onTrck - Your Fitness Journey

1. Introduction

Welcome to onTrck ("we", "our", "us").

This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application and related services ("App").

By using onTrck, you agree to this Privacy Policy.

2. Information We Collect

A. Personal Information

We collect the following personal data:

Name (from Google or Apple Sign-In)
Email address
Username
Profile photo (uploaded by the user or provided by social login)

B. Authentication Information

Login tokens and identifiers from Google Sign-In or Apple Sign-In
We do not receive your passwords.

C. Fitness Activity (Non-Health Data)

We collect activity logs entered manually by the user, including:

Completed workouts
Challenge progress
Workout history and statistics

No Apple Health integration and no sensitive biometric data is collected.

D. Friends & Community Features

Friends list (username-based)
Shared workouts
Participation in community challenges
Public profile information (username, avatar, workout stats)

We do not access your contacts or phonebook.

E. Device & Usage Data

We collect technical data including:

Device type
App version
Crash logs
Usage analytics

Analytics are performed via custom internal APIs (no third-party tracking SDKs).

F. Push Notifications

We store the device push token to send:

Workout reminders
Challenge updates
Friend activity notifications

3. How We Use Your Information

We use your information to:

Create and manage your account
Track workout progress
Sync your data across devices
Enable social features (friends, sharing, community challenges)
Improve app performance and stability
Provide customer support
Process subscriptions and payments
Send relevant notifications (you may disable them anytime)

4. Legal Basis (GDPR)

We process data based on:

Contract (providing the service)
Legitimate interest (security, analytics)
Consent (push notifications, optional features)

5. Sharing Your Information

We do not sell your data.

We only share data with:

Apple (in-app purchases)
Google (authentication only)
Backend service providers strictly for operating onTrck

All processors comply with GDPR and are under data-processing agreements.

6. Data Retention

We retain user data for as long as the account remains active.

When you delete your account:

Personal data is permanently deleted
Activity logs and social interactions are anonymized or removed

Learn more about how to delete your account.

7. Your Rights

Under GDPR you may:

Access your data
Request correction
Request deletion
Request export of your data
Withdraw consent (e.g., for notifications)

To delete your account, visit our Account Deletion page.

8. Security

We use industry-standard security measures, including:

HTTPS encryption
Secure authentication tokens
Restricted data access
Encrypted storage for user files (profile photos)

9. Children's Privacy

onTrck is not intended for children under 16.

We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy.

Changes will be posted in the App and on our website.

11. Contact

If you have questions about this Privacy Policy:

contact@ontrckapp.com