Privacy Policy

1. Introduction

This Privacy Policy explains how tracking.so ("we", "us", or "our"), operated by Alexandre Francisco Santos Ramalho, registered in Bulgaria, Sofia, BULSTAT Code 181328041, collects, uses, and protects your personal data.

By using our Service, you agree to the collection and use of information as described in this policy.

2. Data We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Profile information

User Content

When you use the Service, we collect:

• Habit and activity data you track
• Images you upload
• Interactions with other users (reactions, comments)

Apple Health Data

If you choose to connect Apple Health in our iPhone app and grant permission, we import the following HealthKit data:

• Workouts, including activity type, start and end time, duration, active energy, and distance
• Sleep samples, stages, and duration
• Daily steps, active energy, exercise time, walking and running distance, and flights climbed
• Resting heart rate, heart rate variability, respiratory rate, oxygen saturation, and body mass
• Associated dates, time zones, source application, and device metadata

Apple Health access is optional and read-only. We import up to 180 days when you first connect and use a shorter refresh window for later syncs. You can change Health permissions in iOS at any time.

Usage Data

We automatically collect:

• Device information (browser type, operating system)
• IP address
• Pages visited and features used
• Time and date of visits

3. How We Use Your Data

We use your data to:

• Provide and maintain the Service
• Process your transactions
• Send you service-related communications
• Improve and personalize your experience
• Analyze usage patterns to improve the Service
• Detect and prevent fraud or abuse

We use imported Apple Health data only to provide personal health and fitness features, including your history and correlations between workouts, sleep, health metrics, habits, and self-reported metrics. We do not use Apple Health data for advertising, marketing, data brokerage, or eligibility decisions. Apple Health data is excluded from our analytics services, general application logs, AI coach prompts, model requests, and model traces.

4. Data Storage

Your data is stored securely in the cloud using industry-standard infrastructure providers (AWS). We implement appropriate technical and organizational measures to protect your data.

5. Data Sharing

We share your data only with:

• Stripe – for payment processing. Stripe's privacy policy: stripe.com/privacy
• Cloud infrastructure providers – for secure data storage

We do not sell your personal data to third parties.

We do not sell, rent, or share Apple Health data with advertising platforms, data brokers, or marketing services. Our cloud infrastructure providers process imported Apple Health data only to host and operate the Service on our behalf.

6. Analytics

We use the following analytics services to understand how you use the Service:

• Google Analytics – collects anonymized usage data. Google Privacy Policy
• PostHog – product analytics for improving the Service. PostHog Privacy Policy

7. Cookies

We use the following types of cookies:

• Essential cookies – required for the Service to function (authentication, preferences)
• Analytics cookies – help us understand how you use the Service

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

8. Your Rights

Under GDPR and applicable laws, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at alex@tracking.so

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except where we are legally required to retain it.

Disconnecting Apple Health stops future imports but does not delete data already stored in your account. You can use the separate "Delete data" control in the Apple Health integration to delete imported workouts, sleep samples, daily health metrics, and integration records. Apple Health data is also covered by the account-deletion period above.

10. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us immediately.

11. International Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact

For questions about this Privacy Policy or to exercise your rights, contact us at: alex@tracking.so