Privacy policy
Last updated: 2026-11-06
Colab Tracker is a habit tracker you can use alone or with friends in groups. This policy explains what data the app (website and iOS/Android apps) stores, why, and what you can do about it. Contact: support@colabtracker.app.
What we store
- Account: your username and your password, stored only as a one-way hash (we can never see it). There is no email, phone number or real name.
- Settings: time zone, language and theme.
- Your tracking: habit names, icons, weekly targets and the days you checked them off.
- Groups: groups you create or join, shared habits, and which of your habits you link to them.
- Security: login sessions, and short-lived counters keyed by IP address to stop password-guessing and spam (deleted after about a day).
- Getting started: which steps of the welcome tour you saw, completed or skipped, and whether you used the website or the iOS/Android app. We use this only to improve the first-run experience.
- Support emails: if you write to us (for example because you forgot your password), we keep your email address and message only to answer you, and delete them once your request is resolved.
On your phone, the app also keeps your login token in the system's secure storage (iOS Keychain / Android Keystore) and your reminder setting locally. Reminders are scheduled on the device; nothing is sent to us.
Who can see it
Your habits are private. Members of a group you join can see your username and your progress on the habits you chose to link to that group's shared habits — nothing else.
What we don't do
No ads, no third-party analytics or tracking SDKs, no selling or sharing data with advertisers.
Where it's processed
The app is hosted by Vercel and the database by Neon, in the European Union (Frankfurt). They process data only to run the service. We use the data only to provide the app (legal basis: performing the service you asked for).
How long we keep it
Until you delete your account. Deleting it (in the app under You → Delete account, or see how to delete your account) removes your account, habits, check-ins, sessions and group memberships from our database immediately. Groups you owned pass to another member, or are removed if you were the last one. Copies may remain in our hosting providers' short-term backups until those expire.
Your rights
You can access, correct, export or delete your data, or object to its processing, by writing to support@colabtracker.app. You can also complain to your data protection authority (in Spain, the AEPD).
Children
Colab Tracker is not intended for children under 14.
Changes
If this policy changes, we'll update the date above and, for important changes, tell you in the app.