Privacy policy
OnTrack is a journal, goal and gratitude app for iPhone and iPad, made by Holly Allison ("we", "us"), based in the United Kingdom. We are the controller of your personal data under UK GDPR. This policy explains what we collect, why, who helps us process it, and the choices you have. Contact: hello@ontrackgoals.com.
In short: your journal is yours. We don't show ads, we don't use tracking or analytics tools, and we don't sell your data. The AI coach only sees what it needs to reply, never your photos.
What we collect
- Account details. Your email address, or the details Sign in with Apple shares with us (which can be a private relay address). We use them to sign you in and to contact you about your account.
- What you write and add. Gratitude entries, the photo you choose for a day or as a goal cover, goals (title, how you'll measure it, why it matters, target date, notes), milestones, steps and reflections. These are stored on your device and synced to our servers so they're on all your devices and backed up. Photos are stored as compressed copies in private storage only you can access.
- Coach (members). The messages you send the coach, its replies, short notes it keeps about you to be more helpful (you can see and delete these in the app), your weekly progress summaries, and a monthly count of coach messages for the fair-use allowance.
- Community (members). Your display name, optional short bio, the groups you join, what you post or reply (including any goal or milestone you choose to share), cheers, reports and blocks. Posts and replies are visible to other members of that group.
- Settings and device information. Your preferences (coach tone, reflection day and time, reminder choices), your time zone so reminders arrive at the right local time, a push-notification token if you allow notifications, and a record of the notifications we've sent so we don't repeat them.
- Purchases. Apple takes payment. We receive confirmation of your subscription and its status from Apple, never your card or payment details.
We don't use advertising, tracking or analytics SDKs, and we don't sell or share your data for advertising.
How we use it, and our lawful basis
- To run the app, sign you in and sync your journal across your devices (contract).
- To provide the coach, check-ins, weekly summaries and Community if you're a member (contract).
- To keep Community safe: posts and replies are screened automatically before they appear, and reports are reviewed by a person (legitimate interests).
- To send the notifications you've chosen (consent; switch them off any time in Settings).
- To keep records of purchases where the law requires it (legal obligation).
Some of what you write may reveal things about your health or wellbeing. We process it only to provide the features you use, at your request.
Who processes your data
We use these processors. Each acts on our instructions under a data processing agreement and may not use your data for its own purposes.
| Processor | What it does | What it receives | Where |
|---|---|---|---|
| Supabase | Database, file storage, sign-in and the server functions that run the app. | Everything that syncs: your account, journal, photos, goals, coach history and Community content. | London, UK |
| Anthropic | Its Claude AI model writes coach replies, check-in messages and weekly summaries for members, and screens Community posts and replies. | Only what each request needs. For the coach: your message, recent conversation, your display name, your active goals with their milestones and steps, gratitude from the last 14 days, your two latest reflections and the coach's notes about you. For check-ins and summaries: goal and milestone titles and dates. For screening: the text being posted. Never photos. | United States |
| Resend | Sends sign-in code emails. | Your email address and the one-time code. | United States |
| Apple | Sign in with Apple, in-app purchases and subscription status, and delivering push notifications. | Your Apple sign-in token, subscription records, and the text of notifications sent to your device. | United States and worldwide |
Under Anthropic's commercial terms, it doesn't use what we send to train its models. Where a processor handles data outside the UK, the transfer is protected by the UK International Data Transfer Addendum to the EU standard contractual clauses, or by the UK–US data bridge where the provider is certified.
How long we keep it
- As long as you have an account.
- Things you delete go to Recently deleted for 30 days, then are removed permanently from our servers, including any photo files.
- When you delete your account (Settings, then Your data, then Delete account), your account and everything linked to it, including Community posts, replies and photos, is deleted from our servers straight away, and we ask Apple to revoke Sign in with Apple. Copies in our provider's encrypted backups are overwritten within a few weeks.
- Data stored only on your device stays there until you delete the app.
Your rights
You can access, export, correct or delete your data. Export everything from Settings, then Your data. For anything else, including asking what we hold or objecting to how we use it, email hello@ontrackgoals.com and we'll reply within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
Security
Data travels over encrypted connections. On our servers, row-level security means each account can read only its own data, and photos sit in private storage. Secret keys for our processors are kept on the server, never in the app. You can lock the app with Face ID.
Age
OnTrack is for people aged 16 and over. If you believe someone younger has an account, email us and we'll delete it.
Changes
If we change this policy in a way that matters, we'll tell you in the app and update the date at the top.