Last updated: July 17, 2026
This policy describes what information STR Tracker collects, how it is used, and your choices. STR Tracker is operated by Vicherana Ventures LLC ("we"). The policy applies to the iOS and Android apps and the web app. We collect the minimum needed to run the service. We do not sell your data, and we do not show ads. Last updated: July 17, 2026.
Account information: email address, password (stored as a hash by our authentication provider), your name, and optionally your spouse's name. Activity data: properties, time entries, activity types, notes, your tracking goal, reminder preferences, and files you attach (photos, PDFs, documents). Optional location data: if you choose to tag an entry with your current location, or attach a photo whose saved location you choose to use, those coordinates are stored with that entry — location is never collected in the background. This data is stored in our database and file storage, hosted by Supabase, so it can sync to your account across devices and the web. Voice notes (optional, Cloud Plus): if you choose to record a voice note, the audio is transmitted securely to our transcription processor to produce a text transcript and an English translation; the audio is processed transiently and is not stored by us or the processor — only the resulting text is saved with your entry.
The App does not connect to or read any email account. To attach an email, you save it (for example, as a PDF) into the App's folder using your device's file manager, and the App lists the files in that folder so you can attach them. The App only reads files you place in its own folder or explicitly choose from your device. Attached files are uploaded and stored like any other attachment. STR Tracker requests no access to your mailbox, contacts, or any third-party account.
Purchases are processed by Apple (App Store), Google (Google Play), or Stripe (web checkout). We never receive or store your full card number or payment credentials. We receive and store only what is needed to know what you are entitled to: transaction and subscription status, plan type, renewal/expiry dates, and pseudonymous customer identifiers. In-app purchase status is validated through RevenueCat, which processes a pseudonymous user identifier and purchase receipts for that purpose. Stripe processes your payment details as an independent controller under its own privacy policy.
If you enable Face ID / Touch ID / biometric sign-in, your login credentials are stored only in your device's secure keychain, protected by the device's biometric access control. Your biometric data (face or fingerprint) is handled entirely by the operating system, never leaves your device, and is never transmitted to or accessible by us. You can disable biometric sign-in at any time; deleting the App also removes the stored credentials.
We use your information solely to: (a) operate the App and sync your data across sessions and devices; (b) generate the reports you request; (c) process purchases and maintain your entitlements; (d) send service messages such as authentication emails and data-deletion reminders; (e) respond to support requests; and (f) maintain security and prevent abuse. We do not use your data for advertising, profiling, or sale to third parties.
We rely on a small number of processors to operate the service: Supabase (database, authentication, file storage), Vercel (web app hosting), Apple and Google (app distribution, in-app purchases, and, if enabled, notifications), RevenueCat (in-app purchase validation and entitlement management), Stripe (web payments), Resend (transactional email delivery), and Groq (voice-note transcription and translation; audio is processed transiently and not retained). Each processes data only as needed for its function.
Your data is retained while your account is active, subject to the scheduled deletion described in the Tax Disclaimer and Terms: with Standard storage, data for a completed tax year is permanently deleted on September 15 of the following year. You may delete individual entries and attachments at any time. Deleting your account (Settings → Delete Account) permanently removes your profile, activity logs, properties, attachments, entitlement records, and stored files from our systems. Device-stored data (preferences, and biometric-protected credentials if enabled) is removed when you uninstall the App.
Data is encrypted in transit (TLS) and at rest by our hosting provider. Database access is restricted by row-level security so each account can only read and write its own records; entitlement records can only be written by our servers. Payment webhooks are signature-verified. No system is perfectly secure; please use a strong, unique password.
Depending on where you live (e.g., California, the EU/EEA), you may have rights to access, correct, export, or delete your personal information. The App provides these directly: your data is visible in the App, exportable as PDF/Excel, and deletable in Settings. For any other request, contact us and we will respond within the time required by applicable law.
The App is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
We will post any changes to this policy in the App and update the date above. Material changes will be highlighted in the App or sent by email.
Privacy questions or requests: support@strtrackerapp.com