Privacy Policy

Summary

Tracker requires a free account, handled by Clerk. We collect your email address, name (if provided), and authentication metadata. Your work hours, breaks, job profiles, projects, payments, and settings are stored on your device. If you turn on cloud sync, an encrypted copy of that data is mirrored to our sync server so you can use the app on more than one device. For free users, Google AdMob shows ads and may collect an advertising identifier. We do not sell your data and we do not build advertising profiles ourselves. Details below.

Account (Required)

Tracker requires a free account. We use Clerk (clerk.com) to handle authentication. When you create an account, Clerk stores your email address, name (if provided), profile picture (if provided), password (hashed) or sign-in factor, and authentication metadata on its own infrastructure. If you sign in with Apple or Google, your provider tells Clerk a stable user identifier and basic profile fields.

You can delete your account at any time from the in-app profile screen. Deleting your account removes your authentication record from Clerk and any cloud-sync data we hold.

Data Stored on Your Device

All of the following is stored locally on your device:

• Work hours, breaks, sessions, tags, and descriptions
• Projects, tasks, payments, and client details
• Job profiles, hourly rates, and salary settings
• App preferences (theme, language, notification settings)
• A randomly-generated anonymous device identifier
• Location data for geofenced auto clock-in/out, if you enable it

You can view, export, or permanently erase this data at any time from Settings → Data Management. Uninstalling the app deletes all local data.

Device Backup (Optional)

If you have enabled your device's native backup service, your Tracker data may be included in that backup. This is controlled entirely by you and your device:

• iOS: iCloud Device Backup (managed in Settings → Apple ID → iCloud → iCloud Backup)
• Android: Auto Backup to Google Drive (managed in Settings → Google → Backup)

These backups are encrypted by Apple or Google under their own terms. We have no access to them.

Cloud Sync (Optional)

Cloud sync is off by default. You opt in by turning sync on in Settings → Cloud Sync.

When you enable sync:

• Encryption: Before any work-hour, project, payment, or setting data leaves your device, we encrypt it with a key derived from a passphrase that only you know. We never see your passphrase and we cannot decrypt your data.
• Sync server: The encrypted blobs are sent to our sync service at sync.trackerapp.me (a Cloudflare Worker we operate). The server only sees ciphertext, your account ID from Clerk, and a per-device install ID used to ship updates back to your other signed-in devices. A long-lived WebSocket connection is used to push updates in real time.
• Deleting your data: From Settings → Cloud Sync you can erase the cloud copy at any time, which removes the encrypted blobs from our server. Signing out stops sync but does not delete the cloud copy. Deleting your account also removes all cloud data.

Information That Does Leave Your Device

Two streams of data may leave your device:

• Cloud sync (only if you enable it): See the previous section.
• Advertising (free tier only): Google AdMob serves banner, interstitial, and rewarded ads. On iOS, you will see Apple's App Tracking Transparency prompt before any advertising identifier is shared with AdMob; declining the prompt means AdMob receives only non-personalized signals. Standard technical signals (rough location from IP, device model, language, screen size, ad performance metrics) are always sent so the SDK can serve and measure ads. Pro users do not see ads and no AdMob data is collected from them.

How We Use Information

We use the sync server only to deliver your encrypted data back to your own signed-in devices. We use Clerk only to authenticate you. AdMob uses its signals to deliver and measure ads. We do not sell your data and we do not build advertising profiles ourselves.

Third-Party Services

The following third parties may process data as described above. Each has its own privacy policy:

• Clerk: authentication, account management, password reset (required to use Tracker)
• Cloudflare: hosting our sync service (sees only encrypted blobs and metadata) and this marketing website
• Google AdMob: advertising for free users
• Apple App Store / Google Play: in-app purchases for Tracker Pro
• RevenueCat: entitlement management for Tracker Pro (sees an anonymous customer ID, store receipts, no personal data)

Your Rights

You have full direct control over your data:

• Export: Settings → Data Management → Export (JSON or CSV)
• Delete locally: Settings → Data Management → Erase All Data, or uninstall the app
• Delete from the cloud: Settings → Cloud Sync → Erase cloud copy, or delete your account
• Opt out of advertising: subscribe to Tracker Pro
• Opt out of personalized ads: decline the App Tracking Transparency prompt on iOS, or reset/disable your advertising identifier in device settings

Where applicable laws (including GDPR and CCPA) grant you rights of access, correction, deletion, or portability, those rights are satisfied directly through the controls above. For requests we cannot fulfill in-app — such as exercising rights against Clerk's account data — contact [email protected] and we will help.

Children's Privacy

Tracker is not directed to children under 13 and we do not knowingly process data from children under 13. If you believe a child has used the app, uninstalling the app erases all related data immediately.

Changes to This Policy

If we materially change what data leaves your device or which third parties we use, we will update this policy and revise the "Last updated" date above. Continued use after an update constitutes acceptance of the revised policy.

Contact

Questions or requests regarding this policy: [email protected]