Privacy Policy

The short version

Your practice data stays on your device. If you turn on the optional device sync or auto-backup, an end-to-end encrypted copy is stored on our server - encrypted with a key that never leaves your devices, so we cannot read it. No accounts, no analytics, no tracking. The two features where you deliberately send something to someone else - sharing a goal by link and Shared Goals groups - are described below.

Data collection

We do not collect any personal information. No account creation is required. No email, no name, no location, no usage analytics, no device identifiers. We don't know who you are and we don't want to. If you enable device sync or auto-backup, our server stores a randomly generated sync identifier and your encrypted data. A Shared Goals group stores a randomly generated group id and whatever display name you type for yourself in that group. None of this is linked to your identity in any way.

Data storage

All your practice data - goals, tasks, logs, and settings - is stored locally on your device. The app works entirely offline. Unless you use one of the optional features described below - device sync, auto-backup, sharing a goal by link, or Shared Goals groups - no copy of your data exists anywhere else. Synced and backed-up data is encrypted with a key we never receive, so we have no way to read it.

Sharing a goal by link

When you share a goal via link or QR code, a copy of the goal - its name, its task names and descriptions, and their configuration, but none of your logs or progress - is stored on our server so that whoever you send the link to can import it. This copy is not encrypted: we can read it, and so can anyone who has the link. That is what makes the link work. No information about you is attached to it.

If you set an expiry when sharing, the link stops working after it, and if you set a password the copy can only be imported with that password. Note that neither deletes the copy: expired shares stay in our database, and deleted data can persist in our encrypted off-site backups for up to about 60 days. Write to us at the address below to have a shared copy removed. Don't share a goal whose name or task names you would not want us or a recipient to see.

Shared Goals (groups)

A Shared Goals group lets several people work on the same goal and see each other's daily check-ins. It needs no account. The group's own data - the group name, each member's display name and colour, everyone's check-in progress, and the shared goal's definition - is stored encrypted with a key that exists only in the invitation link and on the members' devices, so those records are not readable by us.

We do see, and cannot avoid seeing, information about the group rather than its contents: how many members it has, when it was created, and when members last sent an update. This is normal for encrypted systems and is all our own administration tools can show.

There is an important exception we are fixing rather than defending. Creating a group used to also upload the goal's definition - the goal name, task names, descriptions and schedules - unencrypted, in the same form as the share-by-link feature above, because that was how someone read the goal before joining. App version 1.7.3 stopped uploading it. The copies made by earlier versions are still on our server and we can read them; we have not deleted them, because nothing on our server distinguishes them from a goal a user chose to share by link. This can also apply to a group that looks new: if a group was created before 1.7.3 and later reset to a fresh one, the original unencrypted copy still exists. So please do not read the paragraph above as a promise about a specific group's history - write to us if you want a copy removed, and we will remove it.

Invitation links carry the group's encryption key in the part of the URL after the #, which browsers never send to a server. Treat an invitation link as a password: anyone who has it can read the group. A group creator can reset the invitation link, or remove and ban members, at any time.

Device sync

Sync between your own devices is optional and off by default. When you turn it on, your practice data is encrypted on your device with AES-256 before it is uploaded. The encryption key is derived from a secret that is exchanged only directly between your devices (via QR code or pairing code) and is never sent to us - so we store your data but cannot decrypt or read it. The synced copy is kept until you tap "Delete Synced Data" in Settings → Device Sync, and it is automatically removed from our server after about 6 months of inactivity. Unpairing a device removes the key from that device.

Automatic backups

Auto-backup is optional and off by default. When you turn it on, the app uploads backups of your practice data to our server, encrypted on your device with the same end-to-end encryption and the same key as device sync - so we cannot read your backups either. The server keeps only your three most recent backup versions; older ones are deleted automatically. You can delete individual backups in Settings → Auto-Backup at any time, and backups are removed from our server together with synced data after about 6 months of inactivity. Your recovery key is the only way to restore a backup on a new device - it is never sent to us, so keep it safe.

Third-party services

The app uses Apple's App Store and Google Play for purchases. These platforms may collect their own data according to their respective privacy policies. We do not receive or store any payment information.

Tracking & analytics

We do not use any analytics, tracking, or advertising frameworks in the app. No cookies, no fingerprinting, no telemetry.

Children's privacy

We collect no personal information from anyone, and we cannot read synced or backed-up data, so there are no special concerns regarding children's privacy. The sharing features above are the one thing to be aware of: a shared goal, and a group created before app version 1.7.3, contain whatever the person typed as the goal and task names.

Changes to this policy

If this policy ever changes, we'll update this page. Given that we don't collect data, we don't expect it to change much.

Contact

Questions? Reach out at support@tapastracker.app