Privacy Policy

1. Who is responsible

EMKE Seismic Isolation LLC, Reno, Nevada, United States, is the data controller for the App and the Website. Contact: info@emke.app.

2. Information we collect in the App

Information you give us

• Your name (optional) and email address, and a password that Firebase stores as a hash we cannot read
• Body weight entries, workouts, sets, reps and personal records, notes and daily goals
• Progress photos. By default they stay on your device only; with Cloud Backup they are uploaded to Firebase Storage
• Messages or feedback you send to us

Information from Apple or Google sign in

• The account identifier, name and email that Apple or Google return when you choose to sign in with them. Apple may give us a private relay address instead of your real email

Information collected automatically

• Your Firebase user ID, which also serves as your Mixpanel and RevenueCat identifier
• Device model, operating system version, app version, language and country or region taken from your device settings. We do not collect GPS location
• Which features you use and when (for example "workout completed" or "entry created"), sent to Mixpanel unless you turn usage data sharing off
• Subscription status, trial start and purchase events from RevenueCat, Apple and Google. We never receive card numbers or billing addresses

We do not collect precise location, contacts, browsing history, advertising identifiers or crash reports. The App contains no crash reporting or advertising software.

3. How we use your information

• To provide the App: store your entries, show charts, calculate your progress and fitness score
• To sync your data across devices when you turn on Cloud Backup
• To manage your subscription and restore purchases
• To answer your support requests
• To understand which features are used so we can improve the App (usage analytics, optional)
• To keep the service secure and prevent abuse
• To meet legal obligations

4. Service providers and where your data is stored

We run the App and the Website on the services below. Each one processes data only on our instructions, under a data processing agreement, and only to provide its service to us.

• Google Firebase (Authentication, Firestore, Cloud Storage, Cloud Functions), United States. Accounts and sign in, your cloud data, progress photos when Cloud Backup is on, and the automatic cleanup that runs when you delete your account.
• Mixpanel, United States. Usage analytics: which features are used and when, tied to a pseudonymous user ID. Your name, email, weight and photos are never sent. You can turn this off in the App.
• RevenueCat, United States. Subscription status for Trackr Pro, keyed by your user ID. Payment itself is handled by Apple or Google; we never see card numbers.
• Apple (Sign in with Apple, App Store, Apple Health on your device), United States. Optional sign in, purchases and refunds. Apple Health data stays on your device unless you turn sync on, and we never receive Health data from Apple.
• Google (Google sign in, Google Play), United States. Optional sign in, purchases and refunds on Android.
• Vercel, United States. Hosting for the Website and the serverless endpoint behind the contact form.
• Google Analytics 4, United States. Website traffic statistics. Loads only after you accept cookies if you are in the EEA, the UK, Switzerland or Turkey.
• Cloudflare Turnstile, United States. Bot check on the contact form. Sees connection data such as your IP address to decide whether the sender is a person.
• Resend, United States. Delivers contact form messages to our inbox at info@emke.app.

All of your data is stored in the United States. If you use Trackr or the Website from outside the United States, including the European Union, the United Kingdom or Turkey, your data is transferred to and stored in the United States. For users in the EEA and the UK the transfer relies on the providers' standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. For users in Turkey the transfer relies on your explicit consent and on the fact that it is necessary to perform the service you asked for; the details are in the Turkish KVKK text.

Beyond these providers we disclose data only when the law requires it (for example a valid subpoena), to protect our rights and the safety of users, or as part of a merger or sale of the business, in which case you will be told before your data changes hands.

5. Photo storage

• By default progress photos are stored on your device only and never leave it
• With Cloud Backup (Trackr Pro) photos are uploaded to Firebase Storage in the United States, encrypted in transit and at rest, and readable only by your signed in account
• Photos are never shared with other users, used for marketing, or used to train any model
• You can delete any photo in the App at any time. Deleting your account deletes every photo in the cloud

6. Your analytics choices

• In the App: Profile, then "Share anonymous usage data". It is on by default. Turning it off stops Mixpanel immediately, including on the current session
• On the Website: the cookie banner. In the EEA, the UK, Switzerland and Turkey analytics cookies stay off until you accept. Everywhere else they are on by default and the banner lets you decline. Your choice is stored in your browser and can be changed by clearing site data

7. Security

• All connections between the App, the Website and our providers use TLS
• Data in Firebase is encrypted at rest by Google Cloud
• Firestore and Storage rules allow each account to read and write only its own data
• Payment details are handled by Apple and Google and never reach us
• Access to production data is limited to the owner of the company

8. How long we keep data

• Account data (profile, entries, workouts, photos in the cloud) is kept while your account exists. When you delete your account a Cloud Function removes your Firebase account, your user record, workouts, backups and photos right away; residual copies in provider backups are gone within 30 days
• Cloud Backup data is deleted 3 days after a subscription or trial ends without renewal. Your local data on the device is not affected
• Usage analytics events in Mixpanel are kept for up to 5 years, which is the fixed retention period of the Mixpanel plan we use. You can ask us to delete your analytics data at any time and we will file the deletion request with Mixpanel within 30 days
• Subscription records in RevenueCat are deleted with your account. Apple and Google keep their own purchase records under their own policies
• Contact form messages are kept in our mailbox for 12 months, then deleted
• Website analytics in Google Analytics is kept for up to 14 months

9. Your rights

Wherever you live, you can:

• Access and receive a copy of your personal data
• Correct inaccurate data, in the App or by writing to us
• Delete your account and all data in the App: Profile, then Delete Account. For security you may be asked to sign in again first. If you signed in with Apple, we also revoke your Sign in with Apple tokens
• Export your entries in CSV from the App, or ask us for a copy
• Object to or restrict processing based on our legitimate interest, and withdraw consent at any time (usage analytics, cookies, Cloud Backup, Apple Health sync)
• Complain to your data protection authority if you are in the EEA or the UK, or to the Personal Data Protection Authority (KVKK) if you are in Turkey

Write to info@emke.app. We answer within 30 days and may ask you to confirm the email on your account before acting. We do not sell personal information, so there is nothing to opt out of under US state privacy laws.

10. Children

Trackr is not intended for children under 13 (or under 16 where that is the age of digital consent). We do not knowingly collect personal information from children. If we learn that we have, we delete it promptly.

11. Apple Health

If you turn on Apple Health sync, the App writes your weight entries and completed workouts into Apple Health on your device. The App does not read Health data back, and nothing from Apple Health is sent to our servers. Apple's privacy policy governs how Health data is stored on your device and in iCloud.

12. The Website (emke.app)

• Cookies. Google Analytics 4 sets the _ga and _ga_* cookies to count visits and pages. Your cookie choice is stored in your browser under the key cookie_consent and nowhere else. The Website sets no advertising cookies
• Consent. Google Consent Mode is set to "denied" by default for visitors in the EEA, the UK, Switzerland and Turkey, so Google Analytics receives nothing until you accept
• Contact form. When you send the form, your name, email address and message, together with technical anti-spam signals (time spent on the page, a Cloudflare Turnstile token and your IP address), go through our endpoint on Vercel to Resend, which delivers them to info@emke.app. We use them only to reply to you. Messages are kept for 12 months
• Server logs. Vercel keeps short lived request logs (IP address, user agent, URL) for operating and securing the service

13. Changes to this policy

When we change this policy in a meaningful way we update the effective date above and tell you in the App or by email. Continued use after the change means you accept the updated policy.

14. Contact

• Email: info@emke.app
• Phone: +1 (775) 770-0677
• Post: EMKE Seismic Isolation LLC, Reno, Nevada, United States