Privacy Policy

Last updated: September 4, 2026

This is a courtesy translation. If there is any conflict, the Portuguese version at trakapp.com.br/privacidade governs.

trak (“the app”, “we”) is a habit-tracking app developed by Tiago Villas. This policy describes what data we collect, how we use it and what your rights are.

1. Data we collect

When you use trak, we collect the following data, provided by you or generated by your use:

Account data: email address and authentication identifier. If you sign in with Apple or with Google, we receive the associated email address and identifier, as you authorize at sign-in.
Profile data: name and date of birth, provided during sign-up.
App content: habits, completion records and preferences (theme, palette, wallpaper mode) that you create inside the app.
Background photo (optional, trak Pro): if you choose to use a photo of your own as the wallpaper background, the app sends to your account only a crop of that photo, already at screen size and without metadata (such as camera location or date). The original photo never leaves your device. The crop is kept in private storage, accessible only by you and by our service that generates the wallpaper, and it is deleted when you remove the photo in the app or delete your account.
Wallpaper image: the image of your progress generated by the app, stored in your account so that the iOS shortcut can fetch it and update your Lock Screen.
Subscription status: the confirmation of purchase or renewal of trak Pro, received from Apple. Payment is processed entirely by the App Store — we do not see or store card data.
Technical logs: basic operational events, such as the record of each wallpaper fetch by the shortcut (internal account identifier, date and time, and device agent) — used to operate the service and to measure, in aggregate, the use of its features.
App usage data: events of interaction with the app — such as completion of the first-run steps, creation and check-off of habits, and which wallpaper features are used — linked to your account identifier. They do not include the content of what you write (habit names or date names are not sent). You can turn this sharing off at any time in Settings → Privacy, inside the app.

We do not collect location data, contacts, or health data from external sources.

2. How we use the data

We use your data exclusively to:

Create and authenticate your account;
Sync your habits and preferences across devices;
Generate the personalized wallpaper of your progress;
Validate your trak Pro subscription;
Operate and improve how the app works;
Understand, in aggregate, how the app is used — in order to prioritize improvements. This data is not used for advertising and is not cross-referenced with third-party data.

We do not sell your data and we do not use it for third-party advertising.

3. Photos access

trak requests permission to add images to your Photo Library for the sole purpose of saving the generated wallpaper. The app has no read access to your library: when you choose to use a photo of your own as the wallpaper background, the choice is made through the iOS photo picker, which hands the app only the selected photo — nothing beyond it is read or collected. That photo is handled as described in section 1.

4. Where the data is stored

Account data and content data are stored on Supabase infrastructure (PostgreSQL database and file storage), a provider that acts as data processor on our behalf. Supabase servers may be located outside Brazil (United States or European Union); by using trak, you are aware of this international transfer, carried out under the provider's contractual safeguards. Transmission takes place over encrypted connections (HTTPS).

5. Sharing with third parties

We share data only with the providers necessary to operate the service:

Supabase — authentication, database and storage;
PostHog — processing of app usage data (analytics), as a processor on our behalf, on servers in the United States, with contractual safeguards for the international transfer. Can be turned off in Settings → Privacy;
Apple and Google — only when you choose to sign in with those accounts, to validate your identity.
Apple (App Store) — processing of subscription payments and purchase status notifications.

6. Retention and deletion

We keep your data for as long as your account exists. You can delete your account at any time from within the app itself (Settings → Delete account): deletion removes from our servers your habits, records, preferences, the wallpaper image, the background photo (if any) and your account data. If you prefer, you can also request deletion at the email address below — we comply within a reasonable time, subject to legal retention obligations.

7. Your rights

You may access, correct or delete your data, request its portability, or withdraw consents, in accordance with applicable law (including the LGPD — Brazil's General Data Protection Law, Lei Geral de Proteção de Dados). To exercise these rights, contact us; you may also file a petition with the Brazilian National Data Protection Authority (ANPD).

8. Children

trak is not intended for anyone under 13 years of age and we do not knowingly collect data from children.

9. Changes to this policy

We may update this policy from time to time. The date at the top indicates the last revision. Material changes will be communicated inside the app.

10. Contact

Data controller and contact for privacy matters:
Tiago Villas — contato@trakapp.com.br