Privacy Policy

1 Data Controller

The data controller responsible for Tracta is:

Jakub Osyraul
Rolnicza 242
70-700 Sadów
Poland

Email: support@tracta.cloud

Tracta is currently provided by the controller as a natural person conducting unregistered activity under applicable Polish law.

2 Our Privacy Approach

Tracta is designed to process only the information reasonably necessary to provide the features you choose to use and to operate advertising where enabled.

We do not sell your personal data. Neither Tracta nor the Service Provider uses the content of your tasks, files or Workspaces, your location information, or your profile information to create advertising profiles or to personalize the advertisements shown in Tracta.

We do not intentionally collect additional personal information for marketing purposes beyond what is necessary to operate Tracta, provide support, comply with legal obligations, and operate advertising through Google AdMob where applicable.

3 Information Processed by Tracta

Depending on the features you use, Tracta may process the following information:

• Account information: your email address, authentication identifier and information necessary to maintain your account.
• Application content: tasks, items, workspace information, reminders, descriptions and other information you choose to create or store.
• Images and files: only when you choose to upload or create them using Tracta.
• Location information: only when you use location-based features and grant the required device permissions.
• Subscription information: subscription status, entitlement and related identifiers provided by the relevant application store or subscription service.
• Support information: information you choose to provide when contacting us.

You are not required to provide your real first and last name in your ordinary Tracta profile unless a specific feature or legal requirement makes this necessary.

4 Why We Process This Information

We process personal data only for purposes connected with operating Tracta, including to:

• create and maintain your account;
• authenticate you and synchronize your data;
• provide tasks, items, workspaces, files and other app features;
• provide location-based features when you choose to use them;
• provide reminders and notifications when enabled;
• manage subscription access and premium entitlements;
• respond to support requests;
• protect Tracta against abuse, fraud and security threats;
• comply with legal, tax and accounting obligations where applicable;
• display and measure advertising through Google AdMob where enabled.

5 Legal Bases for Processing

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract: processing necessary to create and maintain your account and provide the Tracta features you request.
• Legal obligation: processing required by applicable tax, accounting or other laws.
• Legitimate interests: limited processing necessary to secure the service, prevent abuse, investigate technical problems and defend legal claims, provided those interests are not overridden by your rights.
• Consent: where consent is required, in particular for certain advertising, personalization or device-storage activities.

Device permissions such as location, camera, photos or notifications are requested only when needed for the relevant feature. You can change these permissions in your device settings.

6 Google AdMob Advertising

Tracta may display advertisements using Google AdMob and the Google Mobile Ads SDK.

When advertisements are displayed, the Google Mobile Ads SDK and participating advertising partners may process information such as:

• IP address, which may be used to estimate general device location;
• device information and identifiers, which may include a resettable mobile advertising identifier;
• advertising data, such as advertisements displayed or delivered to the device;
• interaction information, such as interactions with ads or app events;
• diagnostic information and crash logs;
• performance information, such as app launch or responsiveness data.

Google and participating advertising partners may use this information to deliver and measure advertisements, limit how often an advertisement is shown, prevent fraud and abuse, produce advertising reports and, where permitted and where any required consent has been given, personalize advertisements.

Personalized advertisements may be selected using information about interests or previous activity collected by Google or its advertising partners. Non-personalized advertisements are not selected using past behavior, but they may use contextual information, general location and device or advertising identifiers for purposes such as frequency capping, aggregated reporting and fraud prevention.

We do not provide the content of your tasks, files or Workspaces, your Tracta location data, or your Tracta profile information to Google AdMob for creating advertising profiles or personalizing advertisements. We do not receive your complete advertising profile from Google.

For more information about Google's processing, see How Google uses information from sites or apps that use its services and the Google Privacy Policy.

7 Advertising Consent in Europe

Where required for users in the European Economic Area (EEA), the United Kingdom or Switzerland, Tracta will present a consent or privacy message before using device storage or processing personal data for personalized advertising. Where required by Google for advertising in these regions, the message will be provided through a Google-certified consent management platform.

Depending on your choices and the options available in your region, advertising may be personalized, non-personalized or otherwise limited.

Where consent is required, you can choose whether to give it. If you give consent, you can later change your choices or withdraw consent at any time by reopening the advertising privacy options made available in the Application. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn. You can also reset or limit the use of your device's advertising identifier through the privacy settings provided by your device or operating system.

8 Shared Workspaces

Tracta may allow users to collaborate within shared Workspaces. Information you intentionally add to a shared Workspace may be visible to other authorized members of that Workspace.

Please avoid adding personal information about yourself or other people unless it is reasonably necessary for your use of the Workspace and you are entitled to share it.

9 Location, Camera, Photos and Notifications

Tracta may request device permissions only for features you choose to use:

• Location: used for location-based features when enabled.
• Camera: used when you choose to capture an image.
• Photos and files: used when you choose to upload or access supported content.
• Notifications: used for reminders and other notifications when permission is granted.

These permissions can be disabled in your device settings, although doing so may disable the corresponding Tracta feature.

10 Subscriptions and Payments

Payments for mobile subscriptions may be processed by the platform through which you purchase the subscription, such as Google Play or the Apple App Store.

Tracta may use RevenueCat or a similar service to determine subscription status and access to premium functionality.

We do not directly collect or store your complete payment card details when payment is handled by an external platform.

If a payment or invoice is handled directly by us, we process only the information reasonably required to complete the transaction and comply with accounting and tax obligations.

11 Data Storage and Service Providers

Tracta uses external infrastructure providers to operate the Application, which may include Firebase, Google Cloud, Google, RevenueCat, Apple and other providers necessary for the features you choose to use.

These providers may process information on our behalf or as independent controllers depending on the service and context.

Tracta uses Firebase Crashlytics, a service operated by Google LLC, to identify and diagnose application crashes and stability problems. Crashlytics automatically collects a diagnostic report when the Application crashes. Tracta also submits certain unhandled application-level exceptions as non-fatal diagnostic reports.

These reports may include crash stack traces, exception names and messages, relevant application state, the date and time of an event, application identifier and version, operating-system and device metadata, randomly generated installation and session identifiers, and information about whether the Application was running in the foreground or background. Tracta does not intentionally attach account email addresses, authentication tokens, Workspace content or file content to Crashlytics reports, and application-level error messages are filtered before being submitted.

More information about Firebase data processing and retention is available in Firebase Privacy and Security.

On Android, Tracta uses the Google Play In-App Updates service to determine whether a newer application version is available and to start an update selected by the User or required for continued use. Google Play may process device metadata, the installed application version, and information about installed application modules and asset packs for this purpose. This data is encrypted in transit and retained by Google Play for a fixed period under Google's applicable terms and privacy practices.

We do not share personal data with third parties merely for our own independent marketing purposes.

12 International Data Transfers

Some service providers used by Tracta may process data outside the European Economic Area.

Where required by applicable data protection law, such transfers are made using a legally recognized transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another permitted safeguard implemented by the relevant provider.

13 Data Retention

We aim to retain personal data only for as long as reasonably necessary for the purpose for which it is processed.

• Account information: generally retained while your account remains active and removed as part of the account deletion process.
• Application content: generally retained until you delete it, the relevant Workspace is deleted, or your account and owned resources are deleted.
• Support communications: retained only as long as reasonably necessary to handle the request and related legal or security matters.
• Accounting and transaction data: retained for the period required by applicable law.
• Crashlytics diagnostic data: Firebase states that crash stack traces and associated identifiers are retained for 90 days before Google begins removing them from its live and backup systems.
• Backups: may remain temporarily until normal backup rotation or deletion by the relevant infrastructure provider.

Data that has been irreversibly anonymized and can no longer be associated with you may be retained without being treated as personal data.

14 Backups and Technical Limitations

Tracta relies on cloud infrastructure and backup, replication and recovery mechanisms provided by its service providers where such mechanisms are available and configured.

Backup systems may not cover all data or all versions of data and may be subject to technical limitations and retention periods.

We take reasonable steps to protect information but cannot guarantee that every deleted or lost file, task, item, image or other piece of content can always be recovered.

15 Account and Data Deletion

You can request deletion of your Tracta account and associated personal data:

• In the Application using the account deletion option available in account settings.
• By email if you cannot access the Application. Instructions are available at tracta.cloud/delete-account .

Where reasonably necessary to protect against unauthorized account deletion, we may request verification before processing the request.

When account deletion is completed, we remove personal data associated with the account from Tracta's active systems, including the authentication account, profile information and User-owned resources, subject to legal retention obligations.

Personal identifiers associated with you in shared data belonging to other Users may be removed or anonymized where necessary to preserve the integrity of shared information.

We do not intentionally retain your email address as a visible identifier inside Tracta after account deletion unless retention is required by law.

16 Your Privacy Rights

Depending on applicable law, you may have the right to:

• access your personal data;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of processing where applicable;
• object to processing based on legitimate interests where applicable;
• withdraw consent where processing is based on consent;
• request data portability where applicable;
• obtain information about how your data is processed.

To exercise these rights, contact support@tracta.cloud.

You also have the right to lodge a complaint with a competent data protection supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).

17 Children's Privacy

Tracta is not intended for children under the age of 16.

We do not knowingly collect personal data from children below the applicable minimum age without an appropriate legal basis.

If you believe that a child has provided personal data to Tracta in violation of applicable law, please contact us.

18 Changes to This Privacy Policy

We may update this Privacy Policy when Tracta, our service providers, advertising configuration or legal requirements change.

The current version will be published on this page with an updated effective date where appropriate.

19 Contact

If you have questions about this Privacy Policy, your personal data, account deletion or your privacy rights, contact:

Jakub Osyraul
Rolnicza 242
70-700 Sadów
Poland

Email: support@tracta.cloud