Privacy Policy

Who we are

KeepInTracks provides business and personal productivity software (the “Services”), including KeepInTracks Business (team workspaces) and KeepInTracks Personal. This policy describes how we handle personal information when you use our marketing site, apps, and related APIs.

For privacy requests, contact privacy@keepintracks.com.

What we collect to run the product

Account information you provide (such as email address and name) to create and sign in to a KeepInTracks login.

Business workspace data that you or your team enter (for example contacts, invoices, products, and settings). That content belongs to the business customer and is processed to deliver the Services.

Personal app data you choose to store (for example journaling or goals content) in your personal workspace.

When you send a KeepInTracks Personal Circle invite by email, we process the invitee’s email address and a one-time invite token so we can deliver the invitation message.

Technical logs needed to operate and secure the Services (such as request metadata and error diagnostics). We aim to minimize identifiers in logs.

What we do not collect

We do not use advertising networks, cross-site tracking pixels, or third-party analytics SDKs in our apps or marketing site.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

We do not require browser cookies to sign you in or remember your theme and language preferences.

Cookies and local storage

KeepInTracks apps do not set first-party cookies for authentication, preferences, or analytics.

Sign-in sessions for the business and personal apps are stored by our auth client in the browser’s localStorage (with refresh-token rotation). Customer portal access tokens are stored in sessionStorage for the browser tab.

Theme and language preferences are stored in localStorage on your device so they work before and after sign-in.

Infrastructure providers that host our Services (for example Cloudflare and Supabase) may set their own cookies on their domains as part of delivering security or platform features. Those cookies are controlled by those providers, not by KeepInTracks application code.

Because we do not use non-essential tracking cookies in our apps, we do not show a cookie consent banner.

Canada (PIPEDA) and marketing consent (CASL)

We process personal information for the purposes described in this policy, including providing and securing the Services you request.

Commercial electronic messages (where applicable) are handled under Canada’s Anti-Spam Legislation (CASL). Marketing consent is collected and recorded separately from product account data where required.

United States (including CCPA-style disclosures)

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

Depending on your location, you may have rights to request access to or deletion of personal information we hold about you. Contact privacy@keepintracks.com. We may need to verify your identity before fulfilling a request.

Service providers

We use trusted processors to operate the Services, including Supabase (authentication and database) and Cloudflare (hosting, edge delivery, and transactional email delivery for product messages such as Circle invites and workspace invitations). They process data under our instructions to provide those functions.

Retention and account choices

We retain account and workspace data while your account or workspace is active and as needed to provide the Services, meet legal obligations, and resolve disputes.

In-product controls (where available) let you close a personal workspace, leave a business membership, or delete a KeepInTracks login when eligibility rules are met. You may also contact privacy@keepintracks.com for assistance.

Changes

We may update this policy as the product evolves. We will post the updated version on this page with a revised effective date. Material changes that affect how we process personal information will be communicated in a reasonable manner.

Counsel review

This is a product policy describing our current architecture and practices. Independent legal review is recommended before relying on it for enterprise contracting.