Fybetech
Tracker
TREN

Privacy Policy

Last updated: November 13, 2026

1. Scope

This Privacy Policy explains what personal data is processed through the Tracker iOS app (the "App") and the fybetech.com website (the "Site"), both developed by Fybetech, and how that data is protected.

2. Using the App without an account

The App can be used without an account. In that case, your habits, daily entries, notes, reminders, your name and your answers to the welcome questions are stored only on your device and are not sent to Fybetech's servers. Reminders use your device's local notification system.

3. Data processed when you create an account

  • Account details: email address, name and password. Passwords are stored using one-way hashing (BCrypt) and are never kept in plain text.
  • Habit details: name, description, icon, color, category, type, measurement, goal and unit, frequency, order, pause dates, reminder times and messages.
  • Daily entries: date, entered value, completion status and notes.
  • Progress: streak, points and shield counts.
  • Time zone: so that daily calculations follow your local day.
  • Welcome answers: mood, sleep duration, wake-up time, chronotype, routine satisfaction, motivation, obstacles and goals. Sent once, after the account is created.

4. Technical data

  • Session keys: the session key issued when you sign in is stored in the iOS Keychain. Its server-side counterpart is valid for up to 30 days and is revoked when you sign out or delete your account.
  • Verification and password reset codes: codes sent to your email address are valid for a few minutes and are deleted automatically afterwards.
  • IP address: kept for a few minutes in a counter that limits the number of requests, to prevent abuse.
  • Server logs: may contain technical details such as your user number, used to identify errors.

5. Purposes of processing

Personal data is processed only to:

  • create and verify your account,
  • sync your data across devices,
  • calculate streaks, points and shields,
  • send verification and password reset emails,
  • keep the service secure,
  • suggest habits based on your welcome answers and improve the product.

This processing is based on providing the service and on our legitimate interest in keeping it secure. Data is not used for advertising, is not sold, and is not shared with third parties for marketing.

6. Service providers and international transfers

The service relies on the following providers:

  • Hosting: Oracle Cloud Infrastructure, Frankfurt (Germany, European Union).
  • Email delivery: Google (Gmail). Your email address is passed to Google when an email is sent.
  • Domain management (DNS): Cloudflare. App and Site traffic does not pass through Cloudflare.

Because the servers are located in the European Union, data of users outside the EU is transferred there. The App contains no third-party analytics, advertising or crash reporting tools.

7. Retention

Account data is kept for as long as your account exists. When you delete your account, the data is removed from the live system immediately. A copy may remain in server backups for a limited time; backups are used only to restore the system.

8. Deleting your account

You can delete your account in the App under Settings → Account → Delete account. This removes your account, habits, entries, notes, reminders, points and shield history, welcome answers and all sessions from the server, and clears the account data on your device. This cannot be undone. Without an internet connection, the deletion does not run and no data is removed.

9. Your rights

Under the GDPR and Turkey's Personal Data Protection Law (KVKK), you have the right to access your data, request its correction or deletion, object to its processing and, under the GDPR, request its portability. Send requests to fybetech.team@gmail.com. Requests are answered within 30 days.

10. Security

All communication between the App and the server is encrypted with HTTPS. Passwords are stored hashed. The database is not reachable from the internet.

11. Children

The App is not directed at children under 13, and we do not knowingly collect data from them.

12. The Site

The Site uses no analytics or tracking tools. A cookie remembers your language preference, and your browser's local storage remembers your theme.

13. Changes

When this policy is updated, the date at the top of the page changes. Significant changes are also announced in the App.

14. Contact

Questions about this policy: fybetech.team@gmail.com