Privacy Policy

Last updated: June 2026

This Privacy Policy explains how OnTrack ("we", "us", "our") collects, uses and protects your personal data when you use the OnTrack app at ontrackapp.co.uk. We take your privacy seriously and only collect what we need to provide the service.

1. Who we are

OnTrack is operated by R. Nickels, based in the United Kingdom. If you have any questions about this policy or your data, contact us at:

hello@ontrackapp.co.uk

2. What data we collect

When you use OnTrack, we collect the following:

Email address — used to create and manage your account
First name — used to personalise your experience (optional)
Budget and spending data — the monthly budget you set and the spending amounts you log. This is stored to sync your data across devices. We do not collect details of what you spent money on, only the amounts.
Account data — date of account creation, last login

We do not collect payment information, location data, or any financial account details.

3. How we use your data

We use your data solely to provide the OnTrack service:

To create and manage your account
To sync your budget and spending data across your devices
To send you account-related emails (confirmation, password reset)
To personalise the app experience with your name

We do not use your data for advertising, we do not sell your data, and we do not share it with third parties except as described below.

4. Who we share data with

We use the following trusted third-party services to operate OnTrack:

Supabase — our database and authentication provider. Your data is stored on Supabase servers in the EU (Ireland). Supabase is GDPR compliant. Supabase Privacy Policy
Resend — used to send transactional emails (account confirmation, password reset). Only your email address is shared. Resend Privacy Policy
Vercel — used to host the OnTrack application. Vercel Privacy Policy

We do not share your data with any other third parties.

5. How long we keep your data

We keep your data for as long as your account is active. If you delete your account, all your personal data will be permanently deleted within 30 days.

6. Your rights

Under UK GDPR, you have the following rights:

Right to access — you can request a copy of the data we hold about you
Right to deletion — you can request that we delete your account and all associated data
Right to correction — you can update your data at any time within the app
Right to portability — you can request your data in a machine-readable format
Right to object — you can object to how we process your data

To exercise any of these rights, email us at hello@ontrackapp.co.uk. We will respond within 30 days.

7. Cookies and local storage

OnTrack uses browser local storage to save your preferences and session information on your device. This is essential for the app to function. We do not use tracking cookies or advertising cookies.

8. Security

Your data is stored securely on Supabase's encrypted servers. Passwords are hashed and never stored in plain text. All data transmission uses HTTPS encryption.

9. Children

OnTrack is not intended for use by anyone under the age of 13. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or through the app. The date at the top of this page shows when it was last updated.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

OnTrack · ontrackapp.co.uk · hello@ontrackapp.co.uk