Privacy Policy

FASTTRACKR PRIVACY POLICY

Effective Date: August 17, 2026

Operator: New Version Limited

Location: New Zealand

Contact: fasttrackr.support@newversion.studio

1.0 INTRODUCTION AND SCOPE

1.1 Welcome to FastTrackr. This Privacy Policy describes how New Version Limited ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use the FastTrackr mobile application (the "App"), available on iOS through the Apple App Store and on Android through the Google Play Store.

1.2 FastTrackr is a health and wellness application that helps you track intermittent fasting, water intake, weight, meals and nutrition, physical activity, and mood, and that offers optional AI-powered insights and recommendations. Because the App handles health and wellness information, we have designed our privacy practices with data minimization, on-device storage, and your control as our highest priorities.

1.3 This Privacy Policy applies to all users of the App, regardless of geographic location. If you are located in the European Union, the United Kingdom, California, New Zealand, or other jurisdictions with specific privacy laws, additional rights and protections apply to you as described in Sections 9.0, 10.0, and 11.0.

1.4 By using FastTrackr, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please do not use the App.

1.5 Some features — in particular the AI-powered features and the import of data from Apple Health or Health Connect — require your explicit, separate consent before any data is shared with the relevant service. These consent steps are described in Sections 3.0 and 5.0. You may decline them and continue to use the rest of the App.

1.6 This Privacy Policy should be read in conjunction with our Terms of Use, which govern your use of the App.

2.0 INFORMATION WE COLLECT

2.1 INFORMATION YOU PROVIDE DIRECTLY

2.1.1 Profile Information

When you set up your profile (during onboarding or later in Settings), you may provide:

(a) Display name (optional)

(b) Email address (optional — see 2.1.2 on use without an account)

(d) Gender (used for metabolic calculations)

(e) Height and weight

(f) Wellness goals (e.g., weight management, energy, longevity, focus) and a chosen primary goal

(g) Goal weight, starting weight, and target date

(h) Activity level and fasting experience level

(i) Dietary restrictions or preferences — note that two of the available options (Halal and Kosher) may reveal religious or philosophical beliefs. Where they do, we treat that as sensitive information: it is optional, you may leave it unset or remove it at any time, and it is used only to tailor recipes and meal plans (see 3.1 and 5.2)

(j) An avatar — chosen from a set of built-in emoji-style presets or a generated letter badge (the App does not use photos from your camera roll for your avatar)

2.1.2 Important Notes About Profile Information:

(a) FastTrackr does not require an account. You can use the App without providing a name or email, and without creating any account with us — in that case your data stays on your device only and we hold nothing about you on our servers.

(b) Providing a name and email is optional and is used to personalize the experience and to enable an email-based sign-in so you can recover or sync your data across devices.

(c) Profile information improves the accuracy of health calculations and AI personalization but is not required for core tracking.

(d) You may edit or delete profile information at any time through Settings.

2.1.3 Tracking and Wellness Data

As you use the App, you create and store:

(a) Fasting sessions (plan, start/end time, duration) and fasting journal entries

(b) Water intake logs and water goal history

(d) Meals and nutrition logs, including AI-identified food items and calculated calories, protein, carbohydrates, fat, and fiber

(e) Recipes and meal plans you save or generate

(f) Activity logs (type, duration, intensity, distance, calories burned, notes) and activity goal history

(g) Mood and journal entries (mood, energy level, hunger level, notes)

(h) Challenge participation and achievement progress

2.1.4 Meal Photos

(a) When you log a meal by photo, you may capture or select an image for AI food identification.

(b) The photo (up to 1024 px, JPEG) is stored in the App's private storage on your device.

(c) If you are signed in and cloud sync is active, only a small thumbnail (approximately 256 px, ~30 KB) is uploaded to your private cloud storage so your meal history looks complete across devices. The full-size image is never uploaded to our cloud storage.

(d) For AI food identification, that same photo is transmitted to our AI vision provider (see Section 5.2). We do not retain a copy ourselves beyond the one in your device's private storage; the provider may briefly hold the image as described in Section 5.2.3(b).

2.1.5 AI Conversations and Inputs

(a) Messages you send in the "Ask AI" chat, and the conversation history within each thread, are stored locally on your device.

(b) Free-text descriptions you provide when logging a meal or activity by text.

(c) Voice input you provide to the "Ask AI" feature is transcribed to text on your device using the operating system's speech-to-text; the audio is handled by the OS and is not recorded or stored by us.

2.1.6 Preferences and Settings

(a) App preferences and goals (e.g., water goal override, activity goal override)

(b) Notification preferences (per-category master toggles)

(d) Consent flags and feature settings

2.2 INFORMATION COLLECTED AUTOMATICALLY

2.2.1 Usage State (Stored Locally)

(a) Active fasting timer state

(b) AI usage counters used to enforce fair-use daily limits (counts only, not content)

(d) Onboarding completion and greeting state

2.2.2 Account and Sync Data (Stored on Secure Backend)

To provide optional cloud backup, multi-device sync, and account features, we store on secure cloud infrastructure (Supabase):

(a) An account identifier (a randomly generated UUID), created only when you sign in with email, Google, or Apple, and associated with that sign-in. If you never sign in, no such record exists.

(b) Your profile — the details described in Section 2.1 that describe you rather than your day-to-day tracking: your name, email address, date of birth, sex, height, current and goal weight, activity level, fasting experience, health goals, dietary preferences and chosen fasting plan. This is stored for every signed-in user, free or Premium, so that your account can restore your details when you reinstall the App or sign in on another device. If you never sign in, no such record exists.

(c) A mirror of the tracking data described in Section 2.1 — your fasts, meals, weigh-ins, water, activity, journal entries, achievements and meal plans — for every signed-in user, free or Premium (see Section 4.0). Cloud backup was a Premium feature until August 16, 2026 and is now included at no cost with any account. If you do not sign in, none of this data leaves your device. Cloud copies of dormant accounts may be removed as described in Section 7.4.

(d) Subscription/entitlement status (whether Premium is active, the related product, and expiry), keyed to your account identifier.

2.2.3 Device and Technical Information

(a) App version and operating system version (used for compatibility)

(b) The platform you are on (iOS or Android), for store-specific behavior such as billing

2.2.4 Subscription and Payment Information

(a) Subscription tier and status (active, expired, in trial)

(b) Renewal/expiry dates and trial eligibility

(c) All payment processing is handled by Apple Inc. (Apple App Store / StoreKit on iOS) or Google LLC (Google Play Billing on Android).

(d) We do NOT collect, store, or have access to your payment card information.

2.3 INFORMATION WE DO NOT COLLECT

We explicitly do NOT collect:

(a) Precise location data or GPS coordinates

(b) Contact lists or address books

(c) Device advertising identifiers (Apple IDFA on iOS; Android Advertising ID / AAID on Android — neither is requested, collected, or transmitted)

(d) Behavioral analytics or cross-app tracking

(e) Biometric data (Face ID / Touch ID on iOS, fingerprint / face unlock on Android — handled entirely by the operating system and never transmitted to us)

(f) Call logs, SMS messages, or browsing history

(g) Photos from your camera roll, except those you explicitly select to log a meal

2.4 NO THIRD-PARTY ANALYTICS, CRASH REPORTING, OR ADVERTISING

FastTrackr does NOT integrate any third-party analytics, crash-reporting, advertising, or tracking SDKs (such as Google Analytics, Firebase Analytics, Crashlytics, Sentry, or any ad network). We do not build advertising profiles and we do not track your activity across other apps or websites.

3.0 HOW WE USE YOUR INFORMATION

3.1 PRIMARY PURPOSES

3.1.1 Provide Core Tracking Features

(a) Record and display your fasting, water, weight, meals, activity, and mood

(b) Calculate personalized health metrics — Body Mass Index (BMI), Basal Metabolic Rate (BMR), Total Daily Energy Expenditure (TDEE), recommended water goal, and projected timelines

(d) Send local reminders and notifications you have enabled

3.1.2 Provide Optional AI Features (with your consent)

(a) Generate daily, weekly, and monthly insights and reports from your tracking data

(b) Identify foods from a meal photo or description and estimate nutrition

(d) Recommend fasting plans and generate recipes and meal plans

(e) Answer your questions in the "Ask AI" chat

AI features are processed by third-party AI providers as described in Section 5.0 and only after you enable AI in the App.

3.1.3 Provide Optional Account, Sync, and Backup

(a) Create and maintain your account, if you choose to create one (email/Google/Apple)

(b) Restore your profile when you sign in on a new device or reinstall, so you do not have to set the App up again

(d) Preserve your subscription/Premium status across devices and reinstalls

3.1.4 Manage Subscriptions

(a) Determine and enforce access to Premium features

(b) Apply fair-use daily limits to AI features

3.1.5 Maintain and Improve the App

(a) Diagnose and fix technical issues

(b) Ensure compatibility across operating system versions

3.1.6 Confirm You Meet the Minimum Age

(a) Use the date of birth you enter when you set up the App to confirm you meet the minimum age described in Section 8.0

(b) We do not use your date of birth to build a profile about you or to target content. Its other uses are the health calculations in 3.1.1(b) and, if you turn AI on, the personalization described in 3.1.2 and Section 5.2 — where your age, not your date of birth, is what is sent

(c) It is a self-declaration. We do not check it against any external record, credit reference, or identity document, and we do not ask you to upload one

3.2 LEGAL BASES FOR PROCESSING (GDPR)

For users in the European Union / United Kingdom, we process your personal data based on:

(a) Consent: for AI features and for importing data from Apple Health / Health Connect, and for processing health and wellness data generally

(b) Contract Performance: to provide the tracking, account, and subscription services you request

(d) Legal Obligations: compliance with applicable law, including confirming that you meet the minimum age of digital consent in your country before we process your data (see 3.1.6 and Section 8.0)

3.3 DATA MINIMIZATION PRINCIPLE

(a) Most of your data is stored locally on your device by default.

(b) Cloud sync is optional and tied to your account.

(c) Only small thumbnails of your meal photos are synced to the cloud; the full-size image is sent off your device only when you ask the AI to identify that meal.

(d) Third-party AI providers receive only the data necessary to perform the requested task, and only when you have enabled AI features.

(e) We do not use your personal data for advertising and we do not sell it.

4.0 DATA STORAGE AND SECURITY

4.1 LOCAL STORAGE (PRIMARY)

4.1.1 FastTrackr is offline-first: your device's local database is the source of truth. The following are stored on your device using platform-native private storage (the iOS app sandbox; Android app-private storage):

(a) Your profile and goals

(b) All tracking data (fasting, water, weight, meals, activity, mood/journal)

(d) Full-resolution and thumbnail meal photos

(e) AI chat history and cached AI insights/reports

(f) App preferences, consent flags, and usage counters

4.1.2 Local Data Security:

(a) Stored in app-private, sandboxed storage that is inaccessible to other apps

(b) Protected by platform device encryption when you set a device passcode/biometric (iOS Data Protection; Android File-Based Encryption)

4.2 CLOUD STORAGE (OPTIONAL — ACCOUNT, BACKUP, AND SYNC)

4.2.1 If you are signed in, your data is mirrored to secure cloud infrastructure operated through Supabase to provide backup and multi-device access:

(a) Provider: Supabase (cloud database, authentication, and storage)

(b) Data Stored: your profile, a mirror of your tracking data, meal-photo thumbnails (in a private per-user storage area), and your account/entitlement record — all stored for every signed-in user, free or Premium (see 2.2.2(b) and 2.2.2(c))

(c) Access Control: each user's data is protected by row-level security so that only the authenticated owner can read or write it (owner-only access keyed to your account identifier)

(d) Encryption: industry-standard encryption in transit (HTTPS/TLS) and at rest

(e) Deletion: removals are synchronized to the cloud; you can delete your data and your account as described in Section 6.0

(f) Dormancy: because cloud backup is provided free of charge, we may remove the cloud copy held for an account that has been inactive for an extended period, as described in Section 7.4

4.2.2 What is NOT stored in cloud sync:

(a) Full-resolution meal photos (only thumbnails are synced)

(b) Your local AI fair-use counters and certain on-device caches

4.3 AUTHENTICATION

4.3.1 FastTrackr works immediately on first launch with no account and no sign-in. Creating an account is optional and happens only when you choose to sign in, using:

(a) Email and password

(b) Sign in with Google

When you sign in for the first time, the data already on your device is carried over to the new account — nothing you tracked beforehand is lost.

4.3.2 We receive only the information necessary to establish your sign-in (for example, the email associated with your chosen method). Google and Apple sign-in are governed by their respective privacy policies.

4.4 SECURITY MEASURES

4.4.1 Technical Security:

(a) HTTPS/TLS encryption for all network transmission

(b) Token-based authentication for backend access

(d) No hardcoded credentials or third-party API keys exposed in the App in a way that grants access to your account

(e) Regular updates and patches

4.4.2 Organizational Security:

(a) Limited personnel access to backend systems

(b) Secure development practices

4.5 DATA BREACH NOTIFICATION

In the unlikely event of a data breach affecting your personal information:

(a) We will notify affected users without undue delay and, where required (for example under GDPR), within 72 hours of becoming aware of the breach

(b) Notification will describe the nature of the breach, the data affected, likely consequences, and remedial steps

(d) We will act promptly to contain and remediate the breach

4.6 EMAIL WE SEND YOU

4.6.1 We use the email address associated with your account only to send you messages about FastTrackr itself. We never sell, rent, or share it with advertisers, and we do not use it for third-party marketing.

4.6.2 Service and transactional email. These are sent whenever the event they describe occurs, because they concern your account or your money:

(a) Sign-in email: address confirmation and password reset

(b) Purchase confirmation when a subscription or free trial starts, stating what it includes and when it renews

(d) The dormancy notice described in 7.4, before any cloud copy is deleted

4.6.3 Welcome and getting-started email. When you create an account we send a single welcome message describing what the App does, what is free, and what a subscription adds. You can turn this off at any time in the App under Settings → Notifications → Email, and the setting applies to your account rather than to one device.

4.6.4 Turning off the message in 4.6.3 does not stop those in 4.6.2, which are records of your own account activity rather than promotion. The reminder in 4.6.2(c) has its own switch at Settings → Notifications → Subscription.

4.6.5 Our email is sent from our own support mailbox rather than a marketing platform. Replies reach a person.

5.0 THIRD-PARTY SERVICES AND DATA SHARING

5.1 OVERVIEW

To provide certain features, we use specialized third-party services. We share only the minimum data necessary for these services to function, and we do NOT sell, rent, or trade your personal information.

5.2 AI PROVIDERS (INSIGHTS, FOOD VISION, CHAT, PLANS)

5.2.1 Providers: Our AI features use Kie.ai (Google Gemini family models) as the primary provider, with OpenRouter (routing to Google Gemini family models) as an automatic fallback if the primary is unavailable. Requests do not travel from your device to these providers directly: they pass through an API proxy we operate on Cloudflare Workers, which holds our provider credentials and forwards only the data described in 5.2.3 (see 5.8).

5.2.2 Purpose: To generate insights and reports, identify foods from photos or descriptions and estimate nutrition, parse activity text, recommend fasting plans, generate recipes and meal plans, and answer your "Ask AI" questions.

5.2.3 Data Shared (only when you have enabled AI features):

(a) For insights, reports, chat, and plan recommendations: an aggregated summary of your tracking data (fasting, water, weight, nutrition, activity, mood) and the health metrics derived from your profile (such as age, gender, BMI, BMR, TDEE, activity level, goals, and dietary restrictions). This is used to produce relevant, personalized output.

(b) For meal photo logging: the meal image (compressed) is sent to the AI vision provider for food identification. The image is normally included directly in the request. If that request cannot be processed (for example, because the image is too large), the App instead uploads the image to the same provider's file service and sends a link to it; in that case the provider holds a copy of the image for up to three days before it expires. We do not upload your meal photos to any other host.

5.2.4 Data NOT Shared with AI Providers:

(a) Your email address or sign-in identifiers

(b) Your payment information

(d) Data unrelated to the requested task

5.2.5 Consent and Control:

(a) AI features are off until you enable them through the in-app AI consent prompt.

(b) You can disable AI features at any time in Settings.

(c) Fair-use limits apply (see Terms of Use). To reduce cost and repeated processing, AI results are cached on your device for a period of time.

5.2.6 Retention by AI Providers:

Data submitted to the AI providers is subject to their own privacy and data-handling practices, which are outside our control. We encourage you to review their policies. We do not authorize the use of your submitted content to train third-party models where an opt-out is available to us.

5.3 USDA FOODDATA CENTRAL (NUTRITION LOOKUP)

5.3.1 Provider: U.S. Department of Agriculture FoodData Central.

5.3.2 Purpose: To look up nutrition information for foods identified in your meals.

5.3.3 Data Shared: Food name strings only (for example, "grilled chicken breast"). No profile information, identifiers, or other personal data are sent. Results are cached locally to reduce repeated lookups.

5.4 CLOUD BACKEND (SUPABASE)

5.4.1 Purpose: Authentication, optional cloud backup and sync, meal-photo thumbnail storage, and subscription/entitlement mirroring.

5.4.2 Data Stored: as described in Section 4.2. Access is owner-only via row-level security.

5.5 PAYMENT PROCESSING

5.5.1 Payment Processors:

(a) iOS: Apple Inc. (Apple App Store / StoreKit)

(b) Android: Google LLC (Google Play Billing)

5.5.2 Data Shared:

(a) We receive only subscription status, product, and renewal/expiry information necessary to grant access to Premium features.

(b) Apple and Google process all payment information directly.

5.5.3 Privacy:

(a) iOS purchases are subject to Apple's Privacy Policy (https://www.apple.com/legal/privacy/).

(b) Android purchases are subject to Google's Privacy Policy (https://policies.google.com/privacy).

5.6 APPLE HEALTH / HEALTH CONNECT IMPORT (OPTIONAL, READ-ONLY)

5.6.1 Purpose: To import your existing health data so you do not have to re-enter it.

5.6.2 How It Works:

(a) The import is read-only. FastTrackr reads selected data from Apple Health (HealthKit) on iOS or Health Connect on Android and never writes data back to those hubs.

(b) Data imported is limited to: workouts (which become activity logs), body weight, daily step counts, and active energy burned.

(c) Imported records are de-duplicated using the source record's identifier and labelled with their source (for example, "Apple Health" or "Health Connect"). This data may originate from devices and apps you have connected to those hubs (for example, Apple Watch, Garmin, Fitbit, Oura, Samsung Health, WHOOP, or Strava).

5.6.3 Consent and Control:

(a) Health import requires its own one-time in-app consent, which is separate from the AI consent.

(b) It also requires you to grant read permission through the operating system's HealthKit / Health Connect prompt, which you control and can revoke in your device settings at any time.

(c) Imported data is stored locally and, if you are signed in with sync active, mirrored to your private cloud account like your other tracking data.

5.7 NO DATA SELLING OR ADVERTISING

We explicitly do NOT:

(a) Sell or rent your personal information

(b) Share your data with advertisers, data brokers, or social media platforms

(d) Use third-party analytics or tracking SDKs

5.8 SERVICE PROVIDERS

5.8.1 Cloudflare (API Proxy): AI requests (5.2) and nutrition lookups (5.3) are sent to an API proxy we operate on Cloudflare Workers rather than to those providers directly. The proxy exists so that our provider credentials never ship inside the App; it authenticates the request, applies fair-use limits, and forwards it upstream. It is infrastructure we control, and it shares nothing beyond what 5.2.3 and 5.3.3 describe. We do not store the contents of your requests there — the only thing the proxy keeps is a per-user daily request counter, used to enforce the fair-use limits.

5.8.2 Any service providers we engage (for example, infrastructure or support tooling) are limited to using data only for the specified purpose, maintaining confidentiality and security, and complying with applicable privacy laws.

6.0 YOUR PRIVACY RIGHTS AND CONTROLS

6.1 DATA ACCESS AND PORTABILITY

6.1.1 You can:

(a) View all of your profile and tracking data directly in the App

(b) Review your fasting, water, weight, meals, activity, mood, challenges, and achievements

(d) Request a copy by contacting fasttrackr.support@newversion.studio if you are unable to use the in-App export

6.1.2 In-App Data Export:

(a) The export produces a single .zip file containing your profile, every tracker log (fasting, water, weight, meals and the individual foods within them, activity, mood and journal entries), your goal history, saved recipes and favourites, meal plans, achievements, challenges, AI conversations, AI reports and suggestions, imported health metrics, and your notification history.

(b) It is provided in two formats simultaneously — one structured JSON file, and one CSV file per section — together with a plain-language README that explains every file, every unit, and what is deliberately excluded.

(c) The file is assembled entirely on your device. Producing it involves no upload and no server request, and we do not receive a copy of it or a record that you created one.

(d) The export is free on every plan and requires no account. Guest users can export the data held on their device.

(e) It deliberately excludes your password, the internal identifier linking your device to our servers, the App's local copy of public USDA nutrition reference data, and meal photographs (which remain on your device and would make the file substantially larger). The README states each exclusion.

(f) Exporting is read-only. It does not alter, move, or delete anything in the App or in your cloud backup.

6.2 DATA CORRECTION AND MODIFICATION

You may edit your profile, goals, and any logged entry at any time through the App's editing and per-log edit/delete controls.

6.3 DATA DELETION CONTROLS

6.3.1 Per-Log Deletion:

(a) Tap or swipe any entry in a tracker's recent logs to edit or delete it.

6.3.2 Per-Tracker Bulk Deletion:

(a) Settings → Danger Zone provides per-tracker bulk deletes (fasting, water, meals, activity, weight).

6.3.3 Master Purge:

(a) Settings → Danger Zone → delete all tracker data (with a type-"DELETE" confirmation).

(b) This clears all tracker data and meal photos but intentionally preserves your profile, goals, fasting plan, and achievements so you can keep using the App.

6.3.4 Account Deletion:

(a) Settings → Danger Zone → Account Deletion.

(b) This permanently deletes your account and the tracker data, photos, achievements, and AI history tied to that profile, and signs you out. This action cannot be undone.

6.3.5 Uninstalling:

(a) Uninstalling the App immediately deletes all local data on the device.

(b) If you used cloud sync, request account deletion (6.3.4) or contact us to remove your cloud data.

6.4 OPT-OUT AND CONSENT CONTROLS

6.4.1 AI Features: off by default; enable or disable in the App at any time.

6.4.2 Health Import: requires separate in-app consent and OS permission; revoke OS permission in device settings at any time.

6.4.3 Cloud Sync: signing in stores your profile and your tracking data (2.2.2(b), 2.2.2(c)) so both follow your account rather than your handset — included free with any account. You can use the App without an account, entirely on-device, in which case nothing is stored in the cloud at all. Signing out stops further uploads, and you can erase everything held for your account as described in Section 6.0. Cloud copies of dormant accounts are subject to Section 7.4.

6.4.4 Notifications: control per-category master toggles in the App, or disable notifications entirely in your device settings (iOS Settings → FastTrackr → Notifications; Android Settings → Apps → FastTrackr → Notifications).

6.5 WITHDRAWAL OF CONSENT

You may withdraw consent at any time by disabling AI features, revoking health permissions, deleting your data, or uninstalling the App. Withdrawing consent may limit or disable the related features.

7.0 DATA RETENTION AND DELETION

7.1 LOCAL DATA

(a) Retained on your device until you delete it or uninstall the App.

7.2 CLOUD DATA (IF SIGNED IN)

(a) Retained for as long as your account exists, subject to Section 7.4.

(b) Deletions are synchronized; deleting data or your account removes it from the cloud mirror.

7.3 TEMPORARY AND CACHED DATA

(a) AI insight/report caches expire on a rolling basis (for example, daily insights after about 24 hours; weekly and monthly reports refresh on their period).

(b) Nutrition lookups are cached locally for about 30 days.

7.4 DORMANT ACCOUNTS

(a) Cloud backup is provided free of charge with any account. To keep it sustainable, we reserve the right to delete the cloud copy of your tracking data where an account has not signed in or synchronized for at least 12 consecutive months.

(b) Before any such deletion we will send at least one notice to the email address associated with your account, no less than 30 days in advance, and any use of the App while signed in resets the dormancy period.

(c) This removes only the cloud copy. FastTrackr is offline-first and your device remains the source of truth, so data still held on a device you use is unaffected and will re-upload on the next synchronization.

(d) We may retain your account record and profile (2.2.2(a), 2.2.2(b)) after removing dormant tracking data, so that returning to the App does not require you to set up your details again.

(e) This clause is in operation from 16 August 2026. The inactivity clock for every account that existed on that date starts on that date, whatever the account's earlier history — so no deletion under this clause can occur before 16 August 2027, and each is preceded by the notice described in (b).

(f) You can download a complete copy of your data at any time, including after receiving a notice under (b), using the in-App export described at 6.1.2.

7.5 THIRD-PARTY RETENTION

Data shared with third-party services (AI providers, payment processors) is subject to their retention policies, which are outside our control.

7.6 LEGAL RETENTION

We may retain limited data where required to meet legal obligations, resolve disputes, or prevent abuse, and will delete it when the requirement expires.

8.0 CHILDREN'S PRIVACY

8.1 FastTrackr is intended for a general audience but is not directed to children. You must be at least 16 years old to create an account and use the App (or the minimum age of digital consent in your country, if higher). We do not knowingly collect personal information from anyone below that minimum, and in no case from children under 13.

8.2 How the minimum age is applied. The App asks for your date of birth during setup and will not accept a date of birth that makes you younger than 16, so an under-16 date cannot be entered. As stated in 3.1.6, this is a self-declaration and not identity verification. Separately, the App is rated 16+ on the Apple App Store and carries the age rating shown on its Google Play listing; those ratings are applied by the stores themselves and by the parental and screen-time controls built into your device, which operate outside the App and are not something we administer.

8.3 Intermittent fasting and dietary change are not appropriate for young children and may not be appropriate for adolescents without professional guidance; see the Health Disclaimer in our Terms of Use.

8.4 If we learn that we have collected personal information from a child below the applicable minimum age, we will delete it and terminate any associated account. Because the App can be used with no account at all, this may mean deleting only data held on our servers — data that never left the person's device is not something we hold or can reach. If you believe a child has provided us information, contact fasttrackr.support@newversion.studio.

9.0 INTERNATIONAL DATA TRANSFERS

9.1 New Version Limited operates from New Zealand, and the App is available globally. When you use cloud sync or AI features, your data may be processed in other countries, including the United States, where our cloud and AI service providers operate.

9.2 We maintain adequate protection for international transfers through encryption in transit and at rest, owner-only access controls, selection of reputable providers, and, where applicable, contractual safeguards such as standard contractual clauses.

9.3 For users in New Zealand, we comply with the Privacy Act 2020. For users in the EU/UK, we rely on appropriate transfer mechanisms as described in Section 10.0.

10.0 GDPR COMPLIANCE (EUROPEAN UNION / UNITED KINGDOM USERS)

10.1 LEGAL BASES

We process your personal data on the bases described in Section 3.2 (consent; contract; legitimate interests; legal obligations).

10.2 HEALTH DATA AS A SPECIAL CATEGORY

10.2.1 FastTrackr processes health and wellness data (such as weight, body metrics, nutrition, activity, fasting, and mood). Under Article 9 GDPR this is a special category of personal data.

10.2.2 Our legal basis for processing this data is your explicit consent (Article 9(2)(a)), which you provide by choosing to enter this data and, for AI processing and health import, through the dedicated in-app consent steps.

10.2.3 Additional protections include local-first storage, owner-only access controls, encryption, and your ability to delete this data at any time.

10.3 YOUR GDPR RIGHTS

You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21), and to withdraw consent at any time. You are also not subject to solely automated decisions producing legal effects — AI output in FastTrackr is informational and does not make decisions about your rights.

10.4 EXERCISING YOUR RIGHTS

Email fasttrackr.support@newversion.studio with the subject "GDPR Rights Request." We respond within one month (extendable to two months for complex requests), free of charge unless requests are manifestly unfounded or excessive.

10.5 RIGHT TO COMPLAIN

You may lodge a complaint with your local Data Protection Authority. EU authorities are listed at https://edpb.europa.eu/about-edpb/board/members_en. UK users may contact the Information Commissioner's Office (ico.org.uk).

11.0 CCPA COMPLIANCE (CALIFORNIA USERS)

11.1 If you are a California resident, the California Consumer Privacy Act (as amended) provides you with specific rights.

11.2 CATEGORIES OF PERSONAL INFORMATION COLLECTED

In the past 12 months we may have collected:

(a) Identifiers (an account UUID; an email address if you provide one)

(b) Health and wellness information you enter or import (weight, body metrics, nutrition, activity, fasting, mood)

(d) Internet or other electronic activity strictly within the App (feature usage state, stored locally)

We do NOT collect government identifiers, precise geolocation, or advertising identifiers.

11.3 BUSINESS PURPOSES

We use this information to provide and improve the App's features, manage subscriptions, enable optional AI and sync, and provide support (Section 3.0).

11.4 DISCLOSURE

In the past 12 months we have disclosed, for business purposes only, the limited categories described in Section 5.0 to our AI providers, USDA lookup, cloud backend, and payment processors.

11.5 NO SALE OR SHARING

We do NOT sell or "share" (as defined under California law for cross-context behavioral advertising) your personal information, and we have not done so in the past 12 months. We do not sell the personal information of minors.

11.6 YOUR CALIFORNIA RIGHTS

You have the right to know, to delete, to correct, and to non-discrimination for exercising your rights. To exercise them, email fasttrackr.support@newversion.studio with the subject "CCPA Rights Request." We respond within 45 days (extendable to 90 days for complex requests). We may take steps to verify your identity, using only the information needed for verification.

12.0 HEALTH AND WELLNESS DATA — IMPORTANT NOTE

12.1 FastTrackr is a wellness and self-tracking tool, not a medical device, and it does not provide medical advice. Health metrics (BMI, BMR, TDEE), nutrition estimates, fasting plans, and AI insights are for informational and educational purposes only. See the Health Disclaimer in our Terms of Use, and consult a qualified healthcare professional before starting a fast or changing your diet, particularly if you are pregnant or breastfeeding, under 18, diabetic, have a history of disordered eating, or take medication.

13.0 CHANGES TO THIS PRIVACY POLICY

13.1 We may update this Privacy Policy to reflect changes in our practices, new features, or legal requirements.

13.2 For material changes, we will provide notice in the App (for example, on next launch after an update) and update the "Last Updated" date above. Continued use after the effective date constitutes acceptance. If you do not agree with the changes, discontinue use and, if you wish, delete the App.

13.3 Current Version: 1.1 — Effective August 16, 2026. Cloud backup of tracking data became free with any account (previously Premium), so Sections 2.2.2, 4.2 and 6.4.3 now describe the same cloud storage for every signed-in user. A dormant-account retention clause was added at Section 7.4 and is in operation from the same date; because every existing account's inactivity clock starts then, the earliest possible deletion under it is 16 August 2027, with at least 30 days' notice by email before any account is affected. Section 6.1 was expanded: a complete copy of your data can now be downloaded from within the App (Settings → Your Data → Export My Data), free on every plan and available without an account, so exercising the right of portability no longer requires contacting support. The minimum-age provisions were also clarified: the 16 minimum in Section 8.1 is unchanged, but a new Section 3.1.6 states that your date of birth is used to confirm it, Section 3.2(d) records the legal basis, and a new Section 8.2 explains how the App applies the minimum and is explicit that it is a self-declaration rather than identity verification. Section 8.1 previously said we do not knowingly collect information from children under 13, which read inconsistently next to a minimum of 16; it now states both. A new Section 4.6 sets out every email we send to your account address, separates the service and transactional messages from the single welcome message, and records that the welcome can be switched off in the App at Settings -> Notifications -> Email without affecting purchase confirmations or the trial reminder.

13.4 Version 1.0 — Effective June 9, 2026. The first comprehensive edition for FastTrackr, covering local-first storage, optional Supabase cloud sync and accounts, AI features (Kie.ai / OpenRouter), USDA nutrition lookup, optional Apple Health / Health Connect import, and Apple App Store / Google Play subscriptions.

14.0 CONTACT INFORMATION

14.1 PRIVACY INQUIRIES

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

Email: fasttrackr.support@newversion.studio

Subject: "Privacy Inquiry"

14.2 BUSINESS INFORMATION

Operator: New Version Limited

Location: New Zealand

App: FastTrackr (iOS and Android)

14.3 DATA PROTECTION AUTHORITIES

(a) New Zealand: Office of the Privacy Commissioner — www.privacy.org.nz

(b) European Union: your national Data Protection Authority — https://edpb.europa.eu/about-edpb/board/members_en

(d) California: California Attorney General — oag.ca.gov/privacy

ACKNOWLEDGMENT

By using FastTrackr, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please do not use the App.

Thank you for trusting FastTrackr with your wellness journey. We are committed to protecting your information and keeping you in control of your data.

END OF PRIVACY POLICY

New Version Limited

August 17, 2026

Page updated

Google Sites

Report abuse