Privacy Notice

Last updated: 6 October 2026 (version 2026-10-06)

TRACK3D is a personal progress and coaching service for routines, training and nutrition. This notice explains what information we keep, why, who helps us run the service, how long we keep it and the choices you have. We do not sell your information or use it for advertising.

Who we are

TRACK3D (www.track3d.co.uk) is responsible for your information (the "controller" under UK data protection law). You can download, correct and delete your information yourself in the app, in Profile → Account.

What we keep

• Account details: your email address and password (stored only as a secure hash).
• Health information: weight and body measurements, progress photos, food and nutrition logs and plans, training and workout logs, morning check-ins (such as sleep, mood and energy), pain reports, and what you tell the coach about these.
• Your profile: height, date of birth, sex and training experience, used to work out targets and pitch coaching at the right level.
• Routines, habits, goals, weekly reports, coach conversations and settings.
• Technical information our hosting providers log for security, such as IP addresses and request times.

Health information and your consent

Health information is "special category" data under UK data protection law. We only store it with your explicit consent, which you give with a separate tick box when you create your account: "I agree to TRACK3D storing my health information (weight, body photos, food, training) to provide coaching." We record when you agreed and which version of this notice you agreed to. People who joined before we asked are asked once, the next time they sign in.

You can withdraw your consent at any time in Profile → Account. We then stop using your health information, and you can't use the app until you agree again, because coaching depends on it. To have what's stored erased, delete your account (also in Profile → Account).

Progress photos are stored privately. Only you can open them, through links that expire after an hour. TRACK3D gives general fitness and nutrition guidance; it is not a medical service and does not diagnose or treat anything.

Why we use it, and our lawful basis

• To run your account and the features you use, such as plans, logs, reports and coaching: to perform our contract with you.
• To store and use your health information for coaching: your explicit consent.
• To keep the service secure and prevent misuse, for example limits on coaching requests: our legitimate interests in running a safe service.
• To meet legal obligations, where they apply.

Calorie targets come from a standard formula and the coach's replies are suggestions. Nothing is decided about you automatically that has legal or similarly significant effects, and you can change any target or plan yourself. TRACK3D never sets calorie targets below a safe minimum.

Who helps us run TRACK3D

These providers process information for us, only on our instructions and under data processing terms:

• Supabase: database, sign-in and photo storage.
• Vercel: hosting for the website and app.
• Anthropic: AI coaching. The details needed to answer a coaching request (for example your targets and recent logs) are sent to Anthropic to write the reply.

Some of these providers process information outside the UK, including in the United States. Where they do, the transfer is protected by the safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK–US data bridge.

How long we keep it

We keep your information while your account is open. When you delete your account, everything is removed from our live systems straight away: every record, your progress photos and your sign-in account. Copies in our database provider's backups are deleted automatically within 30 days. Security logs kept by our hosting providers are deleted on their own short schedules.

Your rights

• Access and portability: Profile → Account → Download my data gives you a ZIP file with everything stored for your account, as JSON files, plus your photos. You can download it once a day.
• Correction: you can edit your profile, plans and logs in the app.
• Erasure: Profile → Account → Delete my account removes your account and data.
• Withdrawing consent: Profile → Account, at any time.
• You can also ask us to restrict or stop using your information, or object to how we use it.

If you're unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to sort it out first.

Cookies and storage on your device

TRACK3D doesn't use analytics, advertising or tracking cookies, and doesn't record your sessions. Our fonts are served from our own site, so pages don't contact other companies for them. Because we only use storage that is strictly necessary for the features you ask for, we don't need to ask for consent with a cookie banner.

The app keeps these in your browser's local storage:

• Your sign-in session, so you stay signed in, and the time you signed in, so you're signed out 7 days after signing in.
• Unsaved progress, such as a workout, morning routine or nutrition plan you're part-way through, so a reload or lost signal doesn't lose it.
• Your recent coach conversation and copies of your habits, so they show straight away and while you're offline.
• Small settings, such as kg or stone and notices you've dismissed.

Signing out leaves unsaved progress on the device so it isn't lost; deleting your account removes all of it from the browser you use to delete it. If we ever add analytics, they won't load unless you agree, and you'll be able to refuse as easily as accept.

Security and age

Information is encrypted in transit, and the database only lets each account read and change its own records. No online service can promise perfect security, so please use a strong password that you don't use anywhere else. TRACK3D is intended for people aged 18 or over.

Changes

We'll update this notice when the service changes. The date and version above show the current one. If a change affects how we use your health information, we'll ask for your consent again.