Last updated: October 28, 2026
1. Who is responsible
Track Anything is operated by Florian Trippel. Privacy and support questions can be sent to florian.trippel@gmail.com.
2. Data stored on your device
Journals, entries, trackers, notes, reminders, settings, locally entered API keys, cached background images, and local backups are stored on your device or in your browser's local application storage. For signed-in accounts, journals, trackers, entries, reminders, and chat messages are also synchronized through our cloud service.
Removing the app or clearing browser storage may remove local data. Use the export and backup functions if you want an additional copy.
Account deletion clears local account data on the installation where you request it. It cannot remotely erase an offline copy held by another installation. That copy remains until it is deleted there, its browser storage is cleared, or the app is uninstalled.
3. Account and access status
Track Anything requires an account on supported platforms. Our authentication service processes your account identifier, sign-in provider, and basic profile information supplied by that provider. We store the purchase information needed to determine Free, trial, or Pro access, including where you purchased and your subscription status.
This processing is necessary to provide the account, prevent purchase abuse, recognize eligible access across supported platforms, and fulfil your purchase. Synchronized app content is linked to your account. Locally entered API keys remain separate; encrypted copies may be stored with your account.
After account deletion, we retain basic account information to restore past purchases if you decide to sign in again. Purchase and payment records are also retained for subscription administration, legal obligations, disputes, and fraud prevention.
4. Payments
Web payments are processed by Paddle, the merchant of record. Paddle receives the billing, payment, tax, fraud-prevention, and transaction data required to complete and support the purchase. Track Anything does not receive your full card details.
Purchases made through Apple or Google are processed under the respective store's privacy and payment terms. The same will apply to Microsoft Store purchases when Windows billing becomes available. Deleting your Track Anything account does not cancel a subscription managed by one of these payment providers.
5. Sync, optional AI, and background services
When you are signed in with Pro or an active trial, app data is synchronized through our cloud service so your devices can stay up to date. On the Free plan, your journals stay on your device; your account profile, settings and purchase status are still synchronized.
AI features are optional. Content is sent to the AI provider you configure only when you request an AI operation. That provider's terms and privacy policy apply to its processing.
If you connect an assistant such as ChatGPT or Claude, that assistant can read the journals you selected while the connection exists. Your selection is stored with your account and checked on every request; you can change or end the connection in the app at any time, and requesting the deletion of your account ends it at once — after a cancelled deletion you connect the assistant again. The assistant also receives the email address of your Track Anything account, which the assistant's provider uses to recognise the account the connection belongs to. The connection is read-only, and the assistant provider's own terms and privacy policy apply to what it does with what it reads.
If you use Unsplash background search, your search words are sent through our API to Unsplash. Preview and background images load directly from Unsplash, which receives your IP address and technical request or device information and may record searches, image views, and background selections under a random device identifier. The selected Unsplash photo ID and its attribution details are stored with your account setting; a copy of the image is cached locally so it can remain available offline. Unsplash processes this information under its Privacy Policy.
6. Website reach and optional usage analytics
Cloudflare Web Analytics automatically measures visits, page views, and performance on public website pages for visitors outside the European Union. Cloudflare excludes EU visitor data from this measurement. It does not use cookies or browser storage and does not create an individual visitor profile. Health-guide pages are included in this aggregate Cloudflare measurement outside the EU.
If you allow analytics, public marketing pages and release versions of the Android, iOS, macOS, and Web apps use Google Analytics to measure visits, app-link clicks, feature use, checkout starts, and whether people return to use the app. Windows and health-guide pages are excluded.
Analytics can process a random installation or browser identifier, timestamps, app version, device and operating-system information, language, coarse location derived from the network request, referrer and campaign information, and the limited interaction events described above. We do not send your account identifier, email address, journal or tracker names, entries, notes, health information, AI prompts, search text, or payment details. Advertising identifiers, advertising personalization, Google Signals, and cross-company tracking are disabled.
Analytics is off until you choose to allow it. The website stores your choice in its local browser storage, and each app installation stores its own choice. You can change the website choice through Analytics settings in the footer and the app choice under Settings → Privacy. Withdrawing consent stops future collection. The marketing website and native apps reset their local Analytics identifier. The Web app retains its browser identifier and can reuse it if analytics is allowed again. Withdrawal does not automatically delete data already sent to Google. Google processes Analytics data on our behalf.
7. Diagnostics, infrastructure, and security
Release versions for Android, iOS, and macOS use a 3rd party crash reporting service to receive crash reports and unexpected application errors. Diagnostic reports can include installation and session identifiers, the time of the event, app version, device model and specifications, operating-system information, application execution state, redacted exception types, and stack traces. Reports cover crashes, unexpected application failures, and technical failures shown to the user. Limited low-cardinality context can include the sync trigger, failure category, or affected application operation.
We use these diagnostics to maintain security, reliability, and product quality. Exception messages and free-form diagnostic context are redacted before upload. We do not deliberately attach journal, tracker, entry, note, AI prompt, file, email, account-ID, SQL parameter, provider-response, or authorization-token content to Crashlytics reports. Crashlytics is not enabled in the Web or Windows versions. Google processes Crashlytics data on our behalf.
We use third-party service providers for hosting, cloud storage, account sign-in, and crash reporting.
8. Retention and your choices
Local content remains until you delete it, clear the browser profile, or uninstall the app. Account, security, and transaction records are retained as long as needed to provide access, meet legal obligations, resolve disputes, and prevent fraud.
Google states that Crashlytics crash traces and their associated installation identifiers are retained for 90 days before removal from live and backup systems begins.
You may request information, correction, deletion, restriction, or a copy of personal data where applicable. Contact us using the address above. A Track Anything account deletion request is scheduled for 30 days later; signing in again during that period cancels the request, while an installation that is still signed in signs out and keeps its local copy. After this period, we delete your app data. We retain basic account information to restore past purchases if you decide to sign in again. Purchase and payment records are also retained for subscription administration, legal obligations, disputes, and fraud prevention. Local copies on other devices are not erased remotely.
9. Changes
We may update this policy when features, providers, or legal requirements change. The current version and its update date will remain available on this page.