Privacy

Last updated: 2026-07-02

Track is a personal calorie and macro tracker. This page describes what happens to your data when you use the app. There is no account system, no ads, and no tracking across apps or websites.

What stays on your phone

• Your profile (name, height, weight, age, sex, activity).
• Daily food log entries and the photos you took of food packages.
• Your goals, saved meals, and coach chat history.

All of this is stored in a local SQLite database on your device. It is not synced to a server we control. If you delete the app, the data is gone.

Apple Health

If you choose to connect Apple Health, Track reads two values with your permission: Active Energy and Resting Energy. They are used on your device to show calories earned from activity. Track never writes to Apple Health, and your health data is never used for advertising or analytics.

One narrow exception to “stays on device”: when Apple Health is connected and you message the coach, your daily active/resting energy totals (numbers only — no workouts, routes, or other health records) are included in the context sent with that message so the coach can answer questions like “how much did I burn today?”. If you don’t connect Apple Health, no health data exists in the app at all. You can revoke access anytime in iOS Settings → Privacy & Security → Health.

What is sent off-device

• Photos of food packages and nutrition labels are sent to Anthropic’s API for parsing into structured macros. Anthropic processes these images to return text/JSON; per their policy, API inputs are not used to train models. Photos are not stored on our server and are not retained beyond the request.
• Food descriptions you type (the “describe a food” estimate) are sent to Anthropic to estimate macros.
• Coach messages (your message plus a short context block — recent log totals, current goals, and the Apple Health totals described above if connected) are sent to Anthropic for the chat response.
• Goal recommendations send a small JSON snapshot of your profile (age, sex, height, weight, activity, goal) to Anthropic.

Calls to Anthropic are proxied through a small Cloudflare Worker we host so the API key never lives on your device. The Worker logs request counts (for rate limiting and daily quotas) but not the content of your photos or messages.

Device verification (App Attest)

To keep the AI features free of abuse without requiring accounts, Track verifies on first launch that it is a genuine App Store install using Apple’s App Attest. Apple generates a one-time attestation on your device; our Worker verifies it and issues a random device token used to meter daily AI usage. The token is a pseudonymous identifier — it is not linked to your name, Apple ID, or any personal data, and it is not used for advertising or cross-app tracking. The Worker stores the token alongside hashed usage counters, nothing else.

Crash reporting

Track includes Sentry to capture crashes and JavaScript errors. Sentry receives stack traces, device model, OS version, and a synthetic install ID — no profile fields, photos, health data, or chat content.

Third parties

• Anthropic — image parsing, food estimates, coach, goal recommendations.
• Cloudflare — Worker hosting, KV (rate-limit counters, device tokens, and access codes).
• Sentry — crash reporting.

Your controls

• Export: Profile → Settings → Export CSV writes your full food log to a file you can save or share.
• Delete: Profile → Settings → Reset all data wipes the local database and cached photos. Deleting the app removes everything.
• Revoke server access: Email us and we’ll revoke your device token or access code on the Worker; the app will stop being able to call the AI features. Everything else keeps working.

Not medical advice

Track is a general-wellness app. The coach and all calorie/macro figures are informational — they are not medical advice, diagnosis, or treatment. Consult a qualified professional for medical or dietary decisions.

Contact

Questions: khalu1996@gmail.com.