Privacy Policy

Effective date: March 30, 2026 · Last updated: October 22, 2026

TRTracker ("the App") is operated by Stefan Goessens ("we", "us", "our"). This policy describes how we collect, use, and protect your personal information.

1. Information We Collect

We collect only the data you provide directly within the App:

Account information: name and email address, used for authentication and account management.
Health data: injection logs (medication, dosage, injection site, pain level), blood work results (hormone levels, metabolic markers), daily check-in metrics (mood, energy, libido, sleep, weight, blood pressure), and symptom reports. This data is entered by you and stored to provide the App's tracking and insights features.
Apple Health data: if you grant permission, the App reads sleep, weight, blood pressure, and heart rate data from Apple Health to suggest values during daily check-ins. This data is not stored on our servers — it is read on-device and only saved if you confirm it during a check-in.
Lab report images: if you use the AI lab import feature, photos or PDFs of lab reports are processed through secure cloud services to extract marker values. The extracted text is sent to our AI processing service; images are not retained after processing.

2. How We Use Your Information

To provide the App's core features: injection tracking, blood work trends, symptom correlation, and health insights.
To generate AI-powered insights and recommendations based on your tracked data.
To authenticate your account and sync data across your devices.
To generate exportable PDF reports for you to share with your healthcare provider.
To let you share an encrypted report with your clinician through a link, if you choose to (see section 5).

3. Data Storage and Security

Your data is stored on Convex, a secure cloud backend, and is encrypted in transit (TLS) and at rest.
Authentication is handled through secure token-based sessions.
We do not store your password — authentication is managed through our identity provider.

4. Data Sharing

We do not sell, rent, or share your personal or health data with third parties for advertising or marketing purposes. Your data may be shared only in the following circumstances:

AI processing: anonymized or pseudonymized data excerpts are sent to AI services (OpenAI) to generate lab parsing results and health insights. These services process data per their own privacy policies and do not retain your data for training.
Legal requirements: if required by law, regulation, or legal process.
With your consent: when you explicitly choose to export and share a PDF report, or to share a report link with your clinician (see section 5).

In the App you can share a copy of your report with a clinician through a link or QR code. You need an account to share, and nothing is shared unless you choose to.

What is uploaded: a copy of the report you chose, with the date range and sections you picked, as it was when you shared it. Later entries don't change it. Your phone encrypts it (AES-256) before it leaves your device.
We can't read it: the key that unlocks the report is part of the link. It is never sent to our servers, so we store only an encrypted copy we can't open. Anyone who has the full link can open the report, so share it only with the person you mean to.
What we can see: to list your shares and apply their limits, we store when each share was made, when it expires, its open limit, the label of its date range and which sections it includes, but not what is in them.
Links expire: you choose how long a link works (up to 30 days) and how many times it can be opened. After that it stops working.
You can stop sharing at any time from Shared reports in the App. We delete the encrypted report straight away and the link stops working. A clinician keeps anything they already printed or saved.
The open log: each time the report is opened we record the time, the browser and operating system (for example "Chrome on Windows") and the country. We don't store the IP address or the full browser details. You can see this log in the App. The IP address of the person opening the link is used briefly to limit how many opens can be tried per minute, and is not stored.
How long we keep it: the encrypted report is deleted when you stop sharing, or within an hour after the link expires or reaches its open limit. The share's details and open log stay in the App for 90 days after it ends so you can look back, and are then deleted. You can remove them sooner.
Deleting your account deletes all your shared reports and their open logs, and every link you shared stops working.
For the clinician: the report opens at trtracker.com/clinicians/view and is decrypted in the clinician's browser. They need no account. That page loads no analytics or third-party scripts, and it removes the key from the address bar as soon as it opens.

6. Your Rights

Access and export: you can export your data as a PDF report at any time from the App.
Deletion: you can delete your account and all associated data, including any reports you have shared, from the Settings screen. Deletion is permanent and cannot be undone.
Correction: you can edit or delete any individual entry (injection, check-in, blood work, symptom) within the App.

7. Children's Privacy

The App is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors.

8. Analytics and Tracking

The App does not include third-party analytics SDKs, advertising frameworks, or tracking pixels. We do not track you across other apps or websites.

9. Website Chat

The "Ask the TRT guide" chat on trtracker.com answers general questions from our published guides. It needs no account.

What is sent: your question and the last exchange in the chat are sent through Cloudflare (our host) to Anthropic's Claude to write the answer. We do not store the conversation, and request logging in Cloudflare is turned off. Anthropic processes it under its API terms, which do not allow using it to train models.
Anonymised question log: to find topics our guides do not cover yet, we record each question with emails and long numbers removed, shortened to 200 characters, together with the kind of answer and the page it matched, in Cloudflare Analytics Engine for up to three months. We do not record your IP address, browser details or the rest of the conversation, and questions about urgent symptoms or self-harm are not recorded as text.
Abuse protection: your IP address is used briefly to limit how many questions can be sent per minute, and Cloudflare Turnstile checks that the request comes from a person. Neither is stored with your question.
Please do not enter personal details. Questions that contain an email address, phone number or ID number are not answered or recorded.

10. Website Email

Some free tools on trtracker.com can email you your result ("Email me this"). "Add to calendar" and "Save as PDF" are made on your device and send nothing.

What is sent: your email address and what you entered in that tool are sent through Cloudflare (our host) to build the email, which Cloudflare Email Service delivers once from mail.trtracker.com. We do not store your result, your inputs or your address, and we do not log them. Like any email provider, Cloudflare keeps delivery records (recipient address, subject line and delivery status) for up to 31 days so failed deliveries can be investigated.
Abuse protection: your IP address is used briefly to limit how many emails can be sent per minute, and Cloudflare Turnstile checks that the request comes from a person. To limit emails per address per day we keep a one-way hash of the address (not the address itself) in a daily counter that is deleted after two days.
TRT tips and app updates (optional): only if you tick the box, which is never ticked for you. We first send a confirmation email; until you use its link we store nothing. When you confirm, we store your email address, the time you confirmed, which tool you signed up on and a random unsubscribe code, in Cloudflare D1. We use it only to send TRT tips and TRTracker app updates, never your results, and we never sell or share it. Every tips email has a one-click unsubscribe link, which deletes your address from the list straight away. You can also email privacy@trtracker.com to be removed.
Who sends it: TRTracker, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA. This postal address is in the footer of every email we send.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the App or by email. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this privacy policy or your data, contact us at privacy@trtracker.com.