Privacy Policy

1. Who we are

StayOnTrack is a results-driven habit tracker powered by simple daily actions operated out of Winnipeg, Canada. This policy breaks down what data we collect when you use the service at stay-on-track.app, how the data is used, and the third parties that touch it.

2. What we collect

We collect three kinds of data:

• Account data. Your name, email, and profile picture when you sign in or sign up with Google; we never get to see your password.
• Habits, and their details. Everything you type or paste with regards to habits, and the accountability partners you connect with.
• Usage data. Standard server logs including IP address, browser type, page paths, and timestamps. We use these to debug issues and understand which features people use, so that we may serve them better.

3. How we use it

• To provide the service: Creating, managing, tracking, and displaying your habits, micro-habits, and daily progress.
• To power habit and accountability features: Supporting interactive previews, progress tracking, habit archiving, and connecting you with accountability partners to share progress and support your journey.
• To send account-related communications: Delivering sign-in links, transaction receipts (via our payment processor), smart reminders, and product updates you've opted into.
• To manage billing: Processing account subscriptions, renewals, and payments securely through Stripe.
• To improve the product: Analyzing aggregate usage patterns to enhance app performance and feature quality. We do not sell your habit data or use your personal entry content to train external third-party models.

4. Third parties we share data with

• Supabase: Hosts our Postgres database. Your account data and app content live in tables Supabase manages on our behalf.
• Stripe: Handles payment processing, subscriptions, and billing. They receive your name, email, and payment details directly; we receive only enough to manage your plan status.
• Google: Receives a sign-in request when you authenticate through it and sends us back your basic profile (name, email, picture).

5. Data retention and deletion

We keep your account and habit data for as long as your account is active. You can delete all individual habits from your habit dashboard at any time. Usage logs are anonymized for security purposes.

6. Your rights

Depending on where you live (GDPR for the EU, CCPA for California, PIPEDA for Canada), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Receive a portable copy of your data in a common format.
• Object to specific kinds of processing, or withdraw consent.

To exercise rights such as portability, email info@stay-on-track.app. We respond within 30 days.

7. Security

Data is encrypted in transit (TLS) and at rest in our database. Access to production data is limited to the small team that operates the service and is logged. We rotate credentials regularly and use industry-standard authentication for all admin access.

8. International transfers

StayOnTrack operates from Canada, and our vendors process data in the United States and the European Union. By using the service, you consent to your data being processed in these regions subject to standard contractual protections.

9. Minors

StayOnTrack is intended for users 16 and older. We do not knowingly collect data from anyone younger. If you believe a minor has created an account, contact us and we will delete it.

10. Changes to this policy

We will update this page when our data practices change. Material changes will be announced via email to active accounts at least 30 days before they take effect.

11. Contact

For questions, requests, or concerns, please reach out at: info@stay-on-track.app.