Legal

Privacy Policy

Last updated June 28, 2026

Tracks is a wildlife field guide that shows you the species documented around you. This policy explains what the Tracks mobile app collects, why, who we share it with, and the choices you have. It is short and specific on purpose. We don’t want your data for anything other than running the app.

Who we are

Tracks is operated by Theorics. For any privacy question you can reach us at team@tracks.at. We are the controller of the personal data described below.

Information we collect

We collect only what the app needs to function:

• Account information. When you sign up we store your email address and an encrypted (hashed) password, plus an optional display name. This is handled by our authentication provider (Supabase). We use it to create your account, sign you in, and contact you about your account if needed.
• Location. Scanning the area around you is the core feature, and it needs your device’s location. When you scan, the app sends your current latitude and longitude to our backend, which converts it into a hexagonal map cell and returns the wildlife documented in that area. Your precise coordinates are used to compute the cell and are not stored alongside your identity; we keep records of the map cells that have been scanned, not a history of where individual users have been. Location is only accessed while you are using the app, never in the background. You can deny or revoke the location permission at any time in your device settings. The rest of the app still works; scanning won’t.
• Your collection. The species you collect (“Tracks”) and related counts are stored against your account so your field guide syncs across sessions.
• Technical and diagnostic data. Like most apps, our servers log basic technical information (request timestamps, error messages, and rate-limit counters tied to your account ID) to keep the service reliable and prevent abuse. We do not use third-party advertising or cross-app tracking SDKs.

How we use your data

We use the information above to: create and secure your account; show you wildlife documented near your location; save the species you collect; keep the service running and protect it from abuse; and respond when you contact us. We do not sell your personal data, and we do not use it for advertising or profiling.

Services we share data with

To run Tracks we rely on a small number of service providers, who process data only on our behalf:

• Supabase. Authentication, database, and backend hosting (servers located in the EU). Stores your account and collection data.
• Mapbox. Renders the map. To draw the map for your area it receives location information from your device, subject to Mapbox’s privacy policy.
• iNaturalist. The source of the wildlife observations shown in the app. When you scan, we query iNaturalist for the surrounding area. The observation photos and data are contributed by the iNaturalist community under Creative Commons licensing.
• Apple / Google. App distribution and, if applicable, crash reporting provided by the platform.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and service.

Data retention

We keep your account and collection data for as long as your account exists. Wildlife observations and scanned-cell records are cached to keep the app fast and to reduce load on iNaturalist; this cached data is about places and species, not about you.

Your rights and choices

You can delete your account at any time from inside the app (Settings → Delete account). This permanently removes your account and the data tied to it from our systems: your email, profile, and collection. Depending on where you live, you may also have the right to access, correct, or export your personal data, or to object to certain processing. Email team@tracks.at and we’ll help.

Security

Data is encrypted in transit (HTTPS) and at rest by our hosting provider. Passwords are never stored in plain text. No system is perfectly secure, but we take reasonable measures to protect your information.

Children’s privacy

Tracks is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

If we make material changes we will update this page and the “Last updated” date above. Significant changes may also be announced in the app.

Questions about this policy? team@tracks.at