Last updated: July 10, 2026
This policy explains what personal data the TrackScore mobile app collects, why, and how it is used and protected. Questions: trackscore.admin@gmail.com.
TrackScore is published by Yohann Cesson, sole proprietor registered in France — SIREN 107 445 397. The data controller can be reached at trackscore.admin@gmail.com.
| Category | Examples | Purpose |
|---|---|---|
| Account | Email, first/last name, username, profile photo | Create and manage your account, identify you in the community |
| Physical data | Date of birth, height, weight, sex, weight history | BMI, calorie estimates and adjustments, personalization |
| Sport goals | Goal, level, discipline, frequency | Tailor tracking to your practice |
| Training activity | Programs, sessions, sets, loads, personal records | Progress tracking, history, personalized insights |
| Nutrition | Food journal, recipes, shopping list, meal plan | Calorie and meal tracking |
| Community content | Posts, photos, workout recaps, likes, follows, follow requests | Social features (feed, sharing) |
| Coach space | Coach–client link, chat messages (text and photos), advice, assigned programs | Coaching by a coach you chose — see section 6 |
| Moderation | Content or message reports, blocked users | Community safety, abuse handling |
| Health data (read-only) | Steps, distance, calories burned | Dashboard display — see section 4 |
| Technical data | Session identifier, error logs | Security and proper operation |
The app requests certain permissions, only when they are needed:
You can revoke these permissions at any time in your phone settings.
With your consent, TrackScore reads your steps, distance and active calories from Apple Health (HealthKit) on iOS, or from your device's sensors. This data is used only to display your dashboard and estimate your calorie expenditure; the source (Apple Health) is identified in the interface. The app does not write data to Apple Health. Your health data is never used for advertising or marketing, never sold, never shared with third parties, and never used for research without separate consent, in accordance with Apple's HealthKit rules.
The "AI Scan" feature lets you photograph a meal to estimate its calories and macronutrients. The photo is sent, only at analysis time, to our AI provider (Anthropic) through a secure server. It is used to produce the estimate and is not otherwise exploited by TrackScore. This feature is optional: nothing is analyzed unless you take or choose a photo yourself.
Linking with a coach is voluntary: the link only exists if you enter the code your coach gave you. Once linked:
You control the visibility of your profile and posts: you can make your profile private (your posts are then visible only to followers you approved) and choose a "Public" or "Friends" audience for each post. These rules are enforced server-side.
| Service | Role | Data involved |
|---|---|---|
| Supabase | Hosting, database, authentication, photo storage | All account and content data |
| Google Sign-In | Sign-in (optional) | Name, email address |
| Sign in with Apple | Sign-in (optional) | Name, email (or Apple's relayed private email) |
| OpenFoodFacts | Barcode product lookup | The scanned barcode (no personal data) |
| Anthropic (Claude) | Meal photo analysis for calorie estimates | The meal photo, at analysis time |
| Apple (App Store) | Payment processing if you subscribe | Handled by Apple; we never receive your payment details |
We do not sell your personal data and do not run targeted advertising.
The "Shop" section may feature products (food supplements) sold by partners. Tapping a product redirects you to the partner's website in your browser: any purchase happens there and is governed by their own privacy policy. TrackScore transmits no personal data to the partner during the redirection.
Some providers may process data outside the European Union (notably Anthropic, a US company, for AI photo analysis). These transfers are covered by appropriate safeguards (standard contractual clauses). Database hosting is provided by Supabase under a data processing agreement (DPA); the hosting region is available on request.
Processing of your account and activity data is based on the performance of the service you request. Processing of health data (weight, height, BMI, steps, calories, activity), a special category under Article 9 GDPR, is based on your explicit consent, collected at sign-up and, on iOS, through the Apple Health permission. Sharing data with a coach is based on your consent (entering the code yourself), revocable at any time. Your data is kept as long as your account is active; when the account is deleted, it is erased (see section 13).
Under the GDPR, you have the right of access, rectification, erasure, restriction, objection, portability, and the right to withdraw consent at any time. The app includes built-in data export (Profile → Settings → Export my data) in a machine-readable format, as well as account deletion. For any other request, write to trackscore.admin@gmail.com. You may also lodge a complaint with the CNIL (www.cnil.fr).
You can delete your account directly in the app: Profile → Settings → Delete my account. All your data (profile, journal, sessions, records, posts, recipes, photos, coach-chat messages) is then permanently erased. You can also write to us to request deletion.
Data access is protected by authentication and by database-level security rules (Row Level Security): each user can only access their own private data, and visibility rules (private profile, post audience, coach link) are enforced server-side. Photos exchanged in the coach chat are stored in a private space, accessible only through time-limited signed links.
In France, the age of digital consent is 15. You must therefore be at least 15 to use TrackScore; below that age, consent from a holder of parental authority is required.
This policy may be updated. The date at the top indicates the latest revision.