Journey Tracker Privacy Policy

A. Account and authentication information. Depending on how you sign up, we receive your email address and basic profile information from your authentication provider (Apple or Google). If you create an email/password account, we collect the name and email you provide. We store which login methods are linked to your account and your Journey Tracker user ID.

B. User content you provide. Photos you upload (progress photos, thumbnails, and collection avatars) and related information you enter (collection titles, photo titles/descriptions, and dates).

C. Profile picture. If you upload a profile picture, we store it and basic related information (such as file type) and a flag indicating whether you have one.

D. Reminders and push notifications. If you enable reminders, we store your reminder preferences and your device's push notification token, used to deliver notifications.

E. Device and app diagnostics. Technical information such as app version/build, device model, iOS version, and diagnostic information related to crashes and app performance.

F. Analytics and usage information. Event data about how you use features (for example, creating collections, uploading photos, viewing comparisons, sharing, and notification actions).

G. Support communications. If you contact us, we receive the information you include in your message and any attachments.

We do not collect precise geolocation, and we take an active step to keep location out of your photos — see Section 6.

Depending on how you use it, the Service can hold photos and notes that reveal sensitive personal information — for example, information that could reveal a health condition, a body change, a pregnancy, or a medical or cosmetic procedure. Whether to upload such content is entirely your choice, and the Service works without it.

Where we handle information of this kind, we do so only to provide the Service you have asked for — storing, displaying, comparing, and exporting your own content at your direction. We do not use it to infer characteristics about you, to build profiles, for advertising, or for any purpose other than operating the Service, and we do not sell or share it. Where the law requires your consent before we process sensitive information, we ask for it, and you may withdraw it at any time by deleting the content or your account. Additional disclosures are in our Consumer Health Data Privacy Policy.

Provide the Service: create and manage your account; store and retrieve your photos and related information; show comparisons; and enable the exports and sharing you initiate.

Deliver reminders you request, at the times and intervals you configure.

Maintain security and integrity: authenticate users, prevent unauthorized access, detect and limit abuse (including rate-limiting), and protect our systems.

Improve the Service: understand usage patterns, troubleshoot, fix bugs, and improve performance.

Communicate with you: respond to support requests and send important service announcements.

Comply with law: meet legal obligations and respond to lawful requests.

We do not use your photos to train machine-learning models, and we do not use your information for third-party advertising or cross-app tracking. We do not perform facial recognition or any other biometric identification on your photos.

Photos on your device can contain embedded metadata, including GPS coordinates. Journey Tracker removes GPS location data from photos during upload, so we do not receive or store the location where your photos were taken. This processing also discards most other embedded metadata.

This protection covers the copy we store. It does not apply to a photo you separately export or share outside the Service through your device's own sharing tools — that copy is handled by whatever app or service you send it to.

Your uploaded photos are held in private cloud storage that is not publicly accessible. There is no public link to your content and no permanent URL to your media: each time you view or upload a photo, the app requests temporary, single-purpose access that expires shortly after it is issued.

Access is enforced on our servers, not only in the app — a signed-in person can reach only their own data, and requests for anyone else's content are rejected. Traffic is protected with TLS, and stored photos are encrypted at rest using strong, industry-standard encryption. We verify that requests come from a genuine, unmodified copy of the app, and we maintain controls designed to detect and limit abuse. Our operational logs are designed to avoid recording the contents or identifying details of your files.

We review and update these measures as the Service evolves. We keep the specifics of our security configuration confidential.

A. Service providers (subprocessors). We use vendors to operate the Service, who process information on our behalf under written terms that restrict their use of it to providing services to us:

This list may change as the Service evolves; the current list is always the one published on this page.

B. At your direction. When you use your device's sharing features to share an image, video, or text, that information is disclosed to the third-party apps or services you choose.

C. Legal and safety. We may disclose information if we believe in good faith it is necessary to comply with law, enforce our Terms, or protect the rights, safety, and property of our users, the public, or us. This includes reports of apparent child sexual abuse material to the National Center for Missing & Exploited Children as required by 18 U.S.C. § 2258A.

D. Business transfers. If Journey Tracker is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to applicable law and this policy. We will notify you before your information becomes subject to a materially different privacy policy.

Notifications: enable or disable reminders in the app and in iOS Settings.

Content: add, edit, and delete collections and photos at any time.

Account: update your display name and delete your account from within the app.

Access and export: contact us at the address below to request a copy of your account information.

EEA/UK (GDPR). You have the right to access, correct, delete, restrict, or object to processing of your personal data; to data portability; and to withdraw consent where processing is based on consent. You may lodge a complaint with your local supervisory authority. We will not discriminate against you for exercising these rights.

California (CCPA/CPRA). You have the right to know what personal information we collect and how we use and disclose it; to request deletion; to request correction; and to opt out of the "sale" or "sharing" of personal information and to limit use of sensitive personal information. We do not sell or share personal information, and we do not use sensitive personal information for any purpose other than providing the Service — so there is nothing for you to opt out of or limit, and we do not offer a "Do Not Sell or Share My Personal Information" link. We will not discriminate against you for exercising these rights.

Other U.S. states. Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Texas, Oregon, and others) have similar rights to access, correct, delete, and obtain a portable copy of their personal information, and to appeal a denied request. To appeal, reply to our response or email us with "Appeal" in the subject line; if we deny your appeal, you may contact your state Attorney General.

Washington and Nevada. See our Consumer Health Data Privacy Policy.

How to exercise your rights. Use the in-app controls, or email us at support@journeytrackerapp.com. We will verify your request against your account and respond within the timeframes required by law. You may use an authorized agent where the law permits.