Privacy policy

Version of 31 October 2026.

In short

To use Trakko, you create an account: with Apple, with Google or with your email address. Your data is stored on servers located in the European Union and you find it again on all your devices. It is used to run Trakko and to improve it. No advertising, no ad tracking.

Controller

MMH SRL (Belgian private limited company), Belgian company number 1022.952.003, Avenue Rommelaere 121, 1020 Brussels (Laeken), Belgium. Contact: by email at trakkoapp@gmail.com, by phone on +32 471 53 14 58, or through the “Write to us” form in the app or on the site. On Google Play, the Android app is published by a partner company on behalf of MMH SRL, which remains the publisher of Trakko and the data controller. That company has no access to your account or your Trakko data: in Google’s console, it only sees what Google shows the publisher of any app (install statistics, crash reports, published reviews).

Data processed

Your account: its technical identifier, your email address and what Apple or Google sends us if you sign in with them (see below); your profile (first name, date of birth, region, statuses, settings, optional profile photo) and, if you fill it in, your situation (type and start date of your pension, 45-year career, dependent children; final year of studies; residence card marked “labour market: limited”; compulsory schooling at 15 and your school holiday dates); your jobs (name, contract type, sector, rate, bonuses, payment mode, payday, team identifier: see “A job’s team”); your shifts (dates, hours, breaks, amounts, bonuses, payment received); your templates and confirmation links; the messages you send us. Trakko no longer asks for an IBAN: any IBAN you entered for the former payment QR is erased from your account when you update the app. Trakko also records, under your technical identifier, which screens you go through and how long you stay on them (in the foreground only, in seconds per screen), which key actions you take (onboarding finished, job added, timer started, shift saved, share, screen error) and, if you open the app through one of our campaign links, the reference of that link (for example “lea”), along with the platform and app version: that is what tells us where the app gets stuck and how people hear about it. On top of that: an installation identifier drawn at random and kept in the phone’s secure storage (it does not come from the device; on iPhone it may come back after a reinstall), so that we count phones rather than accounts; on first launch, the system version and the type of device (phone or tablet); how long your visits last, notifications received or tapped (their kind, never their text), your answer to the notification permission and a few key features (payslip checked or read, with the type of document and the outcome of the reading, recap viewed, shift planned, place alert turned on, ticket shared). To keep robots and store tests out of our figures, we also read what our host keeps of your login session (the app’s or browser’s user agent, the IP address): we only draw the type of device and a network category from it (Apple’s or Google’s network, a connection shared with another account), never the address itself. Never what you type, nor your amounts, nor your employers’ names. Trakko collects no location, contacts or advertising identifier. If you turn on a job’s place alert, your phone itself notices when you arrive at or leave the place you chose: neither that place nor your position is ever sent to Trakko.

Signing in with Apple or Google

With Apple (“Sign in with Apple”) or with Google, Trakko only receives your verified email address (with Apple you can hide it: we then receive a relay address ending in @privaterelay.appleid.com, which forwards our emails to you), your name if you share it (Google adds the link to your profile photo) and the identifier of your account with them. Nothing else: not your password, nor your contacts, photos, calendar, emails or other Apple or Google data. Apple and Google process that sign-in under their own policies. As Apple requires, Trakko keeps a token issued by Apple (in Ireland, readable only by its server functions) to revoke your access when you delete your account. You can also withdraw it yourself, at account.apple.com or myaccount.google.com/connections.

The provisional account of earlier versions

Up to version 1.3, the app created a provisional account on first launch, without an address. When you create your account (or sign in) on a phone that had one, Trakko moves all of its content (profile, jobs, shifts, templates, links, messages, usage measurements) into your account, once, with a one-time code valid for 15 minutes of which our servers keep only a fingerprint. Never the other way round: an account with an address does not give its data away. The provisional account, now empty, keeps only its creation date and its session, to count installations; it is deleted along with your account.

Purposes and legal bases

Running the service you use: creating your account and signing you in (with Apple, Google or your email address), moving the data of your phone’s provisional account into it, counting your hours, calculating, warning you, saving and syncing (performance of the contract). Improving Trakko and understanding its use, through statistics and, where needed, by looking at an account’s journey (where it stopped, which screen crashed); measuring the effect of our campaigns and counting right, without robots or tests (legitimate interest). Answering you when you write to us and helping you when something does not work (legitimate interest). Meeting our legal obligations. Any other use, for example a partnership or an additional service, will only happen with your explicit consent, which you can withdraw at any time.

Who has access

You. Within the publisher, a small team of individually authorised people, who can look at your account in a protected internal tool, only for support, security, fixing problems and improving the app; every time an account is looked at, it is logged there. And the technical providers that host or route the data on behalf of the publisher: Supabase (database and authentication, European Union, Ireland), Resend (email sending, United States, European Commission standard contractual clauses), Vercel (hosting of the site and the web app, United States, same clauses). The stores (Apple, Google) process the installation under their own policies. If you sign in with Apple or Google, that provider knows you use Trakko. On Android, reading a screenshot on your phone (your starting counter, for example) goes through Google’s ML Kit: the image and its text stay on the device, but the library sends Google technical measurements (device model and system, app version, processing time, error codes, a per-installation identifier), which Google uses to run and improve that service. On iPhone, reading goes through Apple Vision, with nothing sent. Your personal data is not passed on to advertisers. Someone you send a confirmation link to sees only the period and the job you chose. Members of a job’s team only see how many of you there are, from 2, never who. Aggregated and anonymised data, which cannot identify you, may be published or shared. For the site chat and the in-depth reading of a payslip, Vercel AI Gateway and the host of the AI model are added: see “The site chat” and “Reading payslips”.

Retention

Your data is kept as long as your account exists and erased when it is deleted, together with the empty provisional account that had moved it there and Apple’s sign-in token. A provisional account (without an address) inactive for more than 24 months may be deleted. Technical logs are erased after 30 days. A message from the form is kept as long as needed to answer it, at most 12 months. A conversation in the site chat is erased 12 months after its last message. A payslip that is read is kept nowhere, and the counter of online readings is erased after three days.

Security

Encryption in transit (HTTPS), per-user data isolation (database-level access rules), sign-in with Apple or Google without Trakko ever seeing your password there, or with an address and a password, the password never stored in readable form, a one-time code to confirm the address and to change it, tokens kept in the phone’s keychain, optional biometric lock. No system is infallible: tell us quickly if you notice a problem.

Your rights

Access, rectification, erasure, restriction, portability, objection: write to trakkoapp@gmail.com. Reply within 30 days. You may also lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be, Rue de la Presse 35, 1000 Brussels).

Minors

Trakko can be used from age 15. If you are under 16, talk to a parent or guardian before creating your account. The publisher does not knowingly collect data from children under 13; if it happened, write to us and it is erased. A parent can request the deletion of their child’s data at the address above.

Cookies and analytics

The site sets no cookies and uses no audience measurement. There is therefore no consent banner, and that is deliberate: Belgian law of 13 June 2005 (article 129) only requires one in order to store or read something on your device beyond what is strictly necessary. This site stores nothing unless you ask it to. One exception, at your request: the site chat keeps your conversation in your browser, but only from your first sent message. As long as you write nothing, nothing is written. The site also sends no request to any third party: the fonts are served from trakko.be and not from Google, so your IP address goes nowhere when you open the page. The only outgoing connections happen if you yourself submit the “Write to us” form, to our database in Ireland, or send a message in the chat (see “The site chat”). Only one thing is counted there: clicks on the campaign links we give to partners (trakko.be/r/…), one number per day, per link and per type of device (iPhone, Android or other), without cookies and without keeping your IP address or anything that identifies you; the link then sends you to the store or the app. No third-party measurement service is used in the app either: the usage measurement described above stays on our own servers, in Ireland. The app and the web app use your device’s or browser’s local storage to work (your data, your session, the installation identifier), never to track you.

A job’s team

When you send a job’s link, show its QR or print its poster, Trakko gives it a random team identifier. It travels in the link and the QR: whoever gets the job through them, or attaches their own to it, joins the team. On its servers, Trakko counts how many people have this job active with that identifier and returns only that number, never who: the app shows it from 2, with no names, hours or amounts. Anyone who has the link or scans the poster can join the team and see that number. To leave, archive or delete the job.

The site chat

The chat on trakko.be answers right away with an artificial intelligence, “Trakko”, and a human from the team can take over. What is kept: your messages and the answers, the language and the page of the site you write from and, only if you give them so that we can answer you by email, your email address and your first name. Your IP address is never stored in readable form: to limit abuse, we only keep a salted fingerprint of the day, which cannot be linked back to you and is erased after two days. Why: to answer you and to improve Trakko (legitimate interest); the follow-up email is only sent because you left your address for it (consent, which you withdraw by deleting the conversation). Who processes it: the AI’s answers come from Anthropic’s Claude model, called through Vercel AI Gateway (Vercel Inc., United States, European Commission standard contractual clauses) and run in the European Union by a host of the model (today Amazon Web Services or Google Cloud), without the provider keeping your messages; the conversation is stored with Supabase, in Ireland; emails are sent through Resend. Retention: the conversation is erased 12 months after your last message, or right away with “Delete this conversation” in the chat. Trakko’s answers are generated by an AI: it can make mistakes, and it replaces neither official sources nor personal advice. Your browser only keeps the conversation (local storage) from your first sent message: as long as you write nothing, nothing is stored or sent. Never write your national register number, your IBAN, a password or health information there.

Reading payslips

“Check your payslip” reads your payslip (photo, PDF, Excel or CSV) on your phone: nothing is sent (on Android, reading a photo goes through Google’s ML Kit, see “Who has access”) and nothing is kept, neither the document nor the figures read. When your phone can’t manage it, or on the web app, you can ask for the in-depth reading, online: only with a tap, on the sentence that says where your payslip goes. What is then sent: reduced photos of the payslip, or the PDF, or the lines of text read on the phone (for an Excel file, a CSV or a protected PDF, whose password never leaves the phone), with the app language and your session token, which proves you have an account. The file name is not sent. Who processes it: the reading function of trakko.be, at Vercel (Vercel Inc., United States, European Commission standard contractual clauses), and the same AI model as the site chat, called through Vercel AI Gateway and run in the European Union by a host of the model, without retention by the provider and without being used to train an AI. Trakko keeps neither the payslip nor what comes out of it: the figures come back to your phone, you check them, and the verification happens on the phone. Technical logs only contain codes. To limit costs and abuse, Trakko counts online readings per account and per day (the account identifier, the day, the number), erased after three days. Why: to read the payslip you ask to check (performance of the contract). A payslip carries personal data (your name, your address, sometimes your national register number): the in-depth reading only asks for the figures, and Trakko removes from what comes back anything that looks like a national register number, an IBAN or an email address.

Deleting your account

From the app, Profile, “Delete my account and data”, or through the “Delete my account” page. Deletion erases everything server-side, immediately and permanently. If you signed in with Apple, Trakko revokes at the same moment the access you had given it at Apple.

Changes

This policy may change; the version in force and its date are published here. In case of a significant change, Trakko informs you in the app.

← Trakko