DOCUMENT 1.18 · 19 AUGUST 2026 · UPDATED BEFORE ANY PRACTICE CHANGES · ONE POLICY, THE WHOLE TRACK FAMILY

Privacy & Terms, in plain words.

The short version

Your training lives on your phone. We cannot see your logs, your measurements, or your cycle data, because they never reach us. What travels: anonymous usage events (what happened, never what you lifted), gym search text if you use the gym picker, the coach conversation, which goes through our server to an AI provider to write the replies, and, once you create your Track account, your email and your shared training profile. No ads, no data brokers, no selling, ever.

Your Track account

Starting a coached plan needs a free Track account: your email and a password, stored by our auth provider as a salted hash we can never read. One account is the whole Track family: the same email and password sign straight into TrackKcal and any future Track app, there is never a separate account to create there. With it, your shared training profile lives on our server so every Track family app can know you: name, gender, age (or your date of birth if you gave it to a Track family app, each app derives your age from it), weight, goal weight, your training goal, your stated reason, experience, schedule, equipment, focus, set style, split, injury notes, weight unit, and one yes or no flag recording whether you use cycle aware planning. Plus a body weight entry per day you record one, and a one line training day summary per day you train: session name, session count, total sets, total volume, duration, and a calorie burn estimate, so TrackKcal can see that you trained. If you use the supplement shelf while signed in, each tick sends one row per supplement per day: its name and brand, the dose label, and the calories, protein, carbs and fat that serving carries, so TrackKcal can count your shake without asking you twice; untick and the row is deleted. That includes a weekly pen if you shelve one, its name and dose travel the same way so TrackKcal can see it too. Signed out, the shelf works entirely on your phone. Never your individual sets or weights. Manual plan building, logging, and stats never require an account.

TrackLifts · what is never on our server

Your workout logs, plans, individual sets, chat history, progress pictures, injection sites and skin reactions on a pen's record, and cycle data itself. Progress pictures live only in the app's own folder on your phone: never uploaded, never synced, deleting the app deletes them, and export to your camera roll is always one tap. Where a shot went and how the skin reacted stays on the phone completely, only the tick itself travels. Period dates, cycle length, regularity, and phases have no place to live in our database, by design, permanently. Only day totals ever leave the phone, and only with a Track account.

TrackLifts · cycle data

Optional, on your phone, deletable on its own in cycle settings, never used for ads, never sold, never used to train AI models. Declining it never reduces the app. It is training scheduling, not contraception, not fertility tracking, not diagnosis.

TrackLifts · the AI coach

The interview and the chat go through our own server to an AI provider (Moonshot AI today) which writes the coach's words. Alongside your messages goes a context block computed by the app: profile, plan names, gym, avoid list, and a strength snapshot, your top lifts' best sets and their progress numbers, computed on your phone so the coach can answer questions about your lifting honestly. If your Track account also uses TrackKcal, the block adds your daily calorie, protein, and carb totals and detected eating habit lines from there, so the coach can speak to food and training together, and the app computes food and training patterns on your phone from the same totals. Never cycle data, never your raw logs, never individual meals. The AI writes words only: every number in your plan is computed on your phone. Provider keys stay on our server. Moonshot's API terms state inputs are not used to train their models.

TrackLifts · analytics

First party only, to our own database: a random install id, event names like session finished or supplement added, profile attributes like goal, experience, gender and age band, and the local hour and weekday a workout starts and ends, so future reminders can learn when you actually train. A supplement event carries only its category, never the product or brand, a medication name never enters analytics. Never your name, never workout content, never free text, never cycle data. The app cannot even read them back.

TrackKcal · what it stores

Everything you log: the meals and the words you described them with, the calories and macros worked out from them, your weight, your water, your exercise, and your goals, including any diet you follow. Your date of birth, sex and height, because the calorie target cannot be calculated without them. Photos of food you chose to log. Conversations with the AI Nutritionist, which may contain anything you typed about your eating or your body. It writes to the phone first and syncs to the family database in Mumbai, so the app works with no signal and catches up later. Every entry is editable and deletable in place.

TrackKcal · where the AI sends it

This is the part that leaves our servers, so it is worth being exact. When you log food by text or photo, that description or image goes to OpenAI in the United States, which returns the nutrition estimate. OpenAI states that data sent through its API is not used to train its models. When you talk to the AI Nutritionist, your messages and a summary of your logged numbers go to Moonshot AI, whose servers are in China. Where you name a branded packaged product, that product name alone is sent to a web search provider and to the Open Food Facts database so the real label can be used instead of a guess, and nothing about you travels with it. Your name and your email address are never sent to any of them. What goes is your food, your numbers, and what you typed.

TrackKcal · analytics

Which screens you opened, which features you used, app version, operating system and device model, tied to a random install id and, once you sign in, your user id. Crash and error reports carry the screen and the technical context of the request that failed. Neither carries your food, your photos, or a word of what you said to the coach. Usage goes to Mixpanel and crashes to Sentry, both on their European servers.

TrackKcal · not medical advice

TrackKcal estimates, it does not measure. Every calorie and every gram is a best guess from what you described, and where a manufacturer's label is found the figures are only as good as that label. Nothing in the app, the AI Nutritionist included, is medical advice. Speak to a doctor or a dietitian before changing your diet significantly, particularly if you are pregnant, unwell, or on medication affected by food. If you have or have had an eating disorder, an app that counts everything you eat can do harm; please speak to a professional before using it. Intended for ages 13 and over.

Your rights

See everything in the notebook and stats. Correct or delete anything in place. Export free forever. Clear Local Data wipes the phone. For server held account data, write to kunalt96@hotmail.com for access or correction, or use the account deletion page, which works without the app installed and erases every server row for both apps within 30 days. In-app deletion ships before store release.

The terms · not medical advice

TrackLifts is software generated training guidance, not a doctor, not a diagnosis. The supplement shelf and the pen record are memory, not medical advice: the app never suggests a product, a dose, or an injection site, it only remembers what you told it. Doses are between you and your doctor. Train within your limits and see a professional for pain that persists. Intended for ages 16 and over.

The terms · payments

Purchases, where offered, go through Apple or Google. We never see your card. Subscriptions auto renew until cancelled in your store settings.

Operated by Honekta Labs, UAE. Questions: kunalt96@hotmail.com. This page carries the same version number as the document inside the apps and updates before any practice changes.