Privacy Policy

Last updated: July 3, 2026

1. Who we are

TrakMac ("the App") and trakmac.com ("the Website") are products of What We Do Collective ("we", "us", "our"). If you want to reach a human: [email protected].

This policy explains what data we collect, what we do with it, who we share it with, and what your rights are. Plain English. No loopholes.

2. What we collect

2.1 When you join the waitlist on this website

• Your email address.
• Timestamp of signup.
• A short user-agent string (browser and device family) for spam analytics.
• Which page/form you signed up from (e.g. "hero" or "final-cta").

2.2 When you use the App (after public beta launches)

• Account: email, optional display name, the auth provider you used (Apple or Google).
• Profile: height, weight, birthday, gender (optional), goals, activity level, dietary preferences, allergies, optional fitness-assessment answers, optional avatar photo.
• Food logs: meal descriptions, voice transcripts, estimated macros, timestamps, and any notes you add. Voice transcripts are processed to estimate macros and, where you have enabled it, to personalize recommendations such as recipes and content suggestions.
• Workouts: descriptions, duration, estimated calorie burn, timestamps.
• Coach conversations: the messages you send to the in-app AI Coach and its replies, with timestamps. We store these so your conversation continues across app launches and devices. To generate a response, we send your message to Anthropic along with a summary of your profile (including your age and gender, when provided), your daily targets, and your recent food and workout activity, so the Coach’s advice is personalized to you (see “Who we share data with”). Coach history is automatically deleted after 90 days and removed entirely when you delete your account.
• Device info: iOS version, device model, and app version — used only for diagnostics and support.
• Session recordings: anonymized recordings of your in-app activity (taps, scrolling, navigation) so we can find and fix usability problems. Text you type is masked. You can turn this off any time in the App under Settings → Privacy → Session recording.
• Attribution data: an install identifier from our marketing-attribution provider (AppsFlyer) and, only if you allow tracking when iOS prompts you, your device's advertising identifier (IDFA) — used solely to understand which marketing channels bring people to TrakMac. You can decline at the iOS prompt, or change it later in iOS Settings → Privacy & Security → Tracking.

2.3 What we do NOT collect

• Precise location. We never ask for it.
• Your contacts, photos, or other device content unless you explicitly share something with the app (like uploading an avatar).
• Apple Health data — unless you opt in to a future weight-sync feature, and even then only the specific fields you authorize.
• Payment card data. App Store subscriptions are handled entirely by Apple; we never see your card.
• We don't show ads in the App, never sell your data, and never use it for third-party advertising targeting. We do use AppsFlyer for marketing attribution — see Section 4 for exactly what that involves and what it does (and doesn't) receive.

3. How we use your data

• Provide the service — calculate macros, save logs, set targets.
• Send product updates (only if you opted in).
• Debug crashes, improve features, and fix bugs.
• Protect against abuse, fraud, and service disruption.
• Comply with legal obligations.

4. Who we share data with

We do not sell your data to anyone, period. We share it only with the narrow set of service providers required to run the App:

• Supabase — database and authentication hosting (North California region). Your profile and logs live here.
• Anthropic: the AI model provider that powers macro estimates and the in-app Coach. Your food descriptions, your Coach messages, and a summary of your profile (including your age and gender, when provided), targets, and recent activity are sent to Anthropic to generate responses; Anthropic does not use your data to train their models. See Anthropic's privacy practices at anthropic.com/privacy.
• Apple — Sign in with Apple, App Store subscription processing, push notifications.
• Google — only if you choose Sign in with Google.
• Cloudflare — trakmac.com hosting and DNS. Standard request logs.
• PostHog — product analytics and session replay. We send anonymized in-app event data (screens visited, features used, session counts) and, unless you've turned it off in Settings → Privacy, anonymized recordings of your in-app activity with all typed text masked. PostHog does not receive your name, email, or food log content.
• AppsFlyer — mobile marketing attribution. Receives an install identifier and a small set of conversion events (you registered, you subscribed, you redeemed a code) so we can measure which marketing channels work, plus your device's advertising identifier (IDFA) only if you allow tracking at the iOS prompt. AppsFlyer does not receive your name, email, food logs, or health data. See AppsFlyer's services privacy policy.
• Resend — transactional and marketing email delivery. Your email address is shared with Resend solely to send emails you have requested or opted into.

We may also disclose data when required by law (subpoena, court order, safety investigations). We'll push back on overly broad requests.

4a. Creator Challenge platform

TrakMac lets independent creators run paid, time-boxed fitness challenges that are delivered inside the app. This section explains how data is handled for that platform. It adds to, and does not replace, the rest of this policy.

What a coach can see about a participant

If you join a creator's challenge, the coach who runs that challenge can see, for their own active-challenge participants only, a limited set of information: your first name, your logging consistency and adherence, and whether you are hitting your protein and calorie targets (your macro totals compared against your targets).

A coach never sees your actual food entries or meal descriptions, and does not see your email address or other personal contact details unless you affirmatively opt in.

It is time-boxed

A coach's access to this information is limited to the active challenge window, plus a final adherence snapshot after the challenge ends. It does not continue indefinitely.

Payments are processed by Stripe

Challenge fees are paid on the web and processed by Stripe as a data processor. Stripe handles your payment details and identity or tax information required to process the payment and pay creators. TrakMac and the creator do not store your full card details. The separate, optional TrakMac app subscription is billed by Apple, as described in Section 4 and in our Challenge Purchase Terms.

If you are a coach

If you register a creator account, your own account data (for example your profile, login, and challenge content) is handled under this Privacy Policy. Your payout and identity or tax details are collected and verified by Stripe under Stripe's own terms. See the Creator Agreement for how creator data and participant data are handled in the challenge context.

5. Your rights

You have the right to:

• Request a copy of your data in a portable format.
• Correct inaccurate data.
• Delete your account — which deletes all your data within 30 days.
• Unsubscribe from emails at any time using the link in every email.
• Object to or restrict certain processing.

To exercise these rights: email [email protected]. We'll respond within 30 days.

6. Data retention

• Waitlist emails: kept until you unsubscribe, or until the product launches and we offer you early access.
• Account + logs: retained while your account is active. Deleted within 30 days after you delete your account.
• Coach conversations: automatically deleted 90 days after each message is sent, and removed entirely when you delete your account.
• Backups: encrypted backups may persist for up to 90 days after deletion.

7. Security

We use encrypted HTTPS connections, JWT-based authentication, and Row-Level Security policies to ensure each user can only access their own data. No system is 100% secure; please use strong, unique passwords (Sign in with Apple or Google handles this for you).

8. Children's privacy

TrakMac is not intended for children under 13 in the United States, or under 16 in the EU/UK. We do not knowingly collect data from children. If you believe a child has provided us data, contact [email protected] and we will delete it.

9. International users

TrakMac is operated from the United States. If you access the service from outside the US, you consent to the transfer of your data to the US for processing and storage. For EU/UK residents: we rely on Standard Contractual Clauses where applicable.

10. Changes to this policy

We'll update this page when practices change. Material changes will be announced prominently on this page and, for account holders, by email. The "Last updated" date at the top always reflects the current version.

11. Medical disclaimer

TrakMac is not a medical device. It is not medical advice.

TrakMac provides close-enough estimates to help optimize training. Numbers are approximations based on your descriptions and typical portion sizes, produced by an AI model. Accuracy varies. Real clinical nutrition analysis requires weighed food, lab testing, and a licensed professional.

Do not use TrakMac as a substitute for a registered dietitian, nutritionist, physician, therapist, or any licensed healthcare provider. If you have a medical condition, eating disorder, food allergy, metabolic condition, pregnancy, or any other health concern, consult a qualified healthcare provider before making changes to your diet, training, or supplementation based on anything TrakMac shows you.

You use TrakMac at your own risk.

12. Limitation of liability

To the maximum extent permitted by law, What We Do Collective, TrakMac, its employees, contractors, affiliates, licensors, and suppliers are not liable for any damages — direct, indirect, incidental, consequential, special, exemplary, or punitive — arising from or related to your use of the App or Website, even if we have been advised of the possibility of such damages.

The service is provided "as is" and "as available", without warranty of any kind, express or implied — including, without limitation, warranties of merchantability, fitness for a particular purpose, accuracy, non-infringement, or uninterrupted availability.

You agree that TrakMac is a tool to help you pursue strength, fitness, and happiness. Your health decisions are yours. Your training decisions are yours. Your food decisions are yours. We do the math. You live the life.

If the limitation above is not enforceable in your jurisdiction, our aggregate liability for any claim is limited to the amount you have paid us in the twelve months preceding the claim, or US $50, whichever is less.

13. Intellectual property

All content on trakmac.com and within the TrakMac app — including text, graphics, logos, icons, images, audio, video, photography, illustrations, and software — is the property of What We Do Collective or its licensors, and is protected by copyright, trademark, and other applicable laws.

"TrakMac", "TrakMac'd™", the TrakMac logo, and related marks are trademarks of What We Do Collective. Unauthorized reproduction, distribution, modification, or commercial use is prohibited without prior written consent.

14. Governing law & disputes

This policy and any disputes arising from your use of TrakMac are governed by the laws of the United States of America and the State of residence of What We Do Collective, without regard to conflict-of-laws principles. Disputes will be resolved in the state or federal courts located in that state, and you consent to personal jurisdiction there.

15. Contact

Privacy questions, data requests, or legal notices: [email protected].

Business entity: What We Do Collective.