RationalTrack

Privacy Policy

Published 28 September 2026.

The short version

Your data is yours. You can export it and you can delete it.
We never sell, rent or trade it. Not to advertisers, not to data brokers, not to anyone, at any price.
There are no ads and no tracking pixels. No ad networks, no third-party analytics, no behavioural profiling, no cross-site tracking.
Your data is not the product. RationalTrack is operated by Fractionl, a Canadian corporation, but the app is a personal project rather than a commercial venture built on your information. Paid plans exist to cover running costs — mainly AI usage and hosting. The app earns nothing from your data, directly or indirectly, and it never will.
A small number of service providers help run specific features. Every one is named below, with exactly what it receives. Nothing goes anywhere that is not on that list.

What we collect

Only what you enter. There is no hidden collection and no inference from your behaviour.

Category	Specifically
Account	Name, email address, password (hashed, never stored readably), timezone, language, and your unit preference
Body measurements	Weight, body-fat percentage, resting heart rate, and waist, chest, hip, arm, thigh and neck measurements
Food	Meals, foods, quantities and the calories and macros you record
Exercise	Workouts, exercises, sets, reps and weights lifted
Sleep and wellbeing	Hours slept, sleep quality, and your mood, emotional state and energy ratings
Goals and habits	Goals, targets, habits, streaks and challenge reports
Things you write	Reality-check narratives, choice-moment descriptions, notes on any entry, and your messages to the support assistant. This is the most personal content in the app and we treat it that way.
Billing	If you subscribe or buy credits: your subscription status and payment records. We never see or store your card number — Stripe handles that.
Technical	Session records including IP address and browser, kept so you can see where your account is signed in

Who else sees it, and exactly what they get

These are service providers doing work on our behalf. They are contractually limited to that work. None of them is permitted to use your data for their own purposes, and none of them pays us or is paid by us for data.

Provider	What it receives	Why
OpenAI	The text you write, and nothing that identifies you. Personal details are stripped before anything is sent — no name, no email address, no account identifier. What goes is the content itself: your reality-check narrative, your planning request, or the routine being narrated. Anything you write in an AI feature is sent to OpenAI and becomes subject to their terms. If you would rather a thought never left the app, do not put it in an AI activity — the manual activities send nothing anywhere.	To parse a reality check, build a plan, or generate narration. These features only run when you start them, so nothing is sent in the background. What OpenAI does with it: text sent through their API is not used to train their models. They retain it for a short period — around 30 days — to monitor for abuse, then delete it. It is not used for any other purpose and it is not shared onward.
Stripe	Your email and payment details, entered on Stripe's own form	To take payment. Card numbers never reach our servers.
Mailgun	Your email address and the contents of emails we send you	To deliver check-in emails, reminders and account mail.
Google, Facebook, Apple	Only your sign-in identity, and only if you choose to sign in with one of them	To let you sign in without another password. If you do not use them, they receive nothing.

That is the complete list. No analytics provider, no advertising network, no data broker, no "partners".

What you can do with your data

See it. Everything the app knows about you is visible in the app.
Get a copy of it. Email marco@fractionl.com and we will send you everything we hold about you, within 30 days. There is no self-service export button yet; the request is handled by a person.
Delete it. Deleting your account deletes everything — your account, your entries, your measurements, your plans, and the recipes, saved workouts and routines you built. Nothing is kept, and nothing is kept un-attributed. There are no carve-outs and we retain no copy of your content for any purpose, including improving the app.
Correct it. Any entry can be edited or removed at any time.

How it is protected

Everything travels over HTTPS.
Passwords are hashed, never stored in a readable form.
One active session per account, and you can see and end your sessions.
Your data is scoped to your account throughout; no other user can read it.
Your data is stored on DigitalOcean infrastructure in Canada, and is backed up by DigitalOcean's own backup service. It is not replicated outside Canada.

Children

RationalTrack is for people aged 16 and over. We do not knowingly collect information from anyone younger. If you believe a child has created an account, email marco@fractionl.com and it will be removed.

Your rights

RationalTrack is operated by Fractionl, a Canadian company, and follows PIPEDA. If you are in the EU or UK, GDPR rights — access, correction, erasure, portability and objection — are honoured for everyone rather than only where legally required.

We do not claim HIPAA compliance. HIPAA governs healthcare providers and insurers; RationalTrack is neither, and claiming a standard we are not bound by would be misleading. What we do instead is written above.

For any privacy request — access, correction, deletion, or a question about this policy — email marco@fractionl.com. Requests are answered within 30 days.

Changes

If this policy changes in a way that affects how your data is handled, we will tell you in the app before it takes effect — not by quietly editing this page.

See also the Terms of Service. Questions about either: get in touch.