TrackFitTracker
English

Privacy policy

Last updated 2026-11-10

This policy explains what TrackFitTracker does with your data. It is written to match what the app really does, and we change it when the app changes.

Who is responsible

TrackFitTracker is run by Simon Schretter, Josef-Klaus-Straße 14, 9020 Klagenfurt am Wörthersee, Austria. In this policy, "we" means this publisher. You can reach us at support@trackfittracker.com.

The short version

  • The app has no ads, and we use no advertising or analytics services.
  • Your trainings, diary and profile are stored on our server, tied to your account, so they follow you across your devices. This is health and fitness data, and we treat it as private.
  • Your sessions are private to you. Your coach sees the sessions they wrote for you, as they are now, plus any session you choose to share with them.
  • Your competition results, and the bests worked out from them, show on your profile to everyone who is signed in, unless you set your profile to private. Then only you and your current coaches see them.
  • The AI features are optional. When you use them, what you write and the data needed to answer are sent to Anthropic, and voice input is sent to OpenAI.
  • You can delete your account in the app, and that deletes your data.

What we collect and why

Account
Username, email address, display name, a hash of your password (we never store the password itself), an optional short bio, and whether you use the app as an athlete, a coach or both. We use this to run your account and to let the people you train with find you.
Profile details (optional)
Date of birth, your level, the events you compete in and your season phase. Your date of birth is private to you: no other person sees it, and it is never sent to an AI provider. Only an age band is worked out from it (under 14, 14 to 17, 18 to 34, 35 and over). We use these details to tailor the Assistant's answers.
Training data
Your sessions (titles, notes and what you did: exercises, sets, reps, times, distances and weights), your diary entries (how hard it felt on a scale, your results and your notes), private notes, competitions with their results and the goals you set, presets, folders, custom exercises and, for coaches, plans and season plans. This is the core of the app.
Coaching relationships
Requests to become someone's athlete or coach, with the short message you may add, and who is linked to whom. When a coaching relationship ends, we keep a record that it existed and ended, using internal account numbers only.
Sign-in sessions
When you sign in, we store a sign-in token so that you stay signed in. It expires 30 days after you last used the app on that device.
Notifications
If you allow push notifications on your phone: a device token, the platform (Android or iPhone) and the time zone of your phone. See Notifications.
Bug reports
If you send one: the platform, the part of the app you were in, your text, and your user name and account number. We keep it so that we can fix the problem.
Technical data
Our servers receive your IP address with every request. The web server keeps access logs (IP address, time and address requested) for 14 days. The app's server also uses your IP address, briefly and in memory only, to limit how fast requests can be made, which stops abuse. The app's server also writes operating logs (errors and calls to the AI scan), which can include your account number. The desktop app checks for new versions at updates.trackfittracker.com, which sees your IP address like any web server.
On your device
The app keeps a copy of your trainings, diary and presets on your device so that it works offline, together with a queue of changes waiting to sync. That copy lives on your device, and in your phone's own backup of app data if you use one. If you uninstall the app, changes that had not synced yet are lost.

Who can see what

Other users

Anyone who is signed in can search for accounts by username or display name. They see the name, bio and role of an account, and how many coaches and athletes it has, but not who they are. Nobody sees your email address, your date of birth or your training data unless one of the rules below applies.

Your competition results

Competition results are public in the sport, and the app treats them the same way. The competitions you have a result from, and your personal and season bests worked out from them, show on your profile to everyone who is signed in. If you switch “Account Privacy” on in your profile, only you and your current coaches see them. A competition still to come, a competition without a result, your goals and the note on a competition never show on your profile.

Your coach

A coach is someone you have accepted, or who has accepted you, as your coach. They see your name and username and the events and season phase you set in your own profile, and they write sessions for you. For a session they wrote, they can see that you logged it in your diary (their calendar shows it), but not what you wrote. They can also record their own rating of your level and the events and season phase they train you for.

They do not see the sessions you wrote yourself, your private notes or your diary, and a coach cannot open your diary. The only ways anything from your diary reaches your coach's Assistant are the two choices described under Optional AI features, and your diary notes are never read.

Your coach also sees your competitions, the ones still to come included, with your results, your bests and your goals, whether your profile is private or not. They can add a competition for you and enter or correct a result. They never see the note on a competition, cannot remove a result that is there, and can delete only a competition they added themselves that has no result yet.

Either of you can end the relationship at any time. Ending it also ends everything shared between you, including every session you shared with that coach.

Sessions you choose to share

You can share a session you wrote yourself with any of your current coaches, one session and one coach at a time, up to ten coaches per session. A session a coach sent you cannot be passed on to another coach.

Two switches in your profile

Custom exercises you share

If you share a custom exercise, the people you share it with can use it, and changes you make are offered to them. If you delete your account, an exercise you shared stays available to the people who already have it, without your name.

Optional AI features

The Assistant, the Ask AI buttons and the training scan are optional. The app explains the Assistant and the Ask AI buttons and asks for your agreement before you first use them. The training scan sends a picture only when you choose to scan one. If you use them, the following is sent from our server to Anthropic PBC (anthropic.com), our AI provider, which processes it on our behalf to produce the answer:

A name or health detail that you write into a title, a note, a preset or a message is sent as written. For your own diary, the Assistant reads it only when you ask about it.

When you ask the Assistant to write or send a session, two more things are sent, as numbers only. Your competition results: your marks with their dates, your goals, and the day of your next competition and the events you are entered for, never a competition's name, place or note. And a short summary of your last four weeks: how many sessions there were, how much running and lifting they held, and the RPE you logged, never your diary notes. The Assistant uses them to work out target times and to fit the session to your recent training. Your competition results, without that summary, are also sent when the Assistant works out a time or a pace from one of your results.

When you ask the Assistant how your training has progressed, it also gets, as numbers only, your competition marks and, from your sessions and your diary entries, your weekly volume, your lifts, your best reps and your RPE, over up to 26 weeks (52 for best reps), never your diary notes.

If you are a coach

The names of your athletes are sent when you ask about them or send to them, together with their session counts and whether they share their diary. For an athlete you ask about, their events, season phase, your own rating of their level and, if the athlete allows it, their age band are sent too. If an athlete turned on "Share my diary entries with my coach", the RPE and the logged values (times, distances, reps and weights) of the sessions you sent that athlete can be used, never the athlete's diary notes.

If an athlete shares a session they wrote themselves with you, then when you ask the Assistant about it, the session (its title, notes, parts and their numbers, as the athlete wrote them) is sent, together with the RPE and what the athlete logged on it, never the diary notes. This works with the athlete's diary switch off, and it is live: what the athlete logs later is sent too, for as long as the session is shared and you are the athlete's coach. Because that can be read, a coach's Assistant can tell that the athlete logged the session. The Assistant only reads a shared session. It never changes it, deletes it or sends it on to anyone.

When you ask the Assistant to write or send a session for an athlete you name, it also gets that athlete's competition marks, goals, and the day of their next competition and the events they are entered for, as numbers, and a short summary of the last four weeks of the sessions you sent them and of the sessions they shared with you. The RPE the athlete logged is part of that summary only where the two rules above allow it, never the diary notes. When the Assistant works out a time or a pace for athletes from their results, it gets the competition results, without that summary, of each athlete the calculation is for. That can be a whole group when you ask for each athlete's own times.

When you ask the Assistant how an athlete you name has progressed, it also gets, as numbers only, that athlete's competition marks and weekly volume, lifts, best reps and RPE over up to 26 weeks (52 for best reps), from the sessions you sent them and the sessions they shared with you. Values and RPE from the sessions you sent them come only if the athlete turned on the diary switch, and from a shared session only while it is shared; never the diary notes.

When you ask the Assistant how your athletes' sessions are going this week, without naming an athlete, it also gets, as numbers only, for up to 6 of your athletes: the distance and time written in this week's sessions and their RPE of the last 28 days, from the sessions you sent them and the sessions they shared with you. The RPE of the sessions you sent comes only if the athlete turned on the diary switch, and of a shared session only while it is shared; never what they logged beyond the RPE, never the diary notes.

If you are an athlete

Your coach can use these features on the training data they have access to: the sessions they wrote for you and, only for a session you choose to share with them, that session and its RPE and what you logged on it, never your diary notes. Your other sessions are not sent. When your coach asks about you, your events, season phase and your coach's rating of your level are included too, and your age band if you switched that on.

When your coach has the Assistant write or send a session for you, it also gets your competition marks, your goals, and the day of your next competition and the events you are entered for, as numbers, and a short summary of the last four weeks of the sessions that coach wrote for you and of the sessions you shared with them. The RPE you logged is part of that summary only under the two choices described above (the diary switch, or a session you shared), never your diary notes. Sessions you wrote and did not share are not counted. Your coach's Assistant also gets your competition results, without that summary, when it works out a time or a pace for you from one of them, for you alone or as one of a group.

On a progress question from your coach about you, the Assistant also gets, as numbers only, your competition marks and your weekly volume, lifts, best reps and RPE over up to 26 weeks (52 for best reps), from the sessions that coach wrote for you (values and RPE only if you turned on the diary switch) and the sessions you shared with them; never your diary notes.

When your coach asks the Assistant how their athletes' sessions are going this week and you are one of up to 6 athletes it looks at, it also gets, as numbers only, the distance and time written in this week's sessions that coach wrote for you or that you shared with them, and your RPE of the last 28 days from those sessions (for the sessions the coach wrote, only if you turned on the diary switch); never what you logged beyond the RPE, never your diary notes.

Anthropic and your data

Anthropic does not train its models on this data. It deletes the inputs and outputs it receives from us within 30 days of receiving or generating them. Content that its systems flag for misuse can be kept longer (up to two years, and its safety classification scores up to seven years), and the law can require longer retention.

You stay in control

Nothing in your trainings, diary, presets or plans changes until you apply a step. The Assistant changes your Playbook only after you save its proposal, and nothing reaches an athlete until the coach applies that step and confirms it. We apply daily limits to AI use.

Voice input

If you use the microphone button (in the Assistant, the diary and your notes), the recording is sent from our server to OpenAI (api.openai.com), our speech-to-text provider, to be turned into text. Nothing else about you goes with it: no name, account number or other data, only a fixed hint about training vocabulary. What you say is sent as spoken.

Our server holds the recording in memory only while the request runs. We do not save it, and we do not keep the text, which goes back to your device. According to OpenAI's documentation, audio sent to its transcription service is not used to train its models and is not retained by OpenAI for abuse monitoring or application state.

What we keep from the AI features

Chats
Your latest 10 Assistant chats (what you asked, the Assistant's answers and the steps it proposed, including athlete names and, for a coach, the sessions and results athletes shared) are stored on our servers, tied to your account, so they follow you across your devices. A chat is removed 180 days after you last changed it, and you can delete chats one by one. What an athlete shared stays in the coach's chat until it is removed, even if the athlete later stops sharing, deletes the session or their account, or stops being that coach's athlete.
Playbook chat
The chat in which you build your Playbook is stored and synced in the same way. It is kept apart from the 10 chats and is not shown in the chat list. It is removed 180 days after you last changed it, when you delete your Playbook, or when you start a new interview.
Playbook
Your Playbook (notes about how you train) is stored on our servers until you delete it. We keep its last 5 versions so that you can undo a change; deleting the Playbook removes them too.
Reports
If you choose to report an answer, the question, the answer and your comment are kept for 180 days, or until you delete your account, so that we can review them. If the answer quoted a session an athlete shared with a coach, that text is kept in the report too, whatever the athlete does later.
Nothing else
Apart from these, the Assistant keeps only counts and ids of how often it is used, and the names of the tools a request called (from a fixed list, never what was sent to them or what they returned), to apply daily limits and to see where requests are slow. No message text.

Only you can open your chats, your Playbook chat and your Playbook in the app. They are never shown to a coach or an athlete. We, as the operators of the service, can technically read the database, as with any account data, and we read a report when you send one.

Notifications

If you allow notifications on your phone, the app registers your phone with Google's Firebase Cloud Messaging (on an iPhone, through Apple's push service) and our server stores the resulting device token with your account. We send a notification when a coach sends you a training or changes one, when an athlete shares a session with you as a coach, and an evening reminder to log your diary, timed to the time zone of your phone.

The texts you see contain no names, dates or training content, because they pass through Google or Apple and can show on a lock screen. The notification also carries its kind and the date of the session, so that the app can open the right screen. You can switch each kind off in the app, or switch notifications off in your phone's settings.

Email

We use your email address to send the six-digit code that confirms your account when you sign up (or when you ask for a new code), and to answer messages you send us. The app sends no marketing email. Email is sent through Google (Gmail).

Service providers

Hosting
Hetzner Online GmbH, Germany: runs our servers.
Database
MongoDB Atlas (MongoDB Limited, Ireland), in a data centre in the European Union: stores the data described above.
Email
Google (Gmail): delivers the confirmation code.
Anthropic PBC, United States
The Assistant, the Ask AI buttons and the training scan.
OpenAI, United States
Voice input.
Google (Firebase Cloud Messaging)
Delivers push notifications to Android phones, and to iPhones together with Apple's push service.
Google Play, Apple App Store and TestFlight
Distribute the app. They have their own privacy policies for what they collect when you download and update the app.

The AI providers and the other providers handle this data only to provide the feature you used, under data processing terms with us. Anthropic and OpenAI are based in the United States, so what the AI features send is processed outside the European Union.

How long we keep data

Your account and training data
Until you delete your account. A session or diary entry that you delete disappears from the app at once but stays on our server, hidden, until you delete your account. Presets, notes, competitions and folders that you delete are removed for good. If you sign up but never confirm your email address, that account stays until you ask us to delete it.
Sign-in sessions
30 days after you last used the app on that device.
Chats, the Playbook chat, the Playbook and reports
As described under What we keep from the AI features: 180 days after the last change for chats, until you delete it for the Playbook, 180 days for reports.
AI usage records
A record of each Assistant request (counts and ids, no text) is kept for 180 days. A log of AI calls (the feature, the amount of data processed and the cost, never text or pictures) is kept until you delete your account.
Notification records
Up to 30 days. The device token of your phone stays until you sign out of the app on that phone or the push service reports the phone as gone.
Bug reports
Kept after the problem is fixed too, marked as fixed. If you delete your account, your name and account number are replaced by a placeholder.
Server logs
14 days.
Backups
Our database provider keeps backups for 8 days. Data you delete leaves the backups when they expire.
At our AI providers
As described under Optional AI features and Voice input.

Deleting your data

You can delete your account in the app: Profile, edit profile, Delete User Account. It is final and takes effect at once. It deletes your trainings, diary, notes, competitions, presets, folders, plans, chats, Playbook, reports and sign-in sessions, and removes every share you made or received. A few things stay, as explained on the page Delete your account, which also tells you how to ask us to delete your account if you cannot sign in.

You can also delete less: a chat, your Playbook, a shared session, or turn a switch off, all inside the app.

Your rights

Under data protection law, such as the EU's GDPR, you may have the right to access your data, to have it corrected or deleted, to restrict or object to its use, to receive it in a common format, and to withdraw a consent at any time, for example by turning off a sharing switch, by no longer using an AI feature, or by writing to us. You can correct your profile in the app. For a copy of your data, or any other request, write to support@trackfittracker.com. We answer without undue delay, and within one month at the latest.

You also have the right to complain to a data protection authority: the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, dsb.gv.at), or the authority of the country where you live.

Legal bases

Training and diary data can say something about your health. We use it only to provide the features you use.

Age

TrackFitTracker is not meant for children under 13, and we do not knowingly collect their data. In some countries, a young person needs a parent's consent to use an online service below the national age of digital consent (for example 14 in Austria). If you believe a child under 13 has an account, write to us and we will delete it.

Security

Data travels between the app and our servers over an encrypted connection (HTTPS). Passwords are stored only as hashes. We limit how fast requests can be made, to slow down abuse. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires.

This website

This website uses no cookies, no analytics, no advertising and no content from other sites: even the fonts are served from our own server. Our web server keeps standard access logs, as described above. Links to other sites, such as Google Play, are only links: those sites have their own policies.

Changes to this policy

We update this page when the app or the law changes, and the date at the top says when. When the meaning of the AI notice in the app changes, the app shows it to you again.

Contact

Simon Schretter
Josef-Klaus-Straße 14, 9020 Klagenfurt am Wörthersee, Austria
support@trackfittracker.com