Privacy Policy
Last updated: July 14, 2026
This Privacy Policy explains how Cristian Marian Bursasiu PFA (“TrackMaxima”, “we”, “us”), a sole trader registered in Romania, handles personal data across the TrackMaxima Services: the trackmaxima.com website, the free calculators, TrackMaxima Logger, TrackMaxima Prep, the future TrackMaxima Train gym program composer, and our waitlist.
We are the data controller for this processing under the EU General Data Protection Regulation (GDPR). For privacy questions or to exercise your rights, contact support@trackmaxima.com. For the legal detail — lawful bases, international transfers, your rights and how to complain — see our GDPR & Data Protection notice.
1. What we collect, and why
Website & free calculators
The calculators run entirely in your browser. The figures you enter (age, weight, height, body-fat %, lifts) are not transmitted to or stored by us. We set no advertising cookies. If you accept our privacy notice, we load Vercel Web Analytics (cookieless, aggregate page views only — no advertising profiles). A one-time privacy notice stores a single acknowledgement flag in your browser’s local storage (not a cookie). Our hosting provider may process standard server logs (e.g. IP address, request metadata) to deliver and secure the site. See the GDPR notice §7 for detail.
Waitlist
When you join the waitlist we collect your email address (and any preference you select, such as iOS / Android interest) to notify you about launches. Legal basis: your consent, which you give by ticking the consent box on the form — we record that you consented, with a timestamp and consent version, as our proof of consent. You can withdraw at any time via the unsubscribe link in any email or by contacting us.
After you confirm your email, we may ask an optional, anonymous multiple-choice question about what makes eating well hard for you. If you answer, we store only your choice, your platform preference (iOS / Android / both), and a timestamp — not your email — in our database (Vercel KV / Redis). Legal basis: your consent by submitting an answer; you can skip it entirely.
TrackMaxima Logger, TrackMaxima Prep (and, in future, TrackMaxima Train)
When you create an account we process:
- Account data — email address and authentication identifiers.
- App content — food and weight logs, custom foods and favorites, recipes, meal packs, prep/cooking sessions, calendar history, and other logs you create.
- Optional Nutrition Profile — body and health-related data (e.g. weight, height, age, sex, activity level, goals) that you choose to provide for nutrition targets. This is sensitive data; we process it only with your explicit consent and only to provide the feature.
- Accountability partner (Logger, Premium) — if you add an accountability partner, we share a short daily status derived from your logging activity with that person. This is optional and processed only with your consent; you can remove your partner at any time to stop the sharing.
- Subscription status — whether you are on trial, free, or Premium (we do not receive or store your payment card details; those are handled by Apple/Google).
Legal bases: performance of our contract with you (to provide the app), your consent (for optional health data, the accountability partner feature, and waitlists), and our legitimate interests (security, abuse prevention, improving the Services).
2. How we use data
To operate and secure the Services; to provide calculations, tracking, and meal coverage; to manage your subscription status; and to communicate with you about the Services. We do not sell your data, and we do not use it for third-party advertising.
3. Consent & acceptance (apps)
For apps that collect account or health data, sign-up uses explicit consent: you must actively agree to these terms and this Policy, and separately opt in before any optional health data is processed. We record the version accepted and the timestamp.
4. Sub-processors & third parties
We use a small number of trusted providers to run the Services:
- Vercel — website hosting and delivery.
- Resend (via Amazon SES) — sending waitlist and transactional emails.
- Zoho Mail — our email inboxes (e.g. support).
- Convex — backend database and functions for the apps (data encrypted in transit).
- RevenueCat and Apple App Store / Google Play — subscription management and payment processing for Premium (they, not we, process payment details).
Each acts as a processor under appropriate agreements, or as an independent controller for payments. We do not transfer data outside the EEA except under safeguards permitted by GDPR.
5. Data storage & security
App data is stored with our backend provider and encrypted in transit. We apply appropriate technical and organisational measures to protect personal data. No system is perfectly secure, but we work to limit access to what is necessary to run the Services.
6. Retention
We keep account and app data for as long as your account is active. If you delete your account, we delete or anonymise associated personal data, except where we must retain it to meet legal, accounting, or security obligations. Waitlist emails are kept until you unsubscribe or we close the waitlist.
7. Your GDPR rights
You have the right to access, rectify, erase, restrict, and port your personal data, to object to certain processing, and to withdraw consent at any time. The apps provide in-product Export my data and Delete account features. Deleting your account is permanent and irreversible; note that it does not cancel an active store subscription — cancel that separately in the App Store / Google Play. To exercise any right, contact support@trackmaxima.com. You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP) or your local authority.
8. Children
The Services are not directed to children. You must be at least 16 to use them.
9. Changes
We may update this Policy. Material changes will be notified through the Services or by updating the “Last updated” date above.
10. Contact
Cristian Marian Bursasiu PFA (Romania) — support@trackmaxima.com