TrackCold

Privacy Policy

Effective: October 11, 2026

This Privacy Policy explains how TrackCold ("we", "us") collects, uses, and protects information in connection with the TrackCold iPhone app (the "App"), including its Apple Watch companion, Live Activities, and widgets, and the TrackCold website at trackcold.com (the "Website").

1. Summary

  • Your session content stays yours. Your written notes, the exact temperatures you record, any heart-rate and related biometrics captured during a session, and your stored session history live on your device and, if you enable it, sync through your own private iCloud. We have no server that receives them, and they are never sent to a third party.
  • The App uses three third-party services: Firebase Analytics and Firebase Crashlytics (Google) for anonymous usage and crash data, and RevenueCat for subscription management. To be precise about the boundary: Firebase does receive anonymous facts about a workout — that one was completed, its cold type, its duration, and its round count — but never your notes or the exact temperatures you record, and never your stored history. What each service receives is itemized in sections 2 and 5.
  • Garmin watches (optional). If you connect a Garmin watch, the App also uses Garmin's Connect IQ Mobile SDK and the Garmin Connect app on your iPhone to exchange rituals and recorded sessions with the watch. What that involves is described in section 2.
  • No cross-app tracking. The App displays no advertising, does not use the advertising identifier (IDFA), and never asks for permission to track you across other apps or websites. We do not share your information with advertising networks or data brokers.
  • The App does not require an account.
  • The Website uses Google Analytics 4 to understand aggregate visitor behavior. It does not personally identify you.
  • We do not sell your personal information.

2. Information collected by the App

The App is designed to operate without an account. The following data may be processed:

  • Session data — durations, temperatures you enter, ritual configurations, notes, and timestamps. Stored on your device. If iCloud is enabled in iOS Settings, this data is also synced via your private iCloud account, which is end-to-end encrypted by Apple.
  • HealthKit data — only if you grant permission. The App may write workout entries (mindful sessions, water temperature readings) to Apple Health and read your activity data to enrich session context. HealthKit data never leaves your device under our control; it is governed by Apple's HealthKit framework.
  • Subscription status — payments are processed by Apple via StoreKit. Apple remains the merchant of record; we never receive your payment method, Apple ID, or billing address. We use RevenueCat to verify and manage entitlement to Asgard premium features. RevenueCat receives purchase and transaction data — product identifiers, purchase, renewal and expiry dates, country of purchase, and an app-generated anonymous user identifier. It does not receive your session data.
  • Usage analytics (Firebase Analytics) — the App sends anonymous behavioral events to Google's Firebase Analytics so we can understand which features are used and where people get stuck. Examples: a workout was started or completed, which cold type and mode were selected, how many rounds a session had, how long it lasted, that a paywall was viewed, and which subscription product was viewed or purchased. Firebase also records standard device context — device model, operating system version, app version, language, coarse region, and a Firebase-generated app instance identifier.
    What is deliberately excluded: your name, your free-text session notes, and the exact temperatures you record. These are treated as session content and are never sent off your device. Analytics collection is enabled when the App launches.
  • Crash reports (Firebase Crashlytics) — when the App crashes or hits a serious error, Google's Firebase Crashlytics receives a crash report: the stack trace, device model, operating system and app version, the state of the app at the time, and an anonymous installation identifier. This is used only to find and fix bugs.

  • Garmin watches (optional) — If you install TrackCold on a compatible Garmin watch and connect it in Settings, TrackCold exchanges data with that watch using Garmin's Connect IQ Mobile SDK and the Garmin Connect app on your iPhone. TrackCold sends the saved rituals you choose, including names, steps, durations and any entered temperatures. The watch records session and phase times, manual temperatures and available heart-rate readings. Finished recordings remain in the watch's local storage until the linked iPhone confirms it has saved them. The watch can retain up to ten unsynced sessions. This is local companion sync, not a Garmin Health API cloud connection.

    When supported and available, recordings may also contain resting-heart-rate and generic HR-zone settings from the watch profile, cached respiration/stress context, optional baseline readings, reading coverage and phase HR summaries. Experimental interval and movement diagnostics are off by default and require a separate watch setting. Those diagnostics record bounded sensor aggregates and quality information; they are not validated medical or HRV measurements. TrackCold does not use the watch's sensor temperature as a water or room temperature.

    TrackCold saves imported Garmin sessions on your iPhone and in your private iCloud database, like other sessions. It also saves a delivery receipt containing the Connect IQ device identifier, the watch recording's session identifier, its revision, a payload digest and import time to prevent duplicate imports and protect later edits or deletions. This Garmin session data is not sent to TrackCold-owned servers or to advertising services. Garmin sessions are not exported to Apple Health or saved as Garmin Connect FIT activities by TrackCold in this release. Garmin's own apps and services are governed by Garmin's privacy policy. Data TrackCold receives from your watch is held by TrackCold, on your devices and in your private iCloud, not by Garmin; Garmin is not responsible for our handling of that data.

    Deleting a session removes it from your history immediately; TrackCold erases it from your device and iCloud within 60 days. Delete All Data in Settings erases your sessions immediately, keeping only a small record of which watch recordings were already received, so a deleted recording is not imported again. Use the watch's explicit sync/unlink/pending-record controls when changing phones or handling undelivered recordings; uninstalling or resetting the watch app can remove its local data. Contact trackcold@suur.io for questions about TrackCold data handling.

  • Apple diagnostics — separately, Apple may share aggregated crash and usage reports with us if you have opted in via iOS Settings → Privacy & Security → Analytics & Improvements → Share with App Developers. These are provided by Apple and do not personally identify you.

3. Information collected by the Website

  • Google Analytics 4 — measurement ID G-L9C4ZR53T6. Collects pageviews, referrer, approximate geographic region (city-level, derived from IP), device type, browser, screen size, language, and aggregate behavior (scroll depth, time on page). Google may set cookies in your browser. IP addresses are anonymized prior to storage by Google in regions where required.
  • Server access logs — our hosting provider (Vercel) records standard request metadata including IP address, user-agent, requested URL, and timestamp. Used for security, debugging, and abuse prevention. Retained for a limited period per the provider's policies.

4. How we use information

  • To operate, maintain, and improve the App and Website.
  • To verify subscription entitlement (Apple StoreKit and RevenueCat data).
  • To understand which features are used and where people get stuck (App analytics, in aggregate only).
  • To diagnose and fix crashes and errors (crash reports).
  • To understand which content is useful (Website analytics, in aggregate only).
  • To respond to your inquiries when you contact us.

5. Third parties

We work with the following service providers. Each is bound by their own privacy policy:

  • Apple — App Store distribution, StoreKit subscriptions, iCloud sync, HealthKit, Sign in with Apple if applicable. See apple.com/legal/privacy.
  • Google (Firebase Analytics & Firebase Crashlytics) — App usage analytics and crash diagnostics, as described in section 2. The Firebase Analytics dependency also bundles Google's on-device ad-conversion component; the App displays no advertising and shows you no ads. See firebase.google.com/support/privacy.
  • RevenueCat — subscription and entitlement management, as described in section 2. See revenuecat.com/privacy.
  • Garmin (Connect IQ Mobile SDK and Garmin Connect) — only if you connect a Garmin watch: local companion sync between the App and the TrackCold watch app, as described in section 2. See garmin.com/privacy.
  • Google (Analytics) — Website analytics only. See policies.google.com/privacy. You can opt out by installing the Google Analytics Opt-out Browser Add-onor by blocking the gtag script via your browser's privacy settings.
  • Vercel — Website hosting. See vercel.com/legal/privacy-policy.

We do not share your information with advertising networks, data brokers, or other third parties for their own marketing purposes. We do not sell your personal information.

6. Cookies

The Website sets cookies via Google Analytics (_ga, _ga_*). These are used to distinguish users for analytics purposes. The App itself does not use cookies. You can clear or block cookies in your browser at any time; doing so will not affect your ability to use the Website.

7. Your rights

Depending on where you live (e.g., the EU/EEA, UK, California), you may have rights to access, correct, delete, or restrict processing of your personal information, and to object to certain processing or withdraw consent. To exercise any of these rights, email trackcold@suur.io. Because the App is account-less and stores most data on your device, you can also delete your data directly by uninstalling the App or clearing it from within the App's settings.

8. Children

TrackCold is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will take appropriate steps.

9. Data retention

Your session data is retained on your device (and in your iCloud) until you delete it; a deleted session leaves your history at once and is erased within 60 days. Recordings on a connected Garmin watch stay on the watch until your iPhone confirms it has saved them (section 2). Subscription receipts and entitlement records are retained as required by Apple's and RevenueCat's policies and our financial-record obligations. App analytics and crash reports are retained per Firebase's retention settings (analytics events currently 14 months; crash reports currently 90 days). Website analytics data is retained per Google Analytics' default retention setting (currently 14 months). Aggregated, non-identifying data may be kept longer.

10. Security

We use reasonable technical and organizational measures to protect information. iCloud data is encrypted by Apple. The Website is served over HTTPS. No system is perfectly secure; you use the App and Website at your own discretion.

11. International transfers

The service providers we use (Apple, Google, Vercel) operate globally and may process data in countries other than your own. They participate in international data-transfer mechanisms (e.g., Standard Contractual Clauses) where applicable.

12. Changes

We may update this Privacy Policy. The "Effective" date at the top reflects the latest version. Material changes will be communicated through the App or Website. Continued use after a change constitutes acceptance.

13. Contact

Questions, requests, or concerns: trackcold@suur.io