Privacy Notice

OnTrack is operated by Paul Stafford in the United Kingdom. For anything about privacy or your information, contact privacy@getontrack.uk.

OnTrack is a routine and planning aid. It is not a medical, diagnostic, therapeutic, safeguarding or behaviour-monitoring service, and it does not attempt to work out anyone's diagnosis, mood, disability or support needs.

Account and sign-in

When you create an account you provide an email address and password, or you sign in with Google. If you sign in with Google, Google confirms who you are and shares your name and email address with OnTrack. Passwords are handled by the sign-in service and are stored only in a hashed form. We use this to give you an account and keep it secure.

Household and profiles

You choose a display name for your account and create profiles — either “My OnTrack” for yourself or profiles for other people in your household. A profile holds a name, an optional icon and colour, whether Read Aloud and Sleep Mode are on, an optional short guidance message, and who may change that profile's day. OnTrack does not ask for or require a structured date of birth, diagnosis or health information, and has no field for any of them.

Routines, tasks and today's plan

OnTrack stores the routines and tasks you create, including the task name, an optional description, whether it is a priority task, and its position in the day. It also stores any changes you make to a single day with “My day changed” or Lighter Day, so the Daily Board shows the right plan.

Task completion

When someone marks a task as done, OnTrack records that the task was completed and when. This is what makes the Daily Board and the household check-in work. OnTrack does not use completion records to score, rank or assess behaviour.

Task pictures

You may choose an optional picture from OnTrack's built-in image library to help identify a task. These pictures are provided by OnTrack, contain no personal information and can be changed or removed at any time. New personal photo uploads are not supported. If an older test account still contains a legacy uploaded picture, it may remain visible until it is removed or replaced as part of the agreed clean-up process.

Paired devices

You can pair a phone or tablet as a Daily Board for one profile. OnTrack stores a device record with a random device token, the label you give it, a short-lived pairing code and when the device was last seen. A paired device only ever shows that profile's day.

Reminders and check-ins

If you turn reminders on, OnTrack stores your chosen times and settings, the browser push subscription for that device (an address supplied by your browser plus encryption keys), the browser's user-agent string, and a record of whether each reminder was accepted or failed. The household check-in tells the account holder how many tasks are still open for the profiles they chose to include. It does not send any wellbeing, mood or behaviour information, because OnTrack does not collect any.

Feedback

If you send feedback, OnTrack stores what you wrote, the page you were on, your browser's user-agent string, and — only if you tick the box — an email address so we can reply.

Security and technical information

To protect pairing codes and the Management PIN from repeated guessing, OnTrack keeps a short-lived counter of failed attempts. It is keyed by a one-way (hashed) value derived from a random identifier stored on the device and from coarse network information, so it cannot be read back as an address. Our hosting and backend providers also process ordinary server logs, which can include IP addresses, in order to run and secure the service.

Different parts of OnTrack rely on different lawful bases, depending on what the information is used for.

• Contract — for the account holder's own account: your email address, sign-in, your account display name and your own “My OnTrack” profile. We need these to provide the service you signed up for.
• Legitimate interests — for information about other people in your household, including children: profile names, icons and settings, routines and tasks, what has been marked as done, changes to a single day, letting authorised household managers see that profile, pairing a device to one profile, and the security processing that protects it. In plain terms: a household routine app cannot work unless the household's routines can be stored and shown to the people running them. We keep this to the minimum needed, do not use it for advertising, profiling or scoring, and anyone in the household can ask for their information to be corrected or removed. We have considered whether this is fair to the people concerned, and we think it is because it only does what the household expects the app to do.
• Consent / your permission — for browser notifications. Reminders and check-ins only happen if you allow notifications in your browser and turn them on in OnTrack, and you can turn them off at any time.
• Legitimate interests — for keeping the service secure and working (limiting repeated failed pairing or PIN attempts, error and server logs) and for responding to feedback you choose to send.

OnTrack does not sell personal information and does not use it for advertising. Information is only shared where needed to provide and secure the service, including with the service providers listed below and with authorised people and devices within the same household where the product is designed to show that information.

• Lovable — Hosts and serves the OnTrack application and its backend services.
• Supabase — Provides the database, sign-in service and private file storage used by OnTrack.
• Google (sign in with Google, optional) — If you choose to sign in with Google, Google confirms your identity and shares your name and email address with OnTrack.
• Your browser's push service (for example Apple, Google or Mozilla) — If you turn reminders on, your browser's own push service delivers the notification to your device.

Within a household, people who manage the account or a profile can see that profile's routines, tasks and completion. That is how a shared household app works, and it should be clear to everyone using it.

Some of our service providers may process personal information outside the United Kingdom. Where a restricted international transfer takes place, it must be covered by an applicable UK adequacy arrangement, appropriate safeguards or another lawful transfer mechanism under UK data protection law. We keep our provider arrangements under review and can provide more information about the current transfer position if you contact privacy@getontrack.uk.

Your account and its information are kept for as long as the account remains active. Some items are shorter-lived by design: pairing codes expire quickly and failed-attempt records are removed within about a day.

You can delete individual routines, tasks and profiles in the app. The account holder can also delete the whole account in the app, under Account, without contacting us: this removes household profiles, routines and tasks, completion history, day changes, paired Daily Boards and devices, reminders, check-ins and account-linked notification settings, and closes the sign-in. Paired Daily Boards stop working, and the deletion cannot be undone. Feedback you have sent us is kept only as anonymous support correspondence with any contact email removed.

If you would rather ask us to do it, you can still email privacy@getontrack.uk. We may need to confirm that the request comes from the account holder. Some provider backups and security logs may remain for a limited period until they expire or are overwritten in the normal cycle.

OnTrack does not use advertising or behavioural-tracking cookies. The app stores only the information needed to keep you signed in, remember a paired device, protect the Management PIN and pairing flow, and remember functional preferences you choose. There is currently no advertising analytics or cross-site tracking in the app, so there is no consent banner to click through.

• Sign-in session (strictly necessary) — Keeps you signed in so the app can load your household.
• Paired device token (strictly necessary) — Lets a paired Daily Board open the correct profile without signing in each time.
• Pairing installation id (strictly necessary) — A random value used only to limit repeated failed pairing attempts on one device.
• Management PIN session (strictly necessary) — Remembers that the Management PIN was entered, for the current browser session only.
• Introduction and banner preferences (functional) — Remembers that you have seen the introduction, closed a reminder banner or celebrated today.
• Last screen and sleep-screen dismissal (functional) — Returns you to where you were and keeps screens calm.

Clearing your browser storage will sign you out, unpair a paired Daily Board and reset these preferences.

Information is sent over encrypted connections and stored by our providers with access rules that limit each account to its own household. Repeated failed pairing and PIN attempts are slowed down. No online service can promise perfect security, and OnTrack does not use end-to-end encryption, so please do not put sensitive personal details into task names or descriptions.

OnTrack can be used by children as part of a household. The service is designed so children can use a paired Daily Board for one profile without being given access to household-management controls. OnTrack does not use children's information for advertising, behavioural scoring or diagnosis profiling. Household managers can see the routine, task and completion information for profiles they are authorised to manage. A shorter “Your privacy” page is available in simple language, and children or young people can contact us directly at privacy@getontrack.uk if they have a question about their information.

UK data protection law gives you a number of rights. Which rights apply can depend on the information involved and why we are using it. Depending on the circumstances, you may be able to ask us for a copy of your information, correct it, delete it, restrict or object to its use, or receive certain information in a portable format. Where we rely on your consent, you can withdraw that consent at any time. To make a request, contact privacy@getontrack.uk. We may need to confirm your identity before acting on a request.

If you are unhappy with how we have handled your information, you can contact us at privacy@getontrack.uk. You also have the right to complain to the Information Commissioner's Office (ICO).

If OnTrack changes in a way that affects your information, we will update this notice and change the date at the top of the page. This notice is governed by the laws of England and Wales, with the courts of England and Wales having jurisdiction.