TracklyLab

Privacy Policy

Last updated 28 July 2026

TracklyLab is built device-first. If you use it without an account, what you record never leaves your phone. This policy explains exactly what is stored, where, and who can see it.

Who is responsible

TracklyLab is made and run by Pietro Zamboni, an individual developer, who also goes by Zambop. It is not operated by a company.

For anything about your data, or about this policy, write to support@tracklylab.com.

The short version

Your transactions stay on your device unless you choose to sign in.

We never sell your data, and we never use your financial information for advertising.

Our analytics record how the app is used - never what you spend, on what, or with which card.

You can export everything, erase everything, or delete your account entirely, from inside the app.

Using TracklyLab without an account

In guest mode, your transactions, categories, sources and settings are saved in your browser or app storage on your own device. They are not sent to us and we cannot read them.

Because that data lives only on your device, clearing your browser storage, deleting the app, or losing the device will lose it. Settings > Export data saves a full copy you keep yourself.

When you sign in

Signing in with Google shares your name, email address and profile photo with us, so we can identify your account and show your picture in Settings. We never receive your Google password.

Once signed in, your TracklyLab data is stored in our database as a single record belonging to your account, so it can follow you across devices.

Row-level security means no other TracklyLab user can read that record. It is not, however, encrypted in a way that hides it from us: as the person who runs the service, Pietro Zamboni holds the administrative keys to the database, because operating, backing up and supporting it requires them. Your transactions are not read, and are never used for anything other than making the app work for you.

If you would rather nothing of yours ever left your device, use TracklyLab without signing in - guest mode keeps everything local, where we genuinely cannot reach it.

What we collect

Account details: your name, email address and profile photo from the sign-in provider you choose.

Your TracklyLab data, but only if you are signed in: transactions, categories, sources, recurring schedules, budget and preferences.

Usage analytics: which screens are opened and which features are used, plus general technical information such as device type, browser and approximate region derived from your IP address. These events never include transaction descriptions, amounts, categories, sources or your budget.

Support messages: if you write to us from Settings > Support, we receive your message and the email address you give us so we can reply.

Exchange rates

To convert foreign-currency transactions, the app fetches a table of daily exchange rates from an external rates provider. That request asks only for the rates themselves - it contains no personal data and no information about your transactions.

Who we share it with

We do not sell your data or share it for advertising. We use a small number of service providers who process data on our behalf:

Supabase - hosting, sign-in and the database that holds your synced data.

PostHog - product analytics, as described above.

Resend - delivering the support messages you send us.

We may also disclose information if we are legally required to.

How long we keep it

Your synced data is kept until you delete it. Settings > Erase all data clears your records while keeping your account; Settings > Delete account removes the account and its data.

After deletion, copies may persist briefly in routine backups before being overwritten.

Your rights

You can export a full copy of your data at any time from Settings > Export data, correct any entry by editing it, and delete your data or your whole account from Settings.

Depending on where you live you may have additional rights over your personal data, including asking us for a copy or objecting to certain processing. Write to us and we will help.

Children

TracklyLab is not intended for children, and we do not knowingly collect their data.

Changes to this policy

If this policy changes we will update the date at the top, and note anything significant inside the app.

Contact

Questions about privacy, or about your data: support@tracklylab.com. You can also write to us from Settings > Support.