Privacy policy
Effective date: update when you publish · Plain-language summary: we use your information to run the Service for you; we do not sell your personal data or share it with advertisers.
Who we are
Replace this section with the legal name of the organisation operating Tracking, registered address, and privacy contact email.
Information we collect
- Account details: such as username, email address, and password (stored using strong one-way hashing).
- Profile & preferences: goals, units, timezone-related settings, and similar choices you save.
- Activity & health-related logs: time entries, meals, calorie estimates, categories, and measures you choose to record.
- Optional finance data: only if that module is enabled for your account.
- Technical data: IP addresses, approximate location derived for security controls, browser type, timestamps, and diagnostic logs needed to secure and operate the Service.
- Communications: messages you send to support and transactional emails we send to you.
How we use information
- Provide, maintain, and improve features you request.
- Authenticate you, enforce limits, prevent fraud and abuse, and meet legal obligations.
- Send service-related email (for example email confirmation and password reset).
- Analyse reliability and performance in aggregated or de-identified form where useful.
Third-party AI / LLM providers
Tracking uses third-party large language models (LLMs) to power certain optional features. Depending on deployment configuration, requests may be sent to:
- Anthropic — Claude family models (for example Claude Sonnet or other versions your operator configures).
- Alibaba — Qwen 3.5 (or other Qwen models your operator configures).
We refer to whichever provider handles a given request as “the AI provider”. Calls are made through our infrastructure or an API proxy we operate. This is not advertising or profiling — it is processing you request when you use AI-assisted features.
What the AI is used for
- Calorie estimates (Caltrack): when you log or describe meals, relevant text (for example meal descriptions and category context) may be sent to the AI provider to suggest calorie amounts. You should review estimates before relying on them.
- Lifestyle reviews (Timetrack & Caltrack): when you request an “AI Review” or similar summary on time-flow or calorie-flow screens, aggregated data for the selected period (for example activity hours by category, meal totals, and goals context) may be sent to produce a written review. Reviews are informational only.
What we send
We send only what is needed for the feature you trigger — typically meal text and/or summary statistics for your account over the date range you choose, not your password or payment details. Requests are made server-side; API credentials for the AI provider are not exposed in the browser. Replace this paragraph with your exact routing (Anthropic API, Alibaba Cloud, or via your own proxy), which provider is used for each feature, and retention practices if they differ.
Your choices
You can use the Service without triggering AI features (manual meal entry and charts without requesting a review). Where AI output is shown, treat it as a draft: correct or override values in the product as you see fit.
The AI provider is a subprocessor under contract or terms that require appropriate security and confidentiality. We do not authorise the AI provider to use your content to train models for unrelated advertising. See also terms — AI features.
We do not sell or share your data for advertising
We do not sell your personal information. We do not share it with data brokers or for cross-context behavioural advertising. We only disclose information where necessary to run the Service (for example hosting, email delivery, or the AI provider described above), where you direct us to (for example a linked personal trainer), or where required by law.
Personal trainers
When you link with a trainer through the product, data visible to that trainer is determined by product behaviour and your actions (such as accepting an invitation). Trainers should handle client data in line with their own professional obligations and applicable privacy laws.
Retention
We retain information while your account is active and for a limited period afterwards for backups, security, and legal compliance. Replace with specific retention schedules if you publish them.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete personal information, and to object to certain processing. Describe how users can exercise those rights (for example a privacy inbox or in-app settings).
Children
The Service is not directed at children under the age required in your jurisdiction without parental involvement. Specify your minimum age policy here.
Changes
We may update this policy and will post the revised version with a new effective date. For material changes we will provide additional notice where appropriate.
Contact
Privacy questions: replace with your privacy contact.