1. Overview

Traq ("we", "us") is a workout tracking app for iOS. This policy explains what information we collect, how it's stored, and the choices you have. The short version: we collect only what's needed to run your account and back up your workouts. We don't sell your data, we don't show ads, and we don't use tracking or analytics.

2. Information we collect

Account information. When you create an account we collect your email address and, optionally, your name. If you sign in with Apple or Google, we receive your email (and name, if you share it) from that provider instead of a password. Passwords are never stored in plain text — only in securely hashed form.

Workout data you enter. Workouts, exercises, sets, weights, routines, goals, and profile settings you type into the app. Traq does not read data from Apple Health or any other source — everything comes from you.

Nothing else. Traq contains no advertising, analytics, or tracking SDKs. We do not collect your location, contacts, photos, device identifiers for tracking, or browsing activity.

3. How your data is stored

On your device. Your workout data is saved locally in the app's private, sandboxed storage so the app works offline. Your sign-in session is stored in the iOS Keychain, encrypted by the operating system. Local data may be included in your normal device backups (iCloud or computer backups), which are governed by Apple's privacy policy.

In the cloud. Your workout data is backed up to your account in our database, hosted by Supabase (running on Amazon Web Services). Each user's data is isolated with database-level access rules so that only your signed-in account can read or write your data. Data is encrypted in transit (TLS/HTTPS) and at rest.

Email. We send transactional emails only — account confirmation and password reset codes — from traq@traqworkouttracker.com via our email provider (Namecheap Private Email), which processes your email address solely to deliver those messages. We never send marketing email.

4. How we use your information

We do not sell, rent, or share your personal information with third parties for their own purposes. We do not use your data for advertising.

5. Service providers

We use a small number of infrastructure providers to operate Traq, each processing data only on our behalf:

6. Purchases

Traq Pro is bought and processed entirely through Apple. Traq never sees or stores your card details. We only record whether your account has Pro.

7. Data retention

We keep your account and workout data for as long as your account exists. If you delete your account, your data is removed as described below. We don't keep copies for other purposes.

8. Deleting your data

You can permanently delete your account and all associated data at any time from inside the app: Profile → Delete Account. This immediately and permanently removes your account and all workout data from our servers. You can also delete the app's local data by removing the app from your device. If you need help, email us and we'll delete your account for you.

9. Your rights

Depending on where you live (including the EU/EEA, UK, and California), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in the app; for anything else, contact us at the address below and we'll respond within 30 days. We will never discriminate against you for exercising your rights.

For users in the EU/EEA and UK: we process your data to perform our contract with you (providing the app and account backup) and, for account emails, because it's necessary to operate the service. You also have the right to lodge a complaint with your local data protection authority.

10. Children

Traq is not directed at children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

11. Security

We protect your data with industry-standard measures: encryption in transit and at rest, hashed passwords, OS-level Keychain storage for sessions, and per-user database access rules. No system is 100% secure, but we design Traq so that only you can access your data.

12. Changes to this policy

If we make material changes, we'll update this page and the effective date above. Continued use of Traq after changes take effect means you accept the updated policy.

13. Contact

Questions or requests? Email us at traq@traqworkouttracker.com.