, or use it to make decisions that have legal or similarly significant effects on you.

4. AI features

AI features (the coach chat, recognising food in photos, creating meals and ingredients, and replies to @ai in comments on your own meals) are optional. Nothing is sent to our AI provider until you allow AI processing.

When you use an AI feature, we send OpenAI what that feature needs: your message, attached photos and any voice recording (which is transcribed to text and not stored by Traack) and, depending on the feature, your logged meals, targets, weight check-ins, activity and goal. For an @ai reply we send the meal, its photo and its comment thread, and we only do this on your own meals.
OpenAI processes this data as our service provider to return an answer. Under its API terms it does not use it to train its models; it may keep it for up to 30 days to detect abuse.
Some AI answers search the web. The AI writes the search query from your request and OpenAI may send it to its search partners; we only add your approximate country so results are local.
AI answers are automated estimates, not medical or dietetic advice, and are marked as AI in the app.
You can turn AI features off at any time in Settings > Privacy.
For live Coach calls, audio is streamed directly to OpenAI. We also send the transcript and records needed for authenticated lookups. Traack does not record raw call audio; it keeps the transcript, verified results and usage in your private conversation/call history until account deletion or a deletion request. We do not request storage of live sessions for later reuse; OpenAI may retain data for up to 30 days for abuse monitoring as described above.

5. What other people can see

Your profile (name, @handle, photo and follows) is visible to other signed-in Traack users. It is never shown to people without an account and is not indexed by search engines. Your meals are private by default: other users can only see them if you turn on meal sharing, in which case your meals (photo, name, calories, macros and goal) appear on your profile and in the Discover feed. Turning sharing off hides your past meals too. Comments and likes you leave on a shared meal are visible to the people who can see that meal. Your email, weight, activity, targets, statistics, AI chats and payments are never visible to other users.

7. International transfers

Our main database and backend run in Google Cloud's London region (europe-west2). Traack is operated by a United States company, and some of our providers, including Google, OpenAI and Stripe, process data in the United States and other countries. When personal data leaves the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision (such as the EU-U.S. Data Privacy Framework for certified providers) or on the European Commission's Standard Contractual Clauses and the UK Addendum.

8. How long we keep it

Account, profile, health and content data: while your account exists. When you delete your account we delete it straight away, including your photos, your @handle, your comments on other people's meals and the notifications you caused. Residual copies in logs and provider systems expire within 30 days.
AI chats: until you delete the conversation or your account. OpenAI may keep AI requests for up to 30 days.
Server logs: up to 30 days.
Purchase and tax records, including order confirmations and withdrawal requests: as long as tax, accounting and consumer law require, generally up to 10 years, even after you delete your account.
Reports about content or accounts: up to 12 months after they are resolved, or longer if we need them for a legal claim or the law requires it.
Privacy requests, copyright and legal notices, and our replies: up to 3 years after they are closed, to show how we handled them. Child sexual abuse material we report is preserved for 1 year, as US law requires.
The record that an App Store or Google Play purchase belongs to an account: kept after deletion so the same purchase cannot unlock several accounts. It contains no health data.

9. Your rights

Depending on where you live, you have the right to:

Access your data and receive a copy in a portable format.
Correct inaccurate data. You can edit most of it in the app.
Delete your data: delete your account in Settings, on the web or in the app, or ask us.
Withdraw your consent at any time: AI processing and meal sharing in Settings > Privacy, and health data consent by deleting your account. Withdrawal does not affect processing that already took place.
Object to, or ask us to restrict, processing based on our legitimate interests.
Opt out of the sale of personal data, targeted advertising and profiling. We do none of these.
Not be treated differently for exercising your rights.

10. How to exercise your rights

Email support@traack.app from the address linked to your account. We answer within one month (within 45 days where US state law allows it) and may need to confirm your identity. An authorised agent may act for you with your written permission. If we decline your request, you can appeal by replying with "Appeal" in the subject; we decide appeals within 60 days and, if you are still unhappy, you can contact your state Attorney General. You can also complain to a data protection authority, such as the Spanish Agencia Española de Protección de Datos (aepd.es), the authority where you live, or the UK Information Commissioner's Office (ico.org.uk).

11. Children

Traack is only for people aged 16 or over. We do not knowingly collect data from anyone younger. If you believe a child has created an account, contact support@traack.app and we will delete it.

12. Security

We protect your data with encryption in transit, per-user access rules on our database and file storage, restricted administrator access, and specialised providers for passwords and payments. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities where the law requires.

13. Changes to this policy

When we change this policy materially, we update the date above and ask you to review the changes in the app before you continue.

14. Contact

Rent-O Software LLC, 111 NE 1st St, 8th Floor Suite #88886, Miami, FL 33132, United States. Privacy questions: support@traack.app. Anything else: support@traack.app.