Privacy Policy

We collect information you provide directly:

• Account information: Name, email address, password (managed by Clerk)
• Profile information: Gender, age, height, weight, activity level, focus areas
• Health & fitness data: With your explicit permission, Trak reads health and fitness data from Health Connect on Android and Apple Health (HealthKit) on iOS. We request read-only access to a limited set of types — steps, active calories burned, and exercise/workout sessions — used to power challenges, streaks, and progress. We do not write data back, and we only read the types listed here.
• Location data: If you record a GPS activity (run, walk, or ride), Trak uses your device location while the activity is in progress to map and measure it. We do not collect location in the background and do not use it for advertising.
• Camera, photos & microphone: The camera and photo library are used for food scanning, profile photos, and workout form/pose checks; the microphone is used only during live sessions you join.
• Food logs: Meal descriptions, photos, nutritional data (calories, protein, carbs, fat)
• Community content: Posts, comments, likes
• Purchase history: Subscription transactions processed through Apple App Store or Google Play
• Device information: Push notification tokens for sending notifications

Health data handling (Health Connect & Apple Health): Health and fitness data accessed through Health Connect or Apple Health is used only to provide in-app features (challenges, streaks, progress, and analytics you choose to share with a community you join). We never use health or fitness data for advertising or marketing, we never sell it, and we do not share it with third parties except the service providers strictly needed to operate the app (see “Information Sharing”). You can revoke access at any time in Health Connect / Apple Health settings, and deleting your account removes this data from our systems.

• Provide and improve the Trak platform
• Track your challenges, streaks, and XP progress
• Display leaderboards and community features
• Send push notifications (streak alerts, achievements, community updates)
• Process subscriptions and in-app purchases
• Send transactional emails (welcome, password reset)
• Provide analytics to community creators about their members' engagement

We do not sell your personal information. We share data only with:

• Community creators: Aggregated engagement data and food logs for members of their communities
• Service providers: Clerk (authentication), Neon (database), Firebase (push notifications), Gmail (email)
• App stores: Apple and Google for subscription processing
• Legal requirements: If required by law or to protect our rights

Your data is stored on secure servers with encryption in transit (TLS) and at rest. Passwords are managed by Clerk and never stored in our database. We use parameterized queries to prevent SQL injection and rate limiting to prevent abuse.

You can:

• Access your data through the app (Profile, Settings)
• Update your profile information at any time
• Delete your account and all associated data (Settings → Delete Account)
• Control notification preferences (Settings → Notifications)
• Request data deletion by emailing team@jointrak.io

We retain your data for as long as your account is active. When you delete your account, all associated data is permanently removed from our systems, including profile, progress, posts, food logs, and memberships.

Trak is not intended for users under 18 years of age. We do not knowingly collect information from children.

We may update this policy from time to time. We will notify you of significant changes through the app or email.

For privacy questions or data requests, contact us at team@jointrak.io.