Track&Act+Track what matters. Act with purpose
Privacy & contact

Your data is yours

Track&Act+ is built to be useful without getting in the way of your privacy. Here's the plain-language version.

Last updated: October 21, 2026

Track&Act+ is operated by Track&Act+, Corp.

What we store

Track&Act+ stores the checklists, items, history and settings you create. On the Free plan everything stays on your device. If you create an account and sign in, that same data is also stored in your private account so it can sync across your devices.

To run an account we keep your email address and authentication details through Amazon Cognito. We don't ask for anything we don't need.

Where your data lives

  • On your device, always — the app works fully offline.
  • In your private Track&Act+ account (when signed in), so it can sync across devices. Changes made on two devices at once are merged item by item.
  • Optionally in your own Google Drive or Microsoft OneDrive app folder, if you choose manual cloud sync instead.
  • In file backups you export yourself (a JSON file you control).
  • Pictures for your saved links are kept in your account's own private cloud storage (see Screenshots & links).

Whichever option you use, your data stays private to your own account — no other user can see it.

Location

Location is used for one thing only: place-based reminders you set up yourself. Track&Act+ uses while-in-use location only — it never tracks you in the background. If you don't create a location reminder, the app doesn't use your location at all.

AI requests

The optional AI checklist generator (AI plan) sends your short description to Track&Act+'s secure service to compose a checklist. There's no API key to manage, and nothing sensitive is stored on your device for it. If you're not on the AI plan, the feature is hidden and nothing is sent.

When you are signed in, links you save or share into a list are sent — the address and any words that came with it — to Track&Act+'s secure service and on to our AI provider, so it can propose a name, a category and sub-category and tags. With the AI plan and the AI assistant on, the text of new items (name, note and any link) is also sent so the AI can fill an empty due date, importance and complexity. It only fills what is empty: a due date only when the item states or implies one, and never over anything you entered yourself. This runs automatically on new items, shared links and screenshots. You can switch the automatic dates, importance and complexity off in Settings › AI assistant › Fill in dates, importance and complexity, and run it on demand from a list's ⋮ menu instead.

Screenshots, links & pictures

  • Screenshots you share in. When you share a screenshot or picture into a list, a copy reduced in size is sent to Track&Act+'s secure service and our AI provider so that what is in it can be read and the item named. The item you created keeps the picture you shared.
  • Pictures for saved links. To show a picture beside a link, Track&Act+'s server fetches the link's preview picture. Some sites block servers; for those, and only for links that still have no picture after the server has tried, your phone fetches the preview picture itself. That site then sees your phone's IP address fetching the page — just as it would if you opened the link yourself.
  • Files you share in. When you share a file into a list — a PDF, a document, a recording — it is attached to the item it creates. It is not sent to the AI to be read. Like your other attachments, it is kept in your account's own private cloud storage when you are signed in, so your other devices can open it.
  • Where link pictures are kept. Link pictures are stored in your account's own private cloud storage, so they don't disappear when a site's picture address expires. Each of your devices downloads them once.

Passwords

Sign-ins in the password manager are encrypted with a passphrase you choose before anything is stored, synced or backed up, and the passphrase is never saved anywhere — not on the phone, not in a backup, not on our servers. That also means nobody, ourselves included, can recover it for you.

Importing sign-ins from a CSV export (LastPass, Zoho Vault, Chrome, Bitwarden, 1Password) is processed entirely on your device: the file is not uploaded, and the imported passwords are encrypted with your passphrase before they sync. The exported file holds your passwords in plain text, so delete it once the import is done.

Usage statistics

We count how Track&Act+ is used, never what you put in it. Both kinds of counting use Google Analytics.

  • This website. Nothing is counted until you click Allow on the small bar at the bottom of the page. If you do, Google Analytics records which pages are visited and when someone taps a Google Play link. No advertising cookies are set, whichever you choose, and you can change your mind by clearing this site's data in your browser.
  • The app (from the next version). Firebase Analytics, a Google service, records anonymous usage events — for example that a list was created, an item was completed, a screen was opened or a subscription started — together with the device model, Android version, country and an app-instance ID. The app does not read your device’s advertising ID.

It never records the names, notes, links or any other content of your lists and items, and never passwords. You can switch it off in the app under Settings › Privacy › Share usage statistics.

Sharing & selling

We do not sell your data, and we don't share it with advertisers; the only advertising-related use is Google counting how many installs came from our own ads, without your advertising ID, as described under Usage statistics. Sharing only happens when you initiate it — exporting a PDF or CSV, sending a list by SMS, or sharing an item to another app you choose. Item text and shared screenshots are sent to our AI provider only to carry out the AI requests described above.

Your control

  • Export or back up everything at any time (Settings › Cloud sync › Back up to file).
  • Sign out from Settings › Account or the home-screen menu.
  • Deleted items rest in a Recently deleted bin you control before they're gone for good.
  • To close your account and remove your synced data, email admin@tracknact.com.

Contact

We read every message. Use whichever address fits:

Website: tracknact.com