Privacy Policy

01

Who we are and what this policy covers

This Privacy Policy is provided by PREDRAG BOGDANIC PR CODING ZONE (“Coding Zone,” “we,” “us,” or “our”), the developer and operator of KeepOnTrack.

KeepOnTrack is an iOS food-diary and nutrition-tracking app. It lets you search for foods, scan product barcodes, record meals, review nutrition totals, save frequently used meals, attach an optional meal photo, manage subscription access, and optionally sync logged nutrition to Apple Health. This policy applies when you use the app, visit this policy page, or contact us about KeepOnTrack.

We decide why and how personal information is processed for KeepOnTrack and are the data controller where that term applies. If you do not agree with this policy, please do not use the app.

02

Information we collect

Account information

KeepOnTrack uses Sign in with Apple. When you create or access an account, Apple provides us with an account identifier and, depending on the choices you make, your name and email address. Apple may provide a private relay email address instead of your personal email. Supabase processes the authentication session needed to keep you signed in.

Food diary and nutrition information

We collect and store information you add to KeepOnTrack, including:

• food and meal names, brands, product barcodes, and food-source identifiers;
• serving descriptions, quantities, and the number of servings;
• calories, macronutrients, micronutrients, caffeine, and other nutrition values;
• meal type and the date and time associated with a diary entry; and
• saved-meal names, notes, ingredients, preferences, and optional photos.

Nutrition and food-diary information may be considered health or sensitive personal information in some jurisdictions. We process it only to provide the features you request and do not use it to infer unrelated characteristics about you.

Subscriptions and purchases

If you start or manage a KeepOnTrack subscription, Apple processes your payment and billing information. KeepOnTrack receives limited purchase information through Apple’s in-app purchase system, such as the subscription product, transaction identifier, purchase and expiration dates, renewal or cancellation status, and entitlement status. We use this information to activate paid features, restore purchases, provide support, maintain transaction records, and prevent fraud. We do not receive your full payment-card or bank-account details.

Food searches and barcode lookups

Search terms and scanned or manually entered barcodes are sent to our backend to return food and nutrition results. If a barcode is not available in our product cache, the barcode is sent to Open Food Facts. Product information returned from Open Food Facts may be stored in a shared product cache that is not linked to an individual user profile.

Camera and selected photos

With your permission, KeepOnTrack uses the camera to scan food barcodes. Camera frames are processed for scanning and are not stored or uploaded.

If you choose a saved-meal photo, Apple’s system photo picker gives the app access only to the image you select. The image is resized and compressed on your device, then uploaded to private cloud storage associated with your account. KeepOnTrack does not request access to your entire photo library.

Technical and support information

We use Google Analytics for Firebase to understand how the app is used and Firebase Crashlytics to identify and troubleshoot crashes. Depending on your choices and device configuration, these services may process an app-instance or installation identifier, app interactions and session information, subscription events, crash stack traces, diagnostic logs, app state at the time of a crash, device model, operating-system and app version, language, approximate geographic region derived from network information, and IP address. More detail appears in Cookies, analytics, and tracking.

Our other hosting and API providers may process standard technical information needed to deliver and secure their services, such as IP address, request date and time, operating-system or device information, and security or error logs.

If you contact us, we collect your email address, the contents of your message, and any other information you choose to provide so that we can respond.

03

How we use information

We use the information described above to:

• create, authenticate, maintain, and secure your account;
• store and display your diary, saved meals, photos, and nutrition history;
• calculate nutrition totals and remember your serving preferences;
• search food data and look up products by barcode;
• provide optional Apple Health syncing when you enable it;
• process subscriptions, provide paid features, and restore purchases;
• measure feature usage and improve the app’s performance and usability;
• detect, diagnose, and fix crashes and technical problems;
• operate, maintain, troubleshoot, and protect the app and backend;
• respond to support and privacy requests; and
• comply with law and establish, exercise, or defend legal claims.

We do not use personal information for targeted advertising, cross-context behavioral advertising, data-broker services, or automated decisions that produce legal or similarly significant effects.

04

Legal bases for processing

Where applicable law requires a legal basis, we rely on the following:

• Performance of a contract: to create your account and provide the diary, saved-meal, search, storage, and syncing features you request, and to manage subscription entitlements and purchases.
• Consent: when you enable optional permissions or features, particularly Apple Health syncing, camera access, and selection of a saved-meal photo, and for Analytics where applicable law requires consent. You may withdraw consent through the app or iOS Settings, as applicable.
• Legitimate interests: to secure the service, prevent misuse, troubleshoot problems, respond to support, and understand and improve whether the service is operating correctly. We balance these interests against your privacy rights and do not use the resulting information for advertising or cross-app tracking.
• Legal obligations and legal claims: where processing is required by law or reasonably necessary to protect rights, safety, and the integrity of the service.

If you are in a jurisdiction where consent is the only permitted basis for particular sensitive information, we process that information only with the consent or authorization required by law.

05

Apple Health

Apple Health integration is optional and remains off until you enable it. If you give permission, KeepOnTrack writes nutrition information from new diary entries to Apple Health. Depending on the nutrients in the entry, this may include energy, protein, carbohydrates, fats, vitamins, minerals, caffeine, the food or meal name, and the entry time.

KeepOnTrack does not request permission to read information from Apple Health. We therefore do not receive or store data read from Apple Health on our servers. Your KeepOnTrack diary is stored in our service separately, whether or not Apple Health sync is enabled.

Turning sync off stops future syncing but does not remove information already written to Apple Health. You can view or delete that information in the Health app and manage KeepOnTrack’s permission in iOS Settings. Health information is never used for advertising, marketing, or data brokerage.

06

When and with whom we share information

We disclose information only as needed to operate KeepOnTrack, at your direction, or for the limited legal and business purposes described here. Our principal providers are:

• Supabase — account authentication, database hosting, API services, and private saved-meal image storage. Supabase privacy policy.
• Apple — Sign in with Apple, in-app subscriptions and purchases, the system photo picker, and Apple Health. Information handled by Apple is subject to Apple’s terms and privacy practices. Apple privacy policy.
• Google Firebase — privacy-conscious product analytics and crash reporting through Google Analytics for Firebase and Firebase Crashlytics. Google privacy policy.
• Open Food Facts — product and nutrition information for barcode lookups that are not available in our cache. Open Food Facts privacy information.
• Netlify — hosting for this public privacy-policy page and the Coding Zone website. Netlify privacy policy.

Providers may process standard network and security information when you connect to their services. We expect providers that process personal information on our behalf to use protections appropriate to their role and applicable law.

We may also disclose information if required by law or a valid legal process, to protect users or the security and rights of the service, or in connection with a merger, financing, acquisition, reorganization, or sale of all or part of the business. In a business transfer, we will take reasonable steps to require continued protection of personal information.

We do not sell or rent personal information and do not share it for targeted advertising. We do not share diary, nutrition, photo, or Apple Health information for marketing.

07

Cookies, analytics, and tracking

KeepOnTrack uses Google Analytics for Firebase to measure app opens, sessions, feature interactions, subscription events, device and app characteristics, and general performance trends. Firebase assigns an app-instance identifier for this purpose and may derive an approximate geographic region from network information. We use these measurements to understand which features are useful and improve the app.

We use Firebase Crashlytics to receive crash reports and related diagnostics, which may include an installation identifier, crash stack traces, device and operating-system information, app state, timestamps, and breadcrumb information about actions leading to a crash. This helps us reproduce and fix technical problems.

We configure these services for product measurement and reliability, not advertising. KeepOnTrack does not use the iOS advertising identifier, link Analytics to Google Ads, enable ads personalization, or use Firebase data for cross-app tracking. We do not intentionally include your email address, diary content, food or meal names, photos, or Apple Health information in Analytics event parameters, Crashlytics logs, or custom diagnostic fields.

Where applicable law requires consent, Analytics collection is enabled only after you choose to allow it. You can later withdraw that consent through the privacy controls provided in the app. Crash reporting is used for service reliability based on our legitimate interests, or consent where local law requires it.

The static privacy-policy page does not set cookies through code maintained in this website. Hosting providers may still keep ordinary server logs for delivery, reliability, abuse prevention, and security. Because we do not use this page for targeted advertising or cross-site tracking, browser “Do Not Track” and opt-out preference signals do not change how it operates.

08

International transfers

Coding Zone is based in Serbia. Some service providers may process information in other countries, including countries whose data protection laws may differ from those where you live. Where required, we rely on appropriate contractual or other recognized safeguards for international transfers and require providers to protect information in accordance with applicable law.

09

How long we keep information and how to delete it

We generally retain account information and app content while your account is active because that information is needed to provide KeepOnTrack. You can edit or delete individual diary entries, saved meals, and saved-meal photos through the app.

Until the in-app Delete Account option is available, you can request deletion of your account and associated personal information by emailing predrag@codingzone.io. Once that option is available, you may also start deletion directly from the app’s account settings. We may ask you to verify that you control the account. We aim to complete a verified deletion request within 30 days, unless applicable law requires a different period or we must retain limited information for security, fraud prevention, dispute resolution, or another legal obligation.

Account deletion removes or de-identifies the account information and user-linked diary entries, saved meals, preferences, notes, and saved-meal photos held by KeepOnTrack. Deleted information may remain temporarily in restricted backups until those backups are overwritten. We may retain limited transaction, security, or request records where required for legal compliance, fraud prevention, dispute resolution, or enforcement. Provider security and request logs are retained according to provider schedules. Product information in the shared barcode cache may remain because it is not linked to an individual user profile.

Analytics data is retained according to the retention period configured for our Google Analytics property. Firebase Crashlytics generally retains crash reports and associated identifiers for a limited period under Google’s retention schedule.

Deleting a KeepOnTrack account does not automatically remove information previously written to Apple Health. You control and can delete that information in the Health app. Account deletion also does not automatically cancel an active App Store subscription; you can manage or cancel the subscription in your Apple account settings.

10

How we protect information

We use reasonable technical and organizational safeguards designed to protect personal information. These include encrypted network connections, authenticated access, account-level database controls, and private storage with time-limited access links for saved-meal photos.

No method of electronic storage or transmission can be guaranteed to be completely secure. You should protect access to your device and Apple account and contact us if you believe your KeepOnTrack account has been compromised.

11

Children

KeepOnTrack is not intended for children under 16, and you must be at least 16 to create an account. If the law where you live requires parent or guardian consent for someone who is 16 or older but has not reached the local age of legal majority, you may use KeepOnTrack only with that consent. We do not knowingly collect personal information from anyone below the applicable minimum age. If we learn that we have done so, we will take reasonable steps to delete it. A parent or guardian who believes this has occurred should contact us.

12

Your privacy rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal information; obtain a portable copy; withdraw consent; or complain to a data-protection authority. These rights may be subject to legal limitations.

You can also control information directly by:

• choosing whether to share your name or personal email through Sign in with Apple;
• allowing or denying camera and Apple Health permissions in iOS Settings;
• turning Apple Health syncing off from your KeepOnTrack profile;
• withdrawing Analytics consent through the app’s privacy controls where consent applies;
• choosing whether to upload or retain a saved-meal photo; and
• editing or deleting diary entries and saved meals in the app.

To exercise a privacy right, email predrag@codingzone.io. We may request information reasonably necessary to verify your identity, account, or authority to act for another person. We will not discriminate against you for exercising a privacy right.

If we decline a request and applicable law provides an appeal right, you may appeal by replying to our decision. You may also contact the competent privacy or data-protection authority where you live.

13

Additional disclosures for United States residents

The following table summarizes categories of personal information we may have collected during the preceding 12 months. Whether a category applies to you depends on the features you use.

We collect applicable categories from you, Apple, and ordinary operation of the app and its service providers. We use them for the purposes in How we use information, retain them as described in Retention and deletion, and disclose them to the providers listed in Sharing and providers.

We have not sold personal information or shared it for cross-context behavioral advertising during the preceding 12 months. We do not use sensitive personal information to infer characteristics about users. Residents of states with applicable privacy laws may exercise the rights described above, including use of an authorized agent where provided by law.

14

Changes to this policy

We may update this policy when KeepOnTrack’s features, providers, or legal obligations change. The revised policy will be published on this page with a new “Last updated” date. If a change materially affects how we use personal information, we will provide additional notice where appropriate.