We never receive what you log.
We build TraqPrep, a fitness and nutrition tracker that runs entirely on your phone. There is no Pawcommit server in its data path, no account to create, and no analytics. We try to be specific rather than vague. If something here is unclear, email privacy@pawcommit.com.
Summary
We collect nothing. TraqPrep has no user accounts, no backend, and no telemetry. Everything you log is written to a database inside your device's private app storage and is never transmitted to us. We cannot read it, restore it, or recover it for you.
- No accounts. No sign-in, no email address, no password, no user ID.
- No server. TraqPrep has no backend of any kind. Your tracking data is never uploaded to us. The only things that ever leave your device are ones you deliberately send somewhere yourself: the services you connect in §4, the exports and share links in §5, and the purchase you make through your app store in §6.
- No analytics or crash reporting. No telemetry SDKs ship in the app.
- No advertising or tracking. No ad identifiers, and the app requests no advertising permissions.
- Your own keys. Optional AI features use an API key you supply, talking directly to the provider you choose.
- Your own Drive. Optional backups are encrypted on your device before being written to your Google Drive.
What stays on your device
TraqPrep stores the following in a local database on your phone or tablet, inside the operating system's private storage for the app:
- Nutrition. Food and water entries, portions, meals, recipes, and calorie and macro targets
- Fitness. Workout logs, exercises, sets and reps, step counts, and personal records
- Body. Weight entries, body measurements, and progress photos
- Planning. Meal plans, day templates, the schedule, and automations
- Preferences. Units, language, theme, notification settings, and the one-time Pro entitlement flag
None of this is sent to us. Because we hold no copy, the practical consequence is worth stating plainly: if you lose your device without a backup, that data is gone and we cannot recover it. This is a deliberate trade — the cost of not running a server is that we are not your backup. If you want a copy, enable Drive backup (§4): it saves your database and settings, and your progress photos unless you switch that option off. The CSV export in §5 is narrower — it contains only your meals, workouts, and weight entries, not photos, measurements, plans, or preferences.
Your data at a glance
For transparency, here is the complete list of the categories of personal data TraqPrep handles, where each one lives, and who can see it. There is no row we cannot account for.
| Data | Where it lives | Who can see it |
|---|---|---|
| Food, water, and calorie logs | Local database on your device | Only you |
| Workouts, sets, and personal records | Local database on your device | Only you |
| Weight and body measurements | Local database on your device | Only you |
| Progress photos | Local photo storage on your device | Only you |
| Health-platform data (Apple Health / Health Connect) | Read from the health store on your device; never uploaded | Only you |
| Calendar availability | Read from and written to the calendar on your device | Only you |
| AI prompts and responses (only if you enable AI) | Sent straight from your device to that provider; history kept locally | You and that provider, under its terms |
| AI provider API key (only if you enable AI) | Device keystore / keychain | Only you |
| Encrypted backups (only if you enable backup) | drive.appdata folder in the Google Drive account you authorised | You — we hold no copy and cannot decrypt yours |
| Pro entitlement | Local flag on your device, confirmed by the app store | Only you and the app store |
Two categories that commonly appear in app privacy policies, and why they do not apply here:
- No account or contact data. TraqPrep has no sign-in, so we hold no email address, display name, or user identifier. A purchase receipt is confirmed by the app store, and the app writes only a local boolean recording that your Pro unlock is active.
- No diagnostics. We do not run crash reporting, error tracking, or usage analytics. Nothing about your session — including which entries you viewed — is measured or transmitted.
Services you connect yourself
TraqPrep can talk to a few external services, but only because you switch them on — by entering your own API key, signing in to your own Google account, or granting an operating-system permission. In every case the connection runs directly from your device to that service, under that service's own terms. We are not a party to those transfers and we do not see them. Every one of these is optional, and the app is fully functional with all of them switched off.
If you enable AI features, you paste your own API key. Requests go straight from your device to the provider you selected, under that provider's data terms. We never receive your key, your prompts, or the provider's responses. Do not enable this if you do not agree with how that provider handles data.
If you enable backup, TraqPrep writes an encrypted backup into the drive.appdata folder
of a Google account you authorise. The backup contains your TraqPrep database and settings, plus
your progress photos unless you switch photos off in the backup settings. The snapshot is encrypted
on your device using
AES-256-GCM with a passphrase only you know, before anything is uploaded. We hold no copy of your
passphrase or your backup, and we cannot decrypt yours. If you forget the passphrase, the backup
cannot be recovered by anyone, including us.
If you enable calendar sync, TraqPrep reads free and busy slots to suggest realistic times and writes workout events into the calendar on your device. It does not send your calendar to a server. Event titles, attendees, and locations are never transmitted anywhere.
If you enable health sync, TraqPrep reads your workouts, weight, and step count from the health store on your device. Access is read-only: TraqPrep does not write back to your health store, and health data is never uploaded. You can revoke access at any time in your device's Health or Health Connect settings.
The camera is used for barcode scanning and for progress photos. Barcodes are resolved against a read-only food catalogue bundled inside the app — roughly 42,000 products with on-device search and translation — so a scan makes no network request at all. Photos are copied into the app's private storage. Nothing is uploaded for recognition.
Exports and share links
Data export. TraqPrep can export your meals, workouts, and weight entries as a CSV file. The file is created on your device and handed to your operating system's share sheet; where it goes next — saved to your files, attached to an email, opened in another app — is your choice. It is not sent to us.
Share links. TraqPrep can share a plan, recipe, or day template as a link, a QR code,
or a .traqplan file. The content you chose to share — including the nutrition values of
any foods in it — is encoded into the link or file itself. It is not uploaded to us, and it is not
published to any directory or index. It is delivered by your own messaging app to the people you send
it to. Links point at a traqprep.pawcommit.com address, but the shared content sits after
the # in the link, a part that browsers never send to a server.
A share link is a bearer link: anyone who holds it can read what it contains, so treat it like a public document. Because the content lives in the link itself, it cannot be revoked — deleting or editing the plan in the app does not affect copies you have already sent.
Purchases
TraqPrep offers a one-time Pro unlock. Purchases are processed by the app store you installed from (Google Play or the Apple App Store), which handles payment, tax, refunds, and your receipt under its own policy. We do not see or store your card number, billing name, or purchase history.
The store's confirmation goes to the app on your device, not to us. What the app keeps is a local flag:
- The app store confirms the purchase to the app.
- TraqPrep records a single local entitlement value on your device — whether Pro is unlocked.
- That flag is not linked to an account, because there is no account.
Uninstalling the app removes this flag. Reinstalling may require you to restore your purchase through the app store. Because the entitlement is not tied to an account, there is no server-side record we could use to restore it for you.
What we never do
- No accounts, sign-in, or email address collection
- No advertising, ad identifiers, or cross-app tracking
- No analytics, telemetry, crash reporting, or usage measurement
- No selling, renting, or sharing your data with anyone — we never hold it in the first place
- No transfers you did not start. Everything in §4 is something you switch on yourself, and you can switch it off again at any time
- No server-side processing of anything you log
- No background uploads, no hidden sync, and no remote backups you did not request
These are architectural properties, not policies that could be quietly changed in a future release. There is no server to change, because the app has no backend.
Cookies and this website
This website sets no cookies of its own, embeds no trackers, and records no visit data. We do not operate advertising, analytics, or remarketing on this site. Your app-store listing links to this page; that is the only relationship between this site and the app.
Live chat (Knocket)
Every page shows a Chat with us button. Nothing is loaded from a third party until you
click it. Only when you click do we load the live-chat widget of Knocket
(knocket.trtc.io), a service
provided on Tencent Cloud / Tencent RTC infrastructure. Your browser then connects to
trtc.io, which receives technical data such as your IP address, browser details, and the
page you are on. The widget may store an identifier in your browser so your conversation continues
across pages.
Any messages, files, or contact details you choose to send in the chat are processed by Knocket so we can read and answer them. They may be forwarded to our own messaging tools (for example Telegram). The legal basis is your consent, given by clicking the button (Art. 6(1)(a) GDPR, §25(1) TDDDG). If you ask a question about one of our products, Art. 6(1)(b) GDPR also applies. Data may be processed outside the EU. Knocket's own privacy policy applies: knocket.trtc.io/legal/privacy. If you prefer not to use the chat, email hello@pawcommit.com.
AI assistant. The chat may first be answered by an AI assistant. To generate a reply, the text of your messages and the conversation so far are sent to our AI model provider, DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd., deepseek.com), whose servers are in the People's Republic of China. Please don't share sensitive personal data, such as health details, in the chat. You can ask for a human at any time by typing "human". The legal basis is the same consent you give by opening the chat (Art. 6(1)(a) GDPR), together with Art. 49(1)(a) GDPR for the transfer to a country without an EU adequacy decision. DeepSeek's privacy policy applies to its processing: DeepSeek privacy policy.
Retention and deletion
Because your data is stored on your device, you control its lifetime:
- Uninstalling TraqPrep, or clearing its app storage, deletes the local database and the app's own copies of your progress photos. Photos you originally picked from your system gallery are not deleted — those stay in your gallery, because TraqPrep never modifies or removes your personal photos.
- Revoking permissions stops all health, calendar, photo, and Drive access immediately.
- Backups are your files. Uninstalling does not delete backups already written to your Drive — those live in your own Google account and you can delete them there at any time.
- Share links and exported files cannot be recalled once sent, because their content lives in the link or file itself. Deleting the plan or entries in the app does not affect copies you already shared.
Because we hold no copy of your data, we cannot delete it for you — and we do not need to. There is nothing on our side to erase, request, or retain.
Children's privacy
TraqPrep is a general-audience fitness and nutrition tool and is not directed at children under 13. We do not knowingly collect data from anyone, of any age, because we do not collect data at all. The app requests no advertising permissions and contains no purchase prompts outside the explicit Pro unlock screen.
Your rights
Where the GDPR or equivalent law applies, most of your rights are exercised directly on your device rather than through us, because we are not a controller of the data you log:
- Access and portability — everything you log is viewable in the app, and you can export your meals, workouts, and weight entries as a CSV file at any time (see §5). If you enabled Drive backup, an encrypted copy of your database and settings — and your progress photos, unless you switched that option off — is also in your own Google Drive.
- Erasure — uninstall the app or clear its storage.
- Rectification — edit any entry in the app.
- Objection and restriction — disable any optional integration, or stop using the app.
- Withdraw consent — revoke permissions in your device settings at any time.
We hold no records of your logged data to export, correct, or erase on request. If your question concerns a purchase rather than your logged data, contact us and we will help, since the app store is the party that holds that record.
Security
The primary protection for your tracking data is that it stays on your device unless you choose to send it somewhere — there is no Pawcommit server to breach and no routine transmission to intercept. Beyond that:
- Backups are encrypted on your device with AES-256-GCM before upload, using a passphrase only you hold.
- Your AI key is stored in the platform keystore (iOS Keychain / Android Keystore), not in plain settings storage.
- App storage is sandboxed by the operating system, so other apps cannot read TraqPrep's database.
No method of protection is absolute. Please keep your device and your Google account secured, and use a strong backup passphrase.
Other Pawcommit products
Pawcommit has other projects in development. TraqPrep is the only Pawcommit app currently distributed through an app store, and this policy covers it. Products that are still in development are not available to the public and are not covered by this policy; if any of them is released later, it will ship under this same no-collection posture and this page will be updated.
Changes to this policy
If this policy changes, the effective date above is updated and the new version is published at this URL. Material changes will be noted in the app's release notes. Because we collect nothing, a change to this policy can never affect data we hold about you — there is none.
Contact
Questions about this policy or about TraqPrep: privacy@pawcommit.com
Our terms of use are on the Terms page.