Last updated: September 15, 2026
1. Who is responsible
Track Anything is operated by Florian Trippel. Privacy and support questions can be sent to florian.trippel@gmail.com.
2. Data stored on your device
Journals, entries, trackers, notes, reminders, settings, locally entered API keys, cached background images, and local backups are stored on your device or in your browser's local application storage. For signed-in accounts, journals, trackers, entries, reminders, and chat messages are also synchronized through our cloud service.
Removing the app or clearing browser storage may remove local data. Use the export and backup functions if you want an additional copy.
Account deletion clears local account data on the installation where you request it. It cannot remotely erase an offline copy held by another installation. That copy remains until it is deleted there, its browser storage is cleared, or the app is uninstalled.
3. Account and access status
Track Anything requires an account on supported platforms. Our authentication service processes your account identifier, sign-in provider, and basic profile information supplied by that provider. We store the purchase information needed to determine Free, trial, or Pro access, including where you purchased and your subscription status.
This processing is necessary to provide the account, prevent purchase abuse, recognize eligible access across supported platforms, and fulfil your purchase. Synchronized app content is linked to your account. Locally entered API keys remain separate; encrypted copies may be stored with your account.
After account deletion, we retain basic account information to restore past purchases if you decide to sign in again. Purchase and payment records are also retained for subscription administration, legal obligations, disputes, and fraud prevention.
4. Payments
Web payments are processed by Paddle, the merchant of record. Paddle receives the billing, payment, tax, fraud-prevention, and transaction data required to complete and support the purchase. Track Anything does not receive your full card details.
Purchases made through Apple or Google are processed under the respective store's privacy and payment terms. The same will apply to Microsoft Store purchases when Windows billing becomes available. Deleting your Track Anything account does not cancel a subscription managed by one of these payment providers.
5. Sync, optional AI, and background services
When you are signed in, app data is synchronized through our cloud service so your devices can stay up to date.
AI features are optional. Content is sent to the AI provider you configure only when you request an AI operation. That provider's terms and privacy policy apply to its processing.
If you connect an assistant such as ChatGPT or Claude, that assistant can read the journals you selected while the connection exists. Your selection is stored with your account and checked on every request; you can change or end the connection in the app at any time, and requesting the deletion of your account ends it at once — after a cancelled deletion you connect the assistant again. The assistant also receives the email address of your Track Anything account, which the assistant's provider uses to recognise the account the connection belongs to. The connection is read-only, and the assistant provider's own terms and privacy policy apply to what it does with what it reads.
If you use Unsplash background search, your search words are sent through our API to Unsplash. Preview and background images load directly from Unsplash, which receives your IP address and technical request or device information and may record searches, image views, and background selections under a random device identifier. The selected Unsplash photo ID and its attribution details are stored with your account setting; a copy of the image is cached locally so it can remain available offline. Unsplash processes this information under its Privacy Policy.
6. Diagnostics, infrastructure, and security
Release versions for Android, iOS, and macOS use a 3rd party crash reporting service to receive crash reports and unexpected application errors. Diagnostic reports can include installation and session identifiers, the time of the event, app version, device model and specifications, operating-system information, application execution state, redacted exception types, and stack traces. Reports cover crashes, unexpected application failures, and technical failures shown to the user. Limited low-cardinality context can include the sync trigger, failure category, or affected application operation.
We use these diagnostics to maintain security, reliability, and product quality. Exception messages and free-form diagnostic context are redacted before upload. We do not deliberately attach journal, tracker, entry, note, AI prompt, file, email, account-ID, SQL parameter, provider-response, or authorization-token content to Crashlytics reports. Crashlytics is not enabled in the Web or Windows versions. Google processes Crashlytics data on our behalf.
We use third-party service providers for hosting, cloud storage, account sign-in, and crash reporting.
7. Retention and your choices
Local content remains until you delete it, clear the browser profile, or uninstall the app. Account, security, and transaction records are retained as long as needed to provide access, meet legal obligations, resolve disputes, and prevent fraud.
Google states that Crashlytics crash traces and their associated installation identifiers are retained for 90 days before removal from live and backup systems begins.
You may request information, correction, deletion, restriction, or a copy of personal data where applicable. Contact us using the address above. A Track Anything account deletion request is scheduled for 30 days later; signing in again during that period cancels the request, while an installation that is still signed in signs out and keeps its local copy. After this period, we delete your app data. We retain basic account information to restore past purchases if you decide to sign in again. Purchase and payment records are also retained for subscription administration, legal obligations, disputes, and fraud prevention. Local copies on other devices are not erased remotely.
8. Changes
We may update this policy when features, providers, or legal requirements change. The current version and its update date will remain available on this page.