ontrack-privacy

OnTrack Privacy Policy

Effective date: 11 July 2026 Last updated: 12 July 2026

OnTrack (“the app”, “we”, “us”) is a personal fitness tracker for iPhone. This policy explains what data the app handles, where it goes, and your choices. Plain summary: OnTrack has no accounts and no server of its own. Your data lives on your device. A few features send specific data to third parties only when you use them — and your Apple Health data is never one of them.

Contact: ibrahim.ansari0801@gmail.com Publisher: Ibrahim Ansari

1. Who controls your data

OnTrack has no backend and no user accounts. You are in control of the data on your device. For the limited data sent to the third parties named in Section 4, those providers act as independent controllers under their own privacy policies.

2. Data stored on your device (never leaves unless Section 4 applies)

All of the following is stored locally on your iPhone using Apple’s on-device database. It is not transmitted to us (we operate no server) and not sold or shared:

Profile: age, sex, height, activity level, weight goal, and any calorie or macronutrient targets you set.
Body weight: the weigh-ins you log, with dates.
Diet log: foods you log and their calories, protein, carbohydrates, fat, and dates.
Workouts: exercises, sets, reps, weights, dates, and your saved templates.
App settings: units and reminder preferences.

If your device has iCloud Backup enabled, this local data may be included in your own encrypted Apple backup, governed by Apple’s privacy policy.

3. Apple Health (HealthKit)

With your permission, OnTrack:

Reads your body weight to show trends and to import weigh-ins logged by other apps or a connected scale; and
Writes the weights you log in OnTrack back to Apple Health.

Your Apple Health data stays on your device. It is never sent to our providers (including the AI provider in Section 4), never used for advertising or marketing, and never sold. You can review or revoke Health access at any time in the iOS Settings → Health → Data Access & Devices, or in Apple Health.

4. Data sent to third parties (only when you use these features)

OnTrack sends data off your device only for the specific features below. Each provider is a separate company with its own privacy policy.

4.1 AI Coach and Photo Meal estimates — Google Gemini

These AI features are off until you opt in. The first time you use the AI Coach or “Photo Meal,” the app shows a disclosure naming Google Gemini and asks for your consent; nothing is sent to Google unless you allow it, and you can revoke consent at any time in Settings → AI.

Once you have opted in and use the AI Coach or the “Photo Meal” nutrition estimator, the app sends your request through our server proxy to Google’s Gemini API, which generates the response. The proxy only forwards your request to Google and does not store it. What is sent:

AI Coach: the text of your questions and the conversation, plus a summary of data you have logged in the app — your profile (age, sex, height, goal, activity level), your app-logged weigh-ins, daily nutrition totals, and workout summaries. Apple Health data is excluded from this summary.
Photo Meal: the food photograph you provide and any description you type, so the model can estimate its nutrition.

We send this only to generate coaching text and nutrition estimates. We use Google’s paid API tier, under which your content is not used to train Google’s models. Google processes it as a service provider under its terms (https://ai.google.dev/gemini-api/terms) and privacy policy (https://policies.google.com/privacy).

4.2 Food lookup — Open Food Facts and USDA

When you search foods or scan a barcode, the app sends your search text and scanned barcode to look up nutrition information:

Open Food Facts (world.openfoodfacts.org) — see https://world.openfoodfacts.org/privacy
USDA FoodData Central (api.nal.usda.gov) — a U.S. government database.

These queries are not tied to your identity by us. As with any internet request, the receiving service can see your device’s IP address.

5. What we do NOT do

No advertising and no advertising identifiers.
No third-party analytics or tracking SDKs.
No sale or “sharing” of personal information for cross-context behavioral advertising.
No App Tracking Transparency prompt, because we do not track you across apps or websites.

6. Camera, Photos, and Notifications

Camera: used only to scan food barcodes and to photograph meals for nutrition estimates (see Section 4.1).
Photo Library: if you choose a meal photo from your library, iOS shares only the photo you pick; the app cannot browse your library.
Notifications: local reminders (e.g. a daily weigh-in nudge) generated on your device. We operate no push server.

7. Data retention and deletion

Because your data is stored locally, you control retention. You can edit or delete individual entries in the app, and deleting the app removes its local data from your device. Data already sent to the third parties in Section 4 is retained under their respective policies, outside our control. To remove data from Apple Health, use the Apple Health app.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to withdraw consent. Because OnTrack stores your data locally and holds no server-side copy, you can exercise most of these rights directly in the app (viewing, editing, and deleting entries, and revoking permissions in iOS Settings). For questions or requests, contact us at ibrahim.ansari0801@gmail.com.

EEA/UK (GDPR): our legal basis for optional features that send data is your consent (given by choosing to use those features and granting permissions); core on-device functionality relies on performance of the service you request. You may lodge a complaint with your local data protection authority.
California (CCPA/CPRA): we do not sell or share your personal information. You have the right to know, delete, and correct your information and not to be discriminated against for exercising these rights.
U.S. consumer health data (e.g. Washington, Nevada): health-related data such as body weight is processed only to provide the features you use and is never sold or shared for advertising.

9. Children

OnTrack is not directed to children under 13 and requires a minimum age of 13 during setup. We do not knowingly collect personal information from children under 13. If you believe a child has provided data, contact us and we will address it.

10. Security

Data on your device is protected by iOS’s built-in data protection. Data sent to the third parties in Section 4 is transmitted over encrypted HTTPS connections. No method of transmission or storage is perfectly secure.

11. International transfers

The third-party services in Section 4 may process data on servers outside your country (for example, in the United States). Those transfers are governed by the respective providers’ privacy policies and safeguards.

12. Changes to this policy

We may update this policy. Material changes will be reflected by the “Last updated” date above and the in-app link to this policy.

13. Contact

Ibrahim Ansari — ibrahim.ansari0801@gmail.com