Last updated 20 October 2026
TracklyLab is built device-first. If you use it without an account, what you record never leaves your phone. Signed in, it leaves for two reasons only: to sync to your account, and, if you choose to use it, when you send a file through the AI import described below. This policy explains exactly what is stored, where, and who can see it.
TracklyLab is made and run by Pietro Zamboni, an individual developer. It is not operated by a company.
For anything about your data, or about this policy, write to support@tracklylab.com.
Your transactions stay on your device unless you choose to sign in.
We never sell your data, and we never use your financial information for advertising.
Our analytics record how the app is used - never what you spend, on what, or with which card.
You can export everything, erase everything, or delete your account entirely, from inside the app.
In guest mode, your transactions, categories, accounts and settings are saved in your browser or app storage on your own device. They are not sent to us and we cannot read them.
Because that data lives only on your device, clearing your browser storage, deleting the app, or losing the device will lose it. Settings > Export data saves a full copy you keep yourself.
You can sign in with Google, or with a code sent to your email address. Signing in with Google shares your name, email address and profile photo with us, so we can identify your account and show your picture in Settings. We never receive your Google password.
If you sign in by email, we store the address you give us and send a one-time code to it. We do not use it to write to you about anything else.
Once signed in, your TracklyLab data is stored in our database as a single record belonging to your account, so it can follow you across devices.
Row-level security means no other TracklyLab user can read that record. It is not, however, encrypted in a way that hides it from us: as the person who runs the service, Pietro Zamboni holds the administrative keys to the database, because operating, backing up and supporting it requires them. Your transactions are not read, and are never used for anything other than making the app work for you.
If you would rather nothing of yours ever left your device, use TracklyLab without signing in - guest mode keeps everything local, where we genuinely cannot reach it.
Account details: your email address, plus your name and profile photo if you sign in with a provider that gives us them.
Your TracklyLab data, but only if you are signed in: transactions, categories, accounts, recurring schedules, budget and preferences.
Usage analytics: which screens are opened and which features are used, plus general technical information such as device type, browser and approximate region derived from your IP address. These events never include transaction descriptions, amounts, categories, accounts or your budget.
Days you opened the app: while you are signed in, one record per day saying that you opened TracklyLab and on what kind of device - for example "iPhone app" or "Mac browser". Nothing about what you did in it. We use it to count how many people use the app, and on what, so we know where to put our work.
Support messages: if you write to us from Settings > Support, we receive your message and the email address you give us so we can reply.
Import counts: if you use the AI import, one row per day recording how many imports you made and roughly how much text they cost to read - never the file, and nothing from inside it.
To convert foreign-currency transactions, the app fetches a table of daily exchange rates from an external rates provider. That request asks only for the rates themselves - it contains no personal data and no information about your transactions.
Settings > Import data can read a bank statement, a spreadsheet or a photo of one and turn it into transactions. It is optional, it is only available when you are signed in, and nothing is sent until you have picked a file and confirmed.
When you do, the file itself is sent, as it is, to a function we run, which passes it to Anthropic, the company behind the Claude models, to be read. A statement or a screenshot of one typically contains dates, amounts and the descriptions of your transactions. The names of your own categories travel with it, so the result can be filed under them, and so do any answers you type when the import asks you a question. A photo is reduced on your device to the size the model reads it at before it leaves.
The result comes back to your device and goes through the normal review before anything is added. We do not keep the file, or the transactions it produced, on our servers. Under its commercial terms Anthropic does not use what is sent through its API to train its models; how it otherwise handles that data is governed by its own privacy policy.
What we do keep is a count: one row per account per day saying how many imports were made and roughly how much text they cost to read, so the daily allowance can be enforced and the bill can be watched. It says nothing about the file.
If you would rather your statements never reached a third party, skip this feature. The same screen offers a ready-made prompt for whichever AI you already use, and a file import for the result.
We do not sell your data or share it for advertising. We use a small number of service providers who process data on our behalf:
Supabase - hosting, sign-in and the database that holds your synced data.
PostHog - product analytics, as described above.
Resend - delivering the sign-in codes we email you, and the support messages you send us.
Anthropic - reading the files you choose to send through the AI import, as described above, and nothing else.
We may also disclose information if we are legally required to.
Your synced data is kept until you delete it. Settings > Erase all data clears your records while keeping your account; Settings > Delete account removes the account and its data.
After deletion, copies may persist in routine backups for up to 30 days before being deleted.
You can export a full copy of your data at any time from Settings > Export data, correct any entry by editing it, and delete your data or your whole account from Settings.
Depending on where you live you may have additional rights over your personal data, including asking us for a copy or objecting to certain processing. Write to us and we will help.
TracklyLab is not intended for children, and we do not knowingly collect their data.
If this policy changes we will update the date at the top, and note anything significant inside the app.
Questions about privacy, or about your data: support@tracklylab.com. You can also write to us from Settings > Support.