Tracking Logotracking software

Privacy Policy

Last updated: September 25, 2026

1. Introduction

This Privacy Policy explains how tracking.so ("we", "us", or "our"), operated by Alexandre Francisco Santos Ramalho, registered in Bulgaria, Sofia, BULSTAT Code 181328041, collects, uses, and protects your personal data.

By using our Service, you agree to the collection and use of information as described in this policy.

2. Data We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Name (if provided)
  • Profile information

User Content

When you use the Service, we collect:

  • Habit and activity data you track
  • Images you upload
  • Interactions with other users (reactions, comments, messages)
  • Reports you file about other users or content, and people you block

Apple Health Data

If you choose to connect Apple Health in our iPhone app and grant permission, we import the following HealthKit data:

  • Workouts, including activity type, start and end time, duration, active energy, and distance
  • Sleep samples, stages, and duration
  • Daily steps, active energy, exercise time, walking and running distance, and flights climbed
  • Resting heart rate, heart rate variability, respiratory rate, oxygen saturation, and body mass
  • Associated dates, time zones, source application, and device metadata

Apple Health access is optional and read-only. We import up to 180 days when you first connect and use a shorter refresh window for later syncs. You can change Health permissions in iOS at any time.

We use imported Apple Health data only to provide personal health and fitness features, including your history and correlations between workouts, sleep, health metrics, habits, and self-reported metrics. We do not use Apple Health data for advertising, marketing, data brokerage, or eligibility decisions, and it is excluded from our analytics services and general application logs.

Apple Health data is not sent to AI services by default. Only if you allow AI features and turn on workout or sleep access for a specific coached plan do we send summaries of those workouts or that sleep to the AI providers listed in section 5, to coach you on that plan. You can turn this off for each plan at any time.

We do not sell, rent, or share Apple Health data with advertising platforms, data brokers, or marketing services. Our cloud infrastructure providers process imported Apple Health data only to host and operate the Service on our behalf.

Disconnecting Apple Health stops future imports but does not delete data already stored in your account. You can use the separate "Delete data" control in the Apple Health integration to delete imported workouts, sleep samples, daily health metrics, and integration records. Apple Health data is also covered by the account-deletion period below.

Garmin Connect Data

If you connect Garmin Connect, Garmin sends us the workouts, sleep, heart rate, stress and recovery data you allow it to share. We treat it exactly like Apple Health data above, including the AI rule. Disconnecting stops new data, and you can revoke access in Garmin Connect at any time.

Usage Data

We automatically collect:

  • Device information (browser type, operating system)
  • IP address
  • Pages visited and features used
  • Time and date of visits

3. How We Use Your Data

We use your data to:

  • Provide and maintain the Service
  • Process your transactions
  • Send you service-related communications
  • Improve and personalize your experience
  • Analyze usage patterns to improve the Service
  • Detect and prevent fraud or abuse

4. Data Storage

Your data is stored securely in the cloud using industry-standard infrastructure providers (AWS). We implement appropriate technical and organizational measures to protect your data.

5. Data Sharing

We share your data only with:

  • Stripe – for payment processing. Stripe's privacy policy: stripe.com/privacy
  • Apple – for payments made through the App Store
  • Cloud infrastructure providers – for secure data storage

AI providers

The coach, plan setup, voice logs and dictation use AI. They only run after you allow AI features in the app, and you can turn them off at any time in Settings; manual tracking works without them. When they run, we send the data needed for that feature (your messages and voice recordings, plan goals and notes, activity logs, notes and metrics, photos you send to the coach, and workout or sleep data only for plans where you allow it) to:

  • OpenAI, DeepSeek, Google, Anthropic and Moonshot, through Vercel AI Gateway – to generate coaching, plans and summaries
  • OpenAI or OpenRouter – to turn voice recordings into text
  • Perplexity and Browserbase – when the coach searches or browses the web for you
  • Supermemory – to remember context from your coach conversations

These providers process the data only to return a result to us. We do not use your data for advertising and do not sell it.

We do not sell your personal data to third parties.

6. Analytics

We use the following analytics services to understand how you use the Service:

If you ask us to tell you when the app reaches the App Store or Google Play, the email address you enter on our website is stored with PostHog and used only to send you that notice. Email us at any time to have it removed.

7. Cookies

We use the following types of cookies:

  • Essential cookies – required for the Service to function (authentication, preferences)
  • Analytics cookies – help us understand how you use the Service

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

8. Your Rights

Under GDPR and applicable laws, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Data portability
  • Withdraw consent at any time

To exercise these rights, contact us at alex@tracking.so

9. Data Retention

We retain your data for as long as your account is active. You can delete your account in the app (Settings, User Settings, Delete account). When you do, we delete your personal data and uploaded photos within 30 days, except where we are legally required to retain it.

10. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us immediately.

11. International Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact

For questions about this Privacy Policy or to exercise your rights, contact us at: alex@tracking.so

Get tracking.so on your phone

Add it to your home screen

  1. Open in your browser
  2. Tap Share
  3. Add to Home Screen
Open tracking.so

Coming soon to Google Play