mTrack Privacy Policy

Effective date: [DD Month YYYY]
Last updated: [DD Month YYYY]

Note to the publisher: This is a complete template written on the assumption that mTrack is a mobile and web app that collects account, device, usage and (optionally) location data. Replace everything in [square brackets], delete any section that does not apply, and have a qualified lawyer review it before publishing.

1. Introduction

Welcome to mTrack ("mTrack", "we", "us" or "our"). mTrack is operated by [Legal Entity Name], [registered address]. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights you have.

This policy applies to the mTrack mobile application, website at [website URL], and any related services (together, the "Services"). By creating an account or using the Services, you acknowledge that you have read this policy. If you do not agree with it, please do not use the Services.

2. Who Is Responsible for Your Data

For the purposes of applicable data protection laws, [Legal Entity Name] is the data controller (called the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023).

Contact for privacy matters:

Data Protection / Grievance Officer: [Name]
Email: [privacy@yourdomain.com]
Postal address: [Address]

3. Information We Collect

3.1 Information you provide to us

Account information: name, email address, phone number, password (stored in hashed form), profile photo, and your preferences.
Content you enter: tracking entries, notes, goals, tags, and any other information you choose to add to the app.
Support communications: messages, attachments and details you send when you contact us.
Payment information: if you buy a paid plan, payments are processed by our payment partner [Payment Provider]. We receive confirmation of payment and limited details (such as the last four card digits and billing country) but we do not store your full card number.

3.2 Information collected automatically

Device and technical data: device model, operating system and version, app version, language, time zone, IP address, device identifiers (such as advertising ID or app instance ID), crash logs and performance diagnostics.
Usage data: features used, screens viewed, taps and interactions, session length, and timestamps.
Location data (only with your permission): precise or approximate location from GPS, Wi-Fi, Bluetooth or mobile networks, collected [only while the app is in use / in the background] to provide tracking features. You can turn this off at any time in your device settings.
Cookies and similar technologies: on our website we use cookies and similar tools, described in Section 9.

3.3 Information from third parties

Sign-in providers: if you sign in with Google, Apple or similar, we receive your name, email and profile picture as permitted by that provider.
Analytics and advertising partners: aggregated or device-level information about how you found and use the app.
Connected services: if you link mTrack to another service (for example a wearable or health platform), we receive the data you authorise that service to share.

3.4 Sensitive information

We do not intentionally collect sensitive categories of data (such as health, biometric, financial account, caste, religion or sexual orientation data) unless a feature clearly asks for it and you choose to provide it. Where we do, we process it only with your explicit consent and apply additional safeguards. [Delete or adapt if mTrack handles health or fitness data.]

4. How We Use Your Information

We use your data for the following purposes and on the following legal bases:

Purpose	Examples	Legal basis
Provide the Services	Create your account, record and display your tracking data, sync across devices	Performance of a contract / your consent
Location features	Show routes, trigger location-based alerts	Consent
Improve and develop the Services	Fix bugs, analyse usage, test new features	Legitimate interests
Communicate with you	Service notices, security alerts, replies to support requests	Contract / legitimate interests
Marketing	Product news and offers, where you have opted in	Consent
Security and fraud prevention	Detect abuse, unauthorised access and violations of our Terms	Legitimate interests / legal obligation
Legal compliance	Respond to lawful requests, keep records required by law	Legal obligation

We do not use your personal data to make decisions that produce legal or similarly significant effects on you through solely automated means.

We do not sell your personal data. We share it only in these situations:

Service providers: companies that help us run the Services, such as cloud hosting ([e.g., AWS / Google Cloud]), analytics ([e.g., Firebase]), crash reporting, customer support tools, email delivery and payment processing. They may use your data only to perform services for us and under written confidentiality and security obligations.
Other users, if you choose: if mTrack offers sharing or group features, information you choose to share will be visible to the people you select.
Legal and safety reasons: where required by law, court order or government request, or to protect the rights, property or safety of mTrack, our users or the public.
Business transfers: if we are involved in a merger, acquisition, financing or sale of assets, your data may be transferred, and we will notify you before it becomes subject to a different privacy policy.
With your consent: in any other case where you have agreed to the sharing.
Aggregated or de-identified data: which cannot reasonably be used to identify you, may be shared for research, analytics or reporting.

6. International Data Transfers

Your data may be processed and stored on servers located outside your country, including in [countries]. Where we transfer data across borders, we do so in line with applicable law and use appropriate safeguards, such as standard contractual clauses or transfers only to countries or recipients permitted by the relevant authority.

7. Data Retention

We keep personal data only for as long as needed for the purposes in this policy:

Account data: for as long as your account is active, and for up to [30/90] days after deletion to complete the process and handle disputes.
Tracking and location data: [for the period you choose, or up to X months/years], after which it is deleted or anonymised.
Support records: [24] months after the issue is closed.
Logs and security data: up to [12] months.
Legal and tax records: for the period required by law (for example, [8] years for certain financial records).

When data is no longer needed, we delete it or irreversibly anonymise it.

8. Data Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, regular security reviews and staff confidentiality obligations. No system is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep your device secure.

If a personal data breach occurs that is likely to affect you, we will notify you and the relevant authorities as required by law.

9. Cookies and Similar Technologies

On our website we use:

Essential cookies, needed for login, security and basic functionality.
Analytics cookies, to understand how visitors use the site.
Advertising cookies, [only if used], to measure campaigns.

You can manage cookies through your browser settings or our cookie banner. Blocking essential cookies may affect how the site works. In the mobile app, similar technologies (such as SDKs and device identifiers) are used for analytics and diagnostics; you can reset or limit your advertising ID in your device settings.

10. Your Rights and Choices

Depending on where you live, you may have the following rights:

Access the personal data we hold about you and receive a summary or copy.
Correct or update inaccurate or incomplete data.
Delete your data, subject to legal retention requirements.
Withdraw consent at any time, without affecting processing already carried out. This includes turning off location access or marketing messages.
Object to or restrict certain processing, including processing based on legitimate interests.
Data portability: receive your data in a structured, commonly used format.
Nominate another person to exercise your rights on your behalf in the event of your death or incapacity (India DPDP Act).
Grievance redressal: raise a complaint with us, and if unresolved, with the relevant authority.

How to exercise your rights: email [privacy@yourdomain.com] or use Settings > Privacy in the app. We may need to verify your identity first. We will respond within [30] days, or sooner if the law requires.

Marketing opt-out: click "unsubscribe" in any marketing email or change your notification settings in the app.

Deleting your account: go to Settings > Account > Delete account, or contact us.

11. Region-Specific Information

India

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under them. Our Grievance Officer's details are in Section 2. We will acknowledge complaints within [24–48 hours] and aim to resolve them within [15–30] days.

European Economic Area, United Kingdom and Switzerland

If you are in these regions, we process your data under the GDPR / UK GDPR on the legal bases listed in Section 4. You also have the right to lodge a complaint with your local data protection authority.

California, USA

If you are a California resident, you have the right to know what personal information we collect, use and disclose, to request deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioural advertising [confirm]. We will not discriminate against you for exercising your rights.

12. Children's Privacy

The Services are not directed to children under [18 in India / 16 in the EEA / 13 in the USA], and we do not knowingly collect personal data from them without verifiable parental consent as required by law. If you believe a child has provided us with personal data without proper consent, contact us at [privacy@yourdomain.com] and we will delete it promptly.

13. Third-Party Links and Services

The Services may link to websites, apps or services operated by others. We are not responsible for their privacy practices. Please read their policies before sharing any data.

14. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you through the app, by email, or by a prominent notice on our website before the changes take effect. The "Last updated" date at the top shows when the policy was last revised. Continued use of the Services after the effective date means you accept the updated policy, except where the law requires fresh consent.

15. Contact Us

If you have questions, concerns or requests about this Privacy Policy or your data, please contact us:

[Legal Entity Name]
Attn: Data Protection / Grievance Officer
[Address]
Email: [privacy@yourdomain.com]
Phone: [Number]

Search This Blog

mTrack

mTrack Plus Privacy Policy