Last updated: June 24, 2026
This policy explains what personal data the TrackScore mobile app collects, why, and how it is used and protected. TrackScore is published by Yohann Cesson (individual developer). Questions: trackscore.admin@gmail.com.
| Category | Examples | Purpose |
|---|---|---|
| Account | Email, first/last name, username, profile photo | Create and manage your account, identify you in the community |
| Physical data | Date of birth, height, weight, sex | BMI, calorie estimates, personalization |
| Sport goals | Goal, level, discipline, frequency | Tailor tracking to your practice |
| Training activity | Programs, sessions, sets, loads, personal records | Progress tracking and history |
| Nutrition | Food journal, recipes, shopping list, meal plan | Calorie and meal tracking |
| Community content | Posts, photos, likes, follows | Social features (feed, sharing) |
| Health data (read-only) | Steps, distance, active calories | Dashboard display — see section 3 |
We request permissions only when needed: Camera (barcode and meal photos), Photo library (profile/post/recipe photos), Motion/pedometer (steps, distance, calories), Calendar (optional export of planned meals/sessions), Notifications (meal reminders). You can revoke them anytime in your phone settings.
With your consent, TrackScore reads steps, distance and calories to display your dashboard. The app does not write data to Apple Health. Health data is never used for advertising, sold, or shared with third parties for marketing.
| Service | Role | Data |
|---|---|---|
| Supabase | Hosting, database, authentication, photo storage | All account and content data |
| Google Sign-In | Optional login | Name, email |
| Sign in with Apple | Optional login | Name, email (or Apple's relayed private email) |
| OpenFoodFacts | Barcode product lookup | The scanned barcode (no personal data) |
| Anthropic (Claude), if enabled | Meal photo calorie estimation | The meal photo, at analysis time |
We do not sell your personal data and do not run targeted advertising.
Some processors may handle data outside the EU (notably Anthropic, a US company, when AI photo analysis is enabled). Such transfers are covered by appropriate safeguards (standard contractual clauses). Database hosting is provided by Supabase; the hosting region is available on request.
Account and activity data are processed to perform the service you request. Health data (weight, height, BMI, steps, calories, activity), a special category under GDPR Article 9, is processed on the basis of your explicit consent, collected at sign-up and, on iOS, via the Apple Health authorization.
Under the GDPR you have rights of access, rectification, erasure, restriction, objection, portability and to withdraw consent at any time. Contact trackscore.admin@gmail.com. You may also lodge a complaint with the French CNIL.
You can delete your account directly in the app: Profile → Settings → Delete my account. All your data is then permanently erased. You may also email us to request deletion.
Data access is protected by authentication and database-level Row Level Security: each user can only access their own private data.
In France the age of digital consent is 15. You must be at least 15 to use TrackScore; below that age, consent from a holder of parental authority is required.
This policy may be updated; the date above shows the latest revision.