last updated: 25 october 2026
trackerhead is a personal project studio: your projects, tasks, notes, references, habit trackers, and files live inside the app and sync across your devices when you use the Cloud plan. this policy explains what we collect, why, who touches it, and the control you have — wherever in the world you use it.
trackerhead is an independent app built by a solo developer (the "data controller" under EU/UK law). questions, requests, or complaints: support@trackerhead.app, or message @trackerhead.app on threads / instagram.
to create an account you give us an email address, a password, and optionally a display name. sign-in is handled by a third-party authentication provider; your password goes straight to them and is stored hashed — the app itself never sees, stores, or logs your password.
everything you put into trackerhead: project names, tasks, notes, habit trackers and their day-by-day history, moods, master documents, and saved links, images, audio, video, and files. these are free-form fields — whatever you type is stored as you wrote it.
because these fields are free-form, they may end up containing personal information about other people (e.g. a freelancer's clients, a coach's notes). if you store other people's data in trackerhead, you are responsible for having a basis to do so; for that content you are the controller and we act on your behalf.
your files are kept on secure cloud servers in space tied to your account, and are readable only by you.
when you save a link, its web address is sent off your device to build a preview:
preview thumbnail images are shared across users: we keep one copy per web address, so people who save the same public link reuse the same thumbnail. these are previews of public web pages, so treat them as non-private. the link and preview text inside your own project stay private to you.
to keep out bots and abuse, the app runs automated checks that confirm a request comes from the genuine app or a real browser. like any internet service, our providers also process your IP address and basic technical data (device/browser type, timestamps) to deliver and secure the service.
if the app crashes or the cloud returns an error, the app sends us a technical crash report: where and what broke, the device model or browser, and the system and app versions. we use these reports to find and fix bugs, not for advertising.
the app keeps your settings and a cached copy of your content on the device — including your display name and avatar (these currently stay on-device and are not uploaded), your theme and language preference, and your login session. this makes the app fast and available offline.
on the web we use only essential cookies and local storage — to keep you signed in and remember preferences like theme and language. our anti-bot protection may also set a cookie. we don't use advertising cookies or third-party ad trackers.
on iPhone, paid plans are bought through Apple's App Store. Apple processes the payment under its own privacy policy — we never receive or store your card number. from Apple we receive only the purchase identifiers needed to activate your plan on your account and keep it in sync (renewal, cancellation, refund).
we do not use your data for automated decisions that produce legal effects, and we don't profile you for advertising.
we don't sell your data and we don't share it for anyone else's marketing. we rely on a small set of infrastructure providers that process data on our behalf, by role:
in addition, when you save a link, the site it points to may receive that link's address in order to return a preview. we may also disclose data if strictly required by law, or as part of a business transfer (with notice to you).
trackerhead is available worldwide, and our providers operate globally — so your data may be processed in the United States and other countries whose laws differ from yours. where we move personal data out of the EEA/UK, we rely on lawful transfer mechanisms such as the European Commission's Standard Contractual Clauses and provider adequacy commitments.
we keep your account and content for as long as your account exists, so the app works across your devices. when you ask us to delete your account, we delete or anonymize your personal data within 30 days — except records we're legally required to keep (for example, billing and tax records held by our payment provider). backups are overwritten on a rolling basis.
wherever you live, you can ask us to:
EU/UK (GDPR): you also have the right to lodge a complaint with your local data protection authority.
California (CCPA/CPRA): you have the right to know, delete, and correct your data, and to not be discriminated against for exercising these rights. we do not sell or "share" your personal information as those terms are defined by California law.
to exercise any right, email support@trackerhead.app. we'll verify it's you and respond within 30 days. it's free.
note on deleting from inside the app: the in-app "delete account" control currently clears trackerhead from your device. to have your account and all server-side data permanently erased, email us and we'll complete it within 30 days.
your connection is encrypted in transit. your content is tied to your account and enforced by server-side rules, so no other user can read it. passwords are hashed by our authentication provider, and your login session is held in your device's secure storage. no system is perfectly secure, but we work to protect your data and will notify you and the relevant authority if a breach legally requires it.
trackerhead isn't directed to children. you must be at least 16 (or the minimum age of digital consent in your country) to use it. if you believe a child has given us data, contact us and we'll delete it.
if this policy changes, the date at the top changes with it. for significant changes we'll give notice in the app or by email.
support@trackerhead.app · threads · instagram
← back