Privacy policy

Information used by Tracked

Tracked processes your sign-in information and the accounts, transactions, budgets, tasks, notes, links, and preferences you enter. Account data and planner settings are stored by the app’s cloud service. Browser storage is also used for sessions, preferences, and recovery of unsaved work. Data you share through household features is available to the people you choose according to the app’s sharing permissions.

Google data and permissions

• Calendar list access lets you choose and display your calendars.
• Calendar event access lets you view event details, create scheduled tasks, and edit or delete events on calendars you can modify. Event details can include titles, descriptions, locations, times, recurrence, and guest information.
• Drive metadata access is used to retrieve names of Google Docs and Sheets linked to tasks. It does not permit reading file contents.
• Per-file Drive access is requested for creating and exporting task documents to Google Docs and Sheets.

Google access tokens are held in browser memory for the active connection. When persistent Google connection is enabled, Google sign-in provides a refresh credential through the authentication session. Tracked sends that credential to its Cloudflare Pages Function and retains an encrypted copy in a secure, HttpOnly browser cookie for up to 180 days, renewed when used. The server uses it to renew Google access for your signed-in account. Tracked does not store your Google password. Linked task records, Google event identifiers, and task scheduling information may be saved with planner settings. Google calendar events are loaded into the browser for display and editing.

How information is used and shared

Information is used to provide the features you request, save your work, synchronize your tasks and events, and respond to support requests. Google event changes are sent to Google. If you choose to send updates to guests, Google may notify those guests. Exported documents are stored in your Google account.

Infrastructure providers process information to operate the service: Cloudflare Pages hosts the website, Supabase provides account and data services, and Google provides connected calendar and file features. Location text entered for address suggestions is sent to Photon (OpenStreetMap search). Opening external links or YouTube previews also connects your browser to the relevant provider.

Tracked does not sell Google user data, use it for advertising, or use it to train generalized AI models. Tracked’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Retention, deletion, and disconnecting

Saved data is retained while needed to provide your account and features. Archived items remain available for restoration and are not permanently deleted. To request deletion of stored account or planner data, email the support address from your account email. We will verify the request and explain its scope, including any retained backup copies or legal obligations.

Disconnecting Google ends the app’s current Google session and, when persistent connection is enabled, removes its connection cookie from this browser; it does not delete your existing events, exported files, or saved tasks. Revoke access at Google Account connections. You can delete Google events and exported files in Google. Clearing this site’s browser data removes local copies but does not delete cloud data.

Security and your choices

The service uses HTTPS and account access controls. No internet service can guarantee absolute security. You can use the planner without connecting Google and can choose which calendars to display. Contact us to request access, correction, or deletion of your information.

Changes

This page will be updated when the app’s data practices change, with a revised effective date.