1. Scope and contact.
TakeTrack is operated by NTech LLC (30 N Gould St Ste R, Sheridan, WY 82801, USA), which is the data controller for personal information processed through the TakeTrack website and app. This policy covers the TakeTrack website and app. For questions about your information, contact support@taketrack.app. External merchants and services have their own privacy policies.
2. Information we process.
TakeTrack processes account and profile details; food logs and nutrient records; pantry inventory; medication and supplement routines and recorded check-offs; goals and health preferences; family connections and sharing permissions; notification preferences; and conversations with Tracy Health setup is optional, and health information you enter can be sensitive.
When you use scanning or chat attachments, processing can include photos, labels, receipts, prescriptions, documents and audio you submit. We also process support messages and technical information needed to operate the service, such as request, error and security logs. Only submit information you have permission to use.
3. Why information is used.
Your information supports account access, tracking, saved history, reminders, household features and personalized responses. It also helps us respond to support requests, troubleshoot errors and protect the service. AI features use relevant saved context and your input; they do not automatically confirm food entries or medication instructions on your behalf.
Legal basis. We process account and service data to perform our contract with you; health information you choose to enter on the basis of your explicit consent, which you can withdraw by deleting it or contacting us; security, fraud-prevention and service-improvement data on the basis of our legitimate interests; and records we must keep on the basis of legal obligation.
4. AI and external services.
Using an AI feature sends relevant context and uploaded media to Google Gemini, our AI provider. Food and medicine searches send search terms or identifiers to public health, nutritional and pharmaceutical reference databases. These services do not need your entire health profile to perform a database search.
Supabase provides our database and account services. Configured email and notification services process delivery information, including device tokens when you enable push. When paid plans launch, our payment processor will receive the information needed to process payments, manage subscriptions and issue invoices. We may also share information with professional advisers (legal and accounting) and with authorities where required by law. Do not send payment-card details through chat or email.
External providers may process information in other countries and apply their own retention practices. This policy does not promise immediate deletion of provider logs or that uploaded material is never retained by a processing service.
5. Family sharing and partner links.
Personal records use account-scoped access controls. Shared household pantry items and information you explicitly consent to share are available to authorized members. Family medicine visibility and late-intake notifications depend on sharing permissions and recipient settings. A parent or guardian manages supported dependent records; these are separate from the adult’s personal health settings.
You can manage connections and revoke supported permissions in the app. Revocation does not erase information someone previously viewed or copied. Affiliate links, when enabled, may let a merchant or affiliate network attribute a referral. Product clicks are not proof of a purchase, a meal or a taken dose, and a referral does not itself authorize sharing your private health records with a merchant.
6. Browser storage and permissions.
Sign-in uses session storage mechanisms. Local browser storage also remembers appearance preferences and invitation navigation intent. An invitation token alone does not grant access to another person’s records. Camera, microphone and notification access depend on your device permissions; you can revoke those permissions in your browser or device settings.
7. Retention, corrections and deletion requests.
Saved records remain available for ongoing tracking unless removed through supported controls or an account-handling process. You can edit your profile, remove food records and manage sharing and notification settings in the app. We keep account records for as long as your account is active. After an account deletion request is completed, we delete or anonymise personal data within 30 days, except where retention is required by law; backups and provider logs expire on their own rolling schedules. Data that is no longer needed is deleted or anonymised.
To request access, correction, an export or account deletion, email support@taketrack.app from the address associated with your account. We may need to verify your identity before acting. There is currently no self-service full-account deletion or data-export tool; emailing a request does not itself delete the account. Request scope, available options and any applicable retention requirements need to be confirmed with support. Do not include prescriptions or other unnecessary health details in your request.
8. Security, children and updates.
We use appropriate technical and organisational measures, including encryption in transit, account-scoped access controls and consent checks, to protect records, but no online service guarantees absolute security. TakeTrack does not claim HIPAA certification or clinical approval. Dependent features are for use by authorized parents or guardians, not independent accounts for children under 14. Local age and privacy requirements may impose additional restrictions.
We may update this policy as the service changes. The date above identifies this version; material changes affecting your choices will be described in the updated notice. For concerns about a child’s information or any privacy issue, contact customer support.