Privacy Policy
How onTrack collects, uses, and protects your data.
Last updated: October 2026
1.Introduction
Welcome to onTrack ("we", "our", "us").
This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application and related services ("App").
By using onTrack, you agree to this Privacy Policy.
2.Information we collect
A. Personal information
We collect the following personal data:
- Name (from Apple Sign-In or your email account)
- Email address
- Username
- Profile photo (uploaded by the user or provided by social login)
B. Authentication information
- Login tokens and identifiers from Apple Sign-In; for email/password accounts we store a secure hash of your password.
- We do not store your password in plain text.
C. Fitness activity (non-health data)
We collect activity logs entered manually by the user, including:
- Completed workouts
- Challenge progress
- Workout history and statistics
- Body weight and body measurements, if you choose to log them
- Workout notes and training places you create
No Apple Health integration and no sensitive biometric data is collected.
D. Friends & community features
- Friends list (username-based)
- Shared workouts
- Participation in community challenges
- Public profile information (username, avatar, workout stats)
We do not access your contacts or phonebook.
D2. Clubs
If you create or join a club we store your membership, your role (member, admin or owner), the club's name, picture and training equipment, and a log of changes to the club's equipment. You can report a club or a member, and block a member; reports are stored and may be emailed to our moderation contact so that we can act on them.
Sharing your workouts with your clubs is optional and off by default.
If you turn it on in Settings (Privacy, Clubs), members of the clubs you belong to can see:
- The name of your workout (or of the program session)
- The day you finished it
- Its duration, the number of exercises and the number of sets
- Your name, username and profile photo
We never share workout notes, weights, reps, volume, body weight, photos, training places, your location or exact times through this feature. You can switch it off in Settings at any time, or hide your activity in a single club; your activity then stops appearing to club members.
E. Device & usage data
Both kinds of data below can be switched off in the app, under Settings, Privacy: data sharing. Both are on by default.
Crash reports
When the app crashes or hits an unexpected error, a report is sent to our crash-reporting provider, Sentry. It contains the error and its stack trace (with email addresses and tokens removed), your device model, operating system and app version, the names of the screens you were on just before the crash (identifiers removed) and your account's random identifier when you are signed in. It does not contain your name, email, workout content, notes, photos or network content, and it is not used to track you across other apps or websites.
Anonymous usage data
The app sends a few product events to our own servers, such as the first launch, onboarding completed, first workout started or completed, and returning after seven days. Each event carries the event name, the time, your platform and app version, a random identifier generated by the app (not your advertising identifier) and your account identifier when you are signed in. We use it to see whether new users get through onboarding and to improve the app. We do not use any advertising or third-party analytics SDK.
We also record the device type and app version with your requests so that we can support older versions.
F. Push notifications
We store the device push token to send:
- Workout reminders
- Challenge updates
- Friend activity notifications
3.How we use your information
We use your information to:
- Create and manage your account
- Track workout progress
- Sync your data across devices
- Enable social features (friends, sharing, community challenges)
- Improve app performance and stability (crash reports, anonymous usage data)
- Show your workout activity to members of your clubs, only if you turn this on
- Provide customer support
- Send relevant notifications (you may disable them anytime)
4.Legal basis (GDPR)
We process data based on:
- Contract (providing the service)
- Legitimate interest (security, crash reports and anonymous usage data, which you can switch off in Settings)
- Consent (push notifications, sharing your activity with clubs, optional features)
6.Data retention
We retain user data for as long as the account remains active.
When you delete your account:
- Personal data is permanently deleted
- Activity logs and social interactions are anonymized or removed
Learn more about how to delete your account.
7.Your rights
Under GDPR you may:
- Access your data
- Request correction
- Request deletion
- Request export of your data
- Withdraw consent (e.g., for notifications, crash reports, usage data or club activity sharing, all in Settings)
To delete your account, visit our Account Deletion page.
Contact us at contact@mqrtin.com.
8.Security
We use industry-standard security measures, including:
- HTTPS encryption
- Secure authentication tokens
- Restricted data access
- Encrypted storage for user files (profile photos)
9.Children's privacy
onTrack is not intended for children under 16.
We do not knowingly collect data from minors.
10.Changes to this policy
We may update this Privacy Policy.
Changes will be posted in the App and on our website.
11.Contact
If you have questions about this Privacy Policy:
contact@mqrtin.com