TRAK Fitness Privacy Policy

Who we are

TRAK Fitness ("the app", "we", "us") is a food, nutrition, body-weight and strength-training tracker for iPhone. This policy explains what happens to information you enter into the app. If you have questions, contact us at trakfitnessapp@gmail.com.

What TRAK stores, and where

Everything you record in TRAK is written to storage on your device only. That includes:

• Food you log, recipes, and foods you have verified yourself
• Your profile details: gender, age, height, current weight and goal weight
• Body-weight check-ins and any progress photos you take or choose
• Workouts, routines, sets, personal records and strength ranks
• Steps and water you enter manually, and any meal plans generated for you
• Your settings, including units, theme, goals and reminder times

This information is not uploaded to us, is not backed up to our systems, and is not visible to anyone but you. If your device is backed up to iCloud or a computer, that backup is controlled by Apple and your own settings, not by TRAK.

Health information

Some of what you enter — body weight, food intake, exercise — is health-related information, and we treat it accordingly. TRAK Fitness does not transmit it, analyse it on a server, use it for advertising, or disclose it to third parties — apart from a meal photo you choose to scan and the targets you send for an AI meal plan, both described below. It stays on your device unless you deliberately export or share it yourself.

What leaves your device

TRAK Fitness connects to the internet only when you ask it to: to look up food information, to scan a meal if you use that feature, and to open a bug report. When you search for a food or scan a barcode, the app first checks the food databases built into it. Only if they don't have it does it send the search text or the barcode number to the database below, and receive nutrition information in return.

• Open Food Facts — a community food database, used for packaged products and barcodes

These requests contain only what you searched for. They do not include your name, your profile, your diary, your device identifier or your location. Those services will, like any web service, see your device's IP address as part of the connection, and their own privacy practices apply to that. TRAK Fitness's built-in food databases — Australian, United Kingdom and United States composition data, and a copy of Open Food Facts' Australian and New Zealand products — work entirely offline and require no connection at all.

iCloud backup (optional)

TRAK can keep a backup copy of your data in your own iCloud Drive. It is off until you switch it on in Settings. When it is on, the app saves one backup file (and the previous one) to TRAK's folder in your iCloud Drive about once a day. That file is stored by Apple under your Apple Account and is covered by Apple's privacy policy; it is never sent to us and we cannot see, read or restore it. Switching the backup off stops new copies, and you can delete the existing files at any time in the Files app under iCloud Drive.

Version check

When the app opens, it asks TRAK's server, hosted by Supabase, for two settings: the free-trial length and the oldest app version still supported. The request carries no information about you beyond what any web request does (your IP address). If your version is too old to be supported, the app asks you to update before continuing.

Meal scan (TRAK Premium)

If you photograph a meal to scan it, the app sends a reduced copy of that photo (about 1,000 pixels on its longest side) to TRAK's server, hosted by Supabase. The server asks Anthropic's Claude AI to name the foods in the photo and estimate their weight and nutrition, and returns only those names, weights and estimates. By default the calories and nutrients you log come from the food database on your phone; if you switch the scan to the AI estimate, Claude's figures are logged instead. If you enter a container size or say what the dish is (up to 60 characters), that is sent with the photo to help the estimate. The server does not store the photo or that text, and nothing from your diary is sent with it. A small copy of the photo and the result for your last 12 scans is kept on your phone, so you can reopen a scan without sending it again; it is not included in backup files and is removed when you delete the app. Anthropic processes the photo to produce the result, under its commercial terms.

Each meal scan and meal plan request also carries the app's version number, so the server can turn away versions that are no longer supported, and the anonymous IDs below, which the server may check against a list of IDs blocked for misuse.

To keep the feature within a fair daily limit, the app creates an anonymous ID the first time you scan. It contains no name, email address or other details, and the server records only how many scans that ID has made each day. Like any web service, the server sees your device's IP address. You never have to use meal scan, and nutrition label scanning is separate: it reads the panel on your device and sends nothing.

AI meal plans (TRAK Premium)

If you ask TRAK to build a meal plan, the app sends your daily calorie and macronutrient targets, the dietary needs you have ticked (for example vegetarian or a nut allergy), the food preferences you chose in meal plan setup (styles of food you like, foods you don't eat and how you like to cook) and any short note you add to TRAK's server, which asks Anthropic's Claude AI to suggest meals and their ingredients. Only meal names, ingredients and weights come back; the calories and nutrients come from the food database on your phone. Nothing from your diary, and nothing about your body, is sent. The server does not store what you send or the plan it returns, and Anthropic processes it to produce the plan, under its commercial terms.

The same anonymous ID used for meal scan counts how many plans you build each week, to keep the feature within a fair limit. The quick plan option builds a plan on your phone and sends nothing.

Subscriptions (TRAK Premium)

Payment for TRAK Premium is taken by Apple through your Apple Account; we never see your card or bank details. To check whether a subscription is active, TRAK uses RevenueCat, Inc., a subscription service based in the United States. When you subscribe, restore a purchase or open the app while subscribed, RevenueCat receives the App Store's record of the purchase (which plan, when it started and renews, the price and currency, and your App Store country) against a random ID created on your phone. TRAK does not give RevenueCat your name, email, diary, body data or device identifiers. RevenueCat handles this data under its own privacy policy, as our service provider, to operate subscriptions.

Bug reports

Report a bug opens a Google Form in your browser. What you type there is sent to Google and to us. The app doesn't attach your diary or any other data to it.

Camera and photos

TRAK Fitness asks for camera access so you can scan barcodes on food packaging and take progress photos, and for photo library access so you can choose an existing photo. Barcode scanning happens on your device; only the resulting barcode number is sent to the food databases above. Progress photos are stored on your device and are never uploaded. A meal photo is sent only when you choose to scan it, as described above. You can withdraw either permission at any time in iOS Settings.

Notifications

If you turn on reminders, they are scheduled locally by iOS on your device. TRAK Fitness has no push-notification server and cannot send you messages.

What we do not do

• We do not require an account, an email address or a sign-in (meal scan uses an anonymous ID with no details attached, described above)
• We do not use analytics, tracking pixels, advertising identifiers or third-party SDKs that profile you
• We do not sell, rent or share personal information with anyone
• We do not track you across other apps or websites

Payments

If TRAK Fitness offers a paid subscription, purchases are processed entirely by Apple through the App Store. We never see or store your payment details. Apple provides us only with anonymous, aggregated sales information.

Your control over your information

Because your data lives on your device, you control it directly:

• Export — Settings → Export my data produces a complete copy as a JSON file
• Delete — Settings → Delete all my data permanently erases everything TRAK has stored
• Remove everything — deleting the app removes all its data from your device
• iCloud backup — if you switched it on, the backup files stay in your iCloud Drive until you delete them in the Files app; deleting the app or its data does not remove them

Deletion is immediate and irreversible. Since we hold no copy, we cannot restore data for you, and we cannot delete data on your behalf.

The TRAK website

trakfitnessapp.com is hosted by Netlify. The site uses no analytics, advertising or tracking cookies. Its fonts are loaded from Google Fonts, so Google sees your IP address when a page loads.

If you request a beta invite, the form sends the name and email address you enter to Netlify, which checks the request for spam, stores it, and emails it to us. We use it only to invite you to the TestFlight beta: we add your email address in Apple's App Store Connect, and Apple sends the invite. We don't add you to a mailing list or share your details with anyone else, and we will delete them whenever you ask at trakfitnessapp@gmail.com.

Children

TRAK Fitness is for adults aged 18 and over. The app asks your age when you first open it and can't be used by anyone younger. It is not directed at children, and we do not knowingly collect information from them. The age you enter stays on your phone.

Not medical advice

TRAK Fitness provides general nutrition and fitness information, including estimated calorie targets, nutrient guidance, suggested training weights and meal suggestions. These are estimates for generally healthy adults, not medical, dietetic or clinical advice, and they are not a substitute for professional guidance. If you have a medical condition, are pregnant, or are managing an eating disorder or any other health issue, speak with a qualified professional before making changes.

Your rights

Under the Australian Privacy Principles and, where applicable, the EU and UK GDPR, you have rights to access, correct, export and erase your personal information. In TRAK Fitness these rights are exercised directly in the app using the export and delete functions above, because we hold no copy of your data on any server. If you believe we have handled your information improperly, contact us at the address above; in Australia you may also complain to the Office of the Australian Information Commissioner.

Changes to this policy

If TRAK Fitness's data practices change — for example if we add a feature that requires a server — we will update this policy and note the new date at the top, and where the change is significant we will tell you inside the app before it takes effect.