Core First Studios

OnTrack – Privacy Policy

Last updated: October 27, 2026

OnTrack (“the app”) is a personal workout tracking app for iPhone and Android, developed by Michael Palummieri. This policy explains what data the app accesses, how it is used, and your rights as a user. It covers both OnTrack for iPhone (with its Apple Watch app) and OnTrack for Android.

On this page
  1. Data We Collect
  2. Apple Health (HealthKit) — iPhone
  3. Health Connect — Android
  4. Bluetooth heart-rate monitors — Android
  5. Photos, videos and camera
  6. iCloud Backup — iPhone
  7. Google backups — Android
  8. Apple Watch
  9. Backups, exports and sharing
  10. OnTrack Pro purchases — Android
  11. Third-Party Services
  12. Data retention and deletion
  13. Security
  14. Children’s Privacy
  15. Changes to This Policy
  16. Contact

Data We Collect

OnTrack does not collect, transmit, or store any personal data on our servers. The app has no backend, no user accounts, no advertising, and no analytics. We never receive your workouts, measurements, photos, or health data.

All data you enter — workouts, sets, exercises, templates, plans, notes, body measurements, progress photos, and preferences — is stored on your device. It leaves your device only when you choose to back it up or share it, as described below:

  • iPhone: in your personal iCloud account, if you enable it.
  • Android: in your own Google account, through Android’s device backup and, if you turn it on, OnTrack’s Google Drive backup.

Apple Health (HealthKit) — iPhone

If you grant permission, OnTrack reads and writes data to Apple Health. Specifically:

  • Reads: Body weight and body fat percentage, to display your measurements in the app.
  • Writes: Workout sessions, active energy burned, heart rate (from Apple Watch), body weight, and body fat percentage.

HealthKit data is used solely to provide app functionality. It is never shared with third parties, never used for advertising, and never sent to any server.

You can revoke HealthKit access at any time in the iOS Settings app under Privacy & Security → Health → OnTrack.

Health Connect — Android

Health Connect is optional. If you turn on Health Connect sync and grant permission, OnTrack reads and writes the following data types, each for a feature you can see in the app:

Data type Read Write What it’s for
Exercise sessions ✓ ✓ Writes each workout you finish in OnTrack. Reads workouts other apps logged at the same time, to tell whether your watch recorded the same workout.
Heart rate ✓ ✓ Writes the heart rate a Bluetooth monitor recorded during a workout. Reads heart rate your watch recorded, to draw the heart-rate graph for that workout.
Weight ✓ ✓ Writes weight you log in OnTrack. Reads weight from other apps (for example a smart scale) into your body-measurement history and charts.
Body fat ✓ ✓ Same as weight.
Active calories burned ✓   Optional. Shows the calories your watch measured for a workout, only when your watch logged that same workout. OnTrack never estimates calories.

How OnTrack handles Health Connect data:

  • Weight and body fat read from Health Connect are saved in OnTrack’s on-device database, so they appear in your measurement history. Watch-measured calories are saved with the workout they belong to. Heart-rate readings from Health Connect are read when you open a workout, to draw its graph, and are not stored.
  • Health Connect data is used only to provide the features above. It is never sold, never used for advertising, never used for credit or lending decisions, and never sent to us or to any third party.
  • Health Connect data leaves your device only inside a backup or export that you choose to make (see “Backups, exports and sharing”), where it is stored in your own account or sent where you choose.
  • To stop sync, turn off Health Connect in OnTrack’s Settings. To remove access, open Health Connect → App permissions → OnTrack. Data OnTrack wrote to Health Connect stays there until you delete it in Health Connect.

Bluetooth heart-rate monitors — Android

If you pair a Bluetooth heart-rate monitor (a chest strap, or a watch broadcasting heart rate), OnTrack connects to the monitor you pick and reads only its heart-rate measurements during a workout or circuit. Those readings are saved with the workout on your device (for its heart-rate graph and average), and, if Health Connect sync is on, written to Health Connect. OnTrack remembers the monitor’s Bluetooth name and address on your device so it can reconnect.

On Android 12 and newer, OnTrack asks for the Nearby devices permission and declares that it does not use Bluetooth scans to determine your location. On Android 11 and older, Android requires the location permission for any app that scans for Bluetooth devices. OnTrack asks for it only to find your monitor and never reads, stores, or shares your location.

While a workout or circuit records heart rate, Android shows a notification for OnTrack’s workout service, which keeps recording when the screen is off.

Photos, videos and camera

Progress photos you take or choose are stored in OnTrack’s private storage on your device. Photos are taken with your device’s camera app, and photos or videos you attach are chosen through the system picker, so OnTrack never has access to the rest of your photo library. Videos attached to a set stay in your library; OnTrack keeps only a link to them.

iCloud Backup — iPhone

If you have iCloud Drive enabled, OnTrack may save an automatic backup of your data to your personal iCloud Drive. This backup is stored in your own iCloud account and is governed by Apple’s iCloud Terms and Privacy Policy. OnTrack has no access to this data outside your devices.

Google backups — Android

  • Android device backup. If backup is on for your device, Android backs up OnTrack’s data (not progress photos) to your Google account, and restores it when you set up a new Android phone. This is handled by Android and governed by Google’s Privacy Policy.
  • Google Drive backup (optional). If you turn on “Back up to Google Drive” in Settings, you sign in with your Google account and allow OnTrack to use files it creates in your Drive. OnTrack then saves one backup file, My Drive › OnTrack › ontrack-backup.json, each time you leave the app. You can open that file on an iPhone to move your data to OnTrack for iPhone. OnTrack can see only the files it created, never the rest of your Drive. The file is stored in your own Google account, governed by Google’s Terms and Privacy Policy, and sent over an encrypted (HTTPS) connection directly from your phone to Google. We never receive it. Turn it off in Settings; remove OnTrack’s access in your Google Account under Security → Your connections to third-party apps & services.

Apple Watch

If you use the OnTrack Apple Watch app, your active workout data (sets, reps, weight) is synced directly between your iPhone and Apple Watch using Apple’s WatchConnectivity framework. No data passes through external servers.

Backups, exports and sharing

Backups and exported files (CSV or OnTrack backup files) contain all your OnTrack data, including measurements brought in from Apple Health or Health Connect. Files you export, and workouts you share with friends, go only to the app or person you choose in the share sheet. A shared file includes the display name you set in Settings, so the recipient can see who sent it.

OnTrack Pro purchases — Android

OnTrack Pro is optional, sold through Google Play as a yearly subscription or a one-time lifetime purchase. Google processes the payment and manages the subscription under its own terms and privacy policy; we never receive your payment details. To know whether Pro is unlocked, the app asks Google Play which purchases and subscriptions your Google account holds and keeps the answer on your device. We don’t receive or store any record of your purchase ourselves.

Third-Party Services

OnTrack does not integrate any third-party analytics, advertising SDKs, crash reporting services, or social media frameworks. The Android app uses Google services only for Google Play purchases of OnTrack Pro and for the optional features above: Health Connect, and Google sign-in with the Google Drive API for Drive backup.

Data retention and deletion

Your data stays on your device until you delete it. You can:

  • Delete any workout, measurement, or photo in the app.
  • Erase everything on a device by deleting the app (on Android you can also clear its storage in Settings → Apps → OnTrack).
  • Delete backups from iCloud Drive or Google Drive, and remove OnTrack’s access as described above.
  • Delete data OnTrack wrote to Apple Health or Health Connect in those apps.

Because we never receive your data, we have nothing stored about you to delete. Contact us if you have any question about your data.

Security

Your data is kept in the app’s private storage on your device, protected by your device’s security. Backups to Google Drive are sent over encrypted HTTPS connections.

Children’s Privacy

OnTrack is not directed at children and does not knowingly collect any information from children under the age of 13.

Changes to This Policy

If this policy changes materially, the “Last updated” date above will be revised. Continued use of the app after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this privacy policy, contact:

Michael Palummieri support@corefirststudios.com