Skip to content
Traqprep app iconTraqprep
  • Features
  • Privacy
  • Terms
  • Support

Privacy Policy

We never receive what you log.

Last updated: 2026-10-18 · Pawcommit (we / us / our)

This page is the canonical copy of the Traqprep privacy policy.

We build Traqprep, a fitness and nutrition tracker that runs entirely on your phone. There is no Pawcommit server in its data path, no account to create, and no analytics. We try to be specific rather than vague. If something here is unclear, email privacy@pawcommit.com.

Contents

  1. 1 · Summary
  2. 2 · What stays on your device
  3. 3 · Your data at a glance
  4. 4 · Services you connect yourself
  5. 5 · Exports and share links
  6. 6 · Purchases
  7. 7 · What we never do
  8. 8 · Cookies and this website
  9. 9 · Retention and deletion
  10. 10 · Children’s privacy
  11. 11 · Your rights
  12. 12 · Security
  13. 13 · Changes to this policy
  14. 14 · Contact

1 · Summary

We collect nothing. Traqprep has no user accounts, no backend, and no telemetry. Everything you log is written to a database inside your device’s private app storage and is never transmitted to us. We cannot read it, restore it, or recover it for you.

  • No accounts. No sign-in, no email address, no password, no user ID.
  • No server. Traqprep has no backend of any kind. Your tracking data is never uploaded to us. The only things that ever leave your device are ones you set up or send yourself: the services you connect in §4, the exports and share links in §5, and the purchase you make through your app store in §6.
  • No analytics or crash reporting. No telemetry SDKs ship in the app.
  • No advertising or tracking. No ad identifiers, and the app requests no advertising permissions.
  • Your own keys. Optional AI features use an API key you supply, talking directly to the provider you choose.
  • Your own Drive. Optional backups are encrypted on your device before being written to your Google Drive.

Health disclaimer. Traqprep is not a medical device. Calorie and nutrition values are estimates. Consult a qualified healthcare professional before making dietary, fitness, or health changes.

2 · What stays on your device

Traqprep stores the following in a local database on your phone or tablet, inside the operating system’s private storage for the app:

  • Nutrition. Food and water entries, portions, meals, recipes, and calorie and macro targets
  • Fitness. Workout logs, exercises, sets and reps, step counts, and personal records
  • Health. Readings imported from Health Connect, for the levels you choose: workouts, weight and steps, and, if you choose the higher levels, sleep, distance, floors climbed, heart and other vitals, blood pressure and body fat. They are stored on your device and never sent to us. An encrypted Google Drive backup, when it is on, includes them.
  • Body. Weight entries, body measurements (Pro), and progress photos (Pro)
  • Meal scans (Pro). When Save scans is on, which is the default, a 128-pixel photo of each scan you save is kept in the scan library on your device. Scan thumbnails are included in an encrypted backup when the photos switch is on.
  • Planning. Meal plans, day templates, the schedule, and automations (Pro)
  • Preferences. Units, language, theme, notification settings, and the one-time Pro entitlement flag

None of this is sent to us. Because we hold no copy, the practical consequence is worth stating plainly: if you lose your device without a backup, that data is gone and we cannot recover it. This is a deliberate trade. The cost of not running a server is that we are not your backup. If you want a copy, enable Drive backup (§4): it saves your database and settings, and your progress photos and scan thumbnails unless you switch that option off. The CSV export in §5 is narrower. It contains only your meals, workouts, and weight entries, not photos, measurements, plans, or preferences.

3 · Your data at a glance

For transparency, here is the complete list of the categories of personal data Traqprep handles, where each one lives, and who can see it. There is no row we cannot account for.

DataWhere it livesWho can see it
Food, water, and calorie logsLocal database on your deviceOnly you
Workouts, sets, and personal recordsLocal database on your deviceOnly you
Weight and body measurementsLocal database on your deviceOnly you
Progress photosLocal photo storage on your deviceOnly you
Meal-scan thumbnails (Pro, when Save scans is on)Local photo storage on your deviceOnly you
Health Connect data (Android)Read from Health Connect and stored in the app’s database on your device; not sent to us; included in an encrypted Drive backup when backup is onOnly you
Calendar availabilityRead from and written to the calendar on your deviceOnly you
AI requests and responses (only if you enable AI; the photo and voice features are Pro): your messages, the log data the assistant reads, and any photos or voice clips you sendSent straight from your device to that provider; history kept locallyYou and that provider, under its terms
AI provider API key (only if you enable AI)Stored in the app’s secure storage, encrypted with a key held in the Android KeystoreOnly you
Encrypted backups (only if you enable backup)drive.appdata folder in the Google Drive account you connectYou. We hold no copy and cannot decrypt yours.
On-device models (only if you download them)Stored on your deviceOnly you. No log data is sent with the download.
Pro entitlementLocal flag on your device, confirmed by the app storeOnly you and the app store

Two categories that commonly appear in app privacy policies, and why they do not apply here:

  • No account or contact data. Traqprep has no sign-in, so we hold no email address, display name, or user identifier. A purchase receipt is confirmed by the app store, and the app writes only a local boolean recording that your Pro unlock is active.
  • No diagnostics. We do not run crash reporting, error tracking, or usage analytics. Nothing about your session, including which entries you viewed, is measured or transmitted.

4 · Services you connect yourself

Traqprep can talk to a few external services, but only because you switch them on: by entering your own API key, connecting your own Google Drive account, or granting an operating-system permission. In every case the connection runs directly from your device to that service, under that service’s own terms. We are not a party to those transfers and we do not see them. Every one of these is optional, and the app is fully functional with all of them switched off.

Your AI provider (optional, bring your own key)

If you enable AI features, you paste your own API key. Requests go straight from your device to the provider you selected, under that provider’s data terms. Those requests can include your messages, the log data the assistant reads to answer you, and any photos or voice clips you send (meal scan, chat photos and voice input are Pro, with your own key). We never receive your key, your prompts, or the provider’s responses. A meal scan also sends the names of foods from your saved scans and, if the on-device models are downloaded, the catalog matches for the photo. You can turn off Save scans in Settings, Assistant, Scan library. Saving a key needs a passing Test connection first. The test makes one request to that provider’s model list. If you choose the Custom entry, requests go to the public HTTPS address you enter. Do not enable this if you do not agree with how that provider handles data.

Your microphone (optional, voice input)

Voice input uses the microphone only when you use it. The voice clip goes to your AI provider, so it follows the same rules as the AI card above. Voice input is Pro, with your own key.

On-device models (optional, download)

In Settings, under Assistant, AI features, Download models downloads the on-device model files. The meal scan (Pro) also offers the download once. Nothing is downloaded until you tap Download models or the download button in the scan offer. The files come from Hugging Face (huggingface.co), from Software Mansion’s react-native-executorch model repositories. Like any download host, it sees your IP address and the files requested. The download carries no log data and no account identifier. The models stay on your device. Delete downloaded models in the same section removes them. Food search works without them. The models are used for photo matching in the meal scan (Pro) and for memory search in the assistant.

Your Google Drive (optional, backup)

If you enable backup, Traqprep writes an encrypted backup into the drive.appdata folder of the Google Drive account you connect. The backup contains your Traqprep database and settings, plus your progress photos and scan thumbnails unless you switch photos off in the backup settings. The snapshot is encrypted on your device using AES-256-GCM with a passphrase only you know, before anything is uploaded. We hold no copy of your passphrase or your backup, and we cannot decrypt yours. If you forget the passphrase, the backup cannot be recovered by anyone, including us. Automatic backup is on by default once you connect Google Drive and set a passphrase. It runs when you open the app, at most once a day, after you enter your passphrase in that session. You can turn it off in the Backup section of Settings.

Your device calendar (optional, scheduling)

If you enable calendar sync, Traqprep reads free and busy slots to suggest realistic times and writes workout events into the calendar on your device. It does not send your calendar to a server. Traqprep does not send event titles, attendees or locations to us. Each event it writes carries a link to a traqprep.pawcommit.com address, with the date. If a calendar account on your phone syncs, its events sync to that account, as any calendar event does.

Google Health Connect (optional, read-only)

If you enable health sync, Traqprep reads health data from Google Health Connect on your device. You choose the level in Settings, Health Sync, Data to sync. Basic, the default, reads workouts (with their active calories), weight and steps. Enhanced adds sleep, distance and floors climbed. Full adds heart rate, resting heart rate, heart rate variability, blood oxygen, body temperature, respiratory rate, blood glucose, VO2 max, blood pressure and body fat. Access is read-only: Traqprep does not write to Health Connect. The readings are stored in the app’s database on your phone and are never sent to us. If backup is on, an encrypted copy of them goes to your Google Drive with the rest of the database. You can change the level or revoke access at any time, in Settings or in Health Connect settings.

Your camera (optional, on-device)

The camera is used for barcode scanning and, when you use them, for a meal scan, a nutrition-label read, or a photo in the assistant chat. The meal scan, the label read and the chat photo are Pro, and each needs your own AI key. A meal scan, a label read or a chat photo is sent only when you use it, to the AI provider you chose (see Your AI provider above). A barcode is matched against a read-only food catalogue bundled inside the app, so a barcode scan makes no network request.

Your photo library (optional, on-device)

Traqprep asks for photo library access only when you pick a photo: a progress photo (Pro), or an existing photo for a meal scan (Pro) or a photo in the assistant chat (Pro, with your own key). Progress photos are copied into the app’s private storage.

5 · Exports and share links

Data export. Traqprep can export your meals, workouts, and weight entries as a CSV file. The file is created on your device and handed to your operating system’s share sheet. Where it goes next (saved to your files, attached to an email, opened in another app) is your choice. It is not sent to us.

Share links. Traqprep can share a plan, recipe, or day template as a link, a QR code, or a .traqplan file. The content you chose to share, including the nutrition values of any foods in it, is encoded into the link or file itself. It is not uploaded to us, and it is not published to any directory or index. It is delivered by your own messaging app to the people you send it to. Links point at a traqprep.pawcommit.com address, but the shared content sits after the # in the link, a part that browsers never send to a server. If you add a name to a share (Name on this share, optional), that name is encoded into the link or file too.

A share link is a bearer link. Anyone who holds it can read what it contains, so treat it like a public document. Because the content lives in the link itself, it cannot be revoked. Deleting or editing the plan in the app does not affect copies you have already sent.

6 · Purchases

Traqprep offers a one-time Pro unlock. Purchases will be processed by Google Play, the app store you install from, which will handle payment, tax, refunds, and your receipt under its own policy. We do not see or store your card number, billing name, or purchase history.

The store’s confirmation goes to the app on your device, not to us. What the app keeps is a local flag:

  • Google Play will confirm the purchase to the app.
  • Traqprep records a single local entitlement value on your device: whether Pro is unlocked.
  • That flag is not linked to an account, because there is no account.

Uninstalling the app removes this flag. Reinstalling may require you to restore your purchase through the app store. Because the entitlement is not tied to an account, there is no server-side record we could use to restore it for you.

7 · What we never do

  • No accounts, sign-in, or email address collection
  • No advertising, ad identifiers, or cross-app tracking
  • No analytics, telemetry, crash reporting, or usage measurement
  • No selling, renting, or sharing your data with anyone. We never hold it in the first place.
  • No transfers you did not set up. Everything in §4 is something you set up yourself, and you can switch it off again at any time, including automatic backup.
  • No server-side processing of anything you log
  • No uploads other than the ones you set up or start: AI requests you trigger (including the one-request key check), Google Drive backups you set up (automatic by default, see section 4), model downloads you start, and purchases you make through Google Play (section 6)

These are architectural properties, not policies that could be quietly changed in a future release. There is no server to change, because the app has no backend.

8 · Cookies and this website

This website sets no cookies of its own. It has no analytics, no advertising, no chat widget, and no third-party scripts, fonts, or trackers. It loads nothing from other companies.

The website host may keep standard server logs, such as IP addresses and request data, to deliver and protect the site. We add no analytics on top of it.

If you open a share link in a browser, the part after the # stays in your browser. It is not sent to the server.

The Privacy and Terms links in the app’s Settings open this website’s Privacy and Terms pages in an in-app browser window. Share links point to a traqprep.pawcommit.com address (see section 5). The app does not contact this website in the background.

9 · Retention and deletion

Because your data is stored on your device, you control its lifetime:

  • Uninstalling Traqprep, or clearing its app storage, deletes the local database and the app’s own copies of your progress photos and scan thumbnails. Photos you originally picked from your system gallery are not deleted. Those stay in your gallery, because Traqprep never modifies or removes your personal photos.
  • Assistant chat. Chat messages on your device are deleted after 180 days, except the newest 200 and messages that still offer Undo for a change other than a delete. When you delete an entry through the assistant, the chat keeps a copy of it so that Undo can bring it back. That copy goes when its chat message goes. Delete all data removes the chat at once.
  • Revoking permissions stops all health, calendar, photo, and Drive access immediately.
  • Backups are your files. Uninstalling does not delete backups already written to your Drive. Those live in your own Google Drive. You can delete a snapshot in the app, under Snapshots in Google Drive in Settings.
  • Share links and exported files cannot be recalled once sent, because their content lives in the link or file itself. Deleting the plan or entries in the app does not affect copies you already shared.

Because we hold no copy of your data, we cannot delete it for you, and we do not need to. There is nothing on our side to erase, request, or retain.

10 · Children’s privacy

Traqprep is a fitness and nutrition tool and is not directed at children under 13. We do not knowingly collect data from anyone, of any age, because we do not collect data at all. The app requests no advertising permissions. Pro is offered where a Pro feature is locked, such as the full Insights breakdowns, and you start any purchase yourself in Google Play.

11 · Your rights

Where the GDPR or equivalent law applies, most of your rights are exercised directly on your device rather than through us, because we are not a controller of the data you log:

  • Access and portability: everything you log is viewable in the app, and you can export your meals, workouts, and weight entries as a CSV file at any time (see §5). If you enabled Drive backup, an encrypted copy of your database and settings, and your progress photos and scan thumbnails unless you switched that option off, is also in your own Google Drive.
  • Erasure: uninstall the app or clear its storage.
  • Rectification: edit any entry in the app.
  • Objection and restriction: disable any optional integration, or stop using the app.
  • Withdraw consent: revoke permissions in your device settings at any time.

We hold no records of your logged data to export, correct, or erase on request. If your question concerns a purchase rather than your logged data, contact us and we will help, since the app store is the party that holds that record.

12 · Security

The primary protection for your tracking data is that it stays on your device unless you choose to send it somewhere. There is no Pawcommit server to breach and no routine transmission to intercept. Beyond that:

  • Backups are encrypted on your device with AES-256-GCM before upload, using a passphrase only you hold.
  • Your AI key is stored in the app’s secure storage on Android, which encrypts it with a key held in the Android Keystore. It is not kept in plain settings storage.
  • App storage is sandboxed by the operating system, so other apps cannot read Traqprep’s database.

No method of protection is absolute. Please keep your device and your Google account secured, and use a strong backup passphrase.

13 · Changes to this policy

If this policy changes, the date above is updated and the new version is published at this URL. Material changes will be noted in the app’s release notes. Because we collect nothing, a change to this policy can never affect data we hold about you, because there is none.

14 · Contact

Questions about this policy or about Traqprep: privacy@pawcommit.com

Our Terms explain the rules for using the app.

Traqprep. Coming to Google Play.

  • Privacy
  • Terms
  • Support
  • privacy@pawcommit.com

Food product data is based on Open Food Facts and USDA FoodData Central. Open Food Facts data is made available under the Open Database License (ODbL).

Made by Pawcommit. © 2026 Pawcommit.