Privacy Policy
Last updated: July 2026
TrackInPublic ("we", "us") runs a public habit-tracking service at trackinpublic.app and its mobile apps. This policy explains what we collect, why, and your choices. Questions: [email protected].
What we collect
- Account: your email, name, chosen handle (slug), timezone, and bio. If you sign in with Google, we receive your email, name and profile picture URL.
- Your habits & activity: habit names, whether each is public or private, daily check-ins, and streak milestones.
- Proof media: photos and voice notes you attach to check-ins.
- Billing: if you subscribe to Pro, our payment processor (Stripe) handles your card. We store only your Stripe customer/subscription identifiers and plan status — never your card number.
- Notifications: if you enable reminders, your push subscription token.
- API keys: hashed personal tokens you generate to connect automations.
- Technical: standard server logs (IP, user agent, timestamps) and a session cookie to keep you signed in.
Public by design
TrackInPublic is a public product. Habits you mark public — along with your name, handle, streaks, heatmap, milestones and any proof media attached to public habits — are visible to anyone with your page link and may be indexed by search engines. Habits you mark private are visible only to you. You control the public/private switch on every habit.
How we use your data
- To provide the service: your dashboard, public page, streak calculations and reminders.
- To process Pro subscriptions (via Stripe).
- To send the check-in reminders you opt into.
- To keep the service secure and debug issues.
We do not sell your data, and we do not use advertising or cross-app tracking.
Who we share with
- Stripe — payment processing.
- Google — only if you choose "Continue with Google" (sign-in).
- Hosting / CDN — our server and Cloudflare deliver the app.
These providers process data only to run the service. We may disclose data if legally required.
Cookies
We use a single, essential first-party cookie to keep you signed in. We do not use advertising or analytics cookies.
Retention & deletion
We keep your data while your account is active. You can delete your account at any time, which removes your profile, habits, check-ins, milestones, media and push subscriptions. To request deletion, email [email protected].
Security
Passwords are salted and hashed (scrypt); API keys are stored hashed. Traffic is encrypted in transit (HTTPS). No system is perfectly secure, but we take reasonable measures to protect your data.
Children
TrackInPublic is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect data from children.
Your rights
Depending on your location, you may have rights to access, correct, export or delete your data. Email [email protected] and we'll help.
Changes
We may update this policy; material changes will be reflected by the date above. Continued use means you accept the current policy.