Privacy Policy

Last updated: 14 August 2026

Overview

Trackora is a mobile asset-tracking app operated by Trackora [legal entity name pending], [business address pending] ("Trackora", "we", "us"). You scan a barcode, and the app keeps a register of what your team owns, where it is, and what happened to it.

This policy describes what we collect through the Trackora app and the trackora.app website, why we collect it, and the choices you have. We keep it in plain language on purpose. If anything here is unclear, ask us at privacy@trackora.app.

What we collect

We collect only what the product needs to work:

Your phone number. It is your identity in Trackora. You sign in with your number and a one-time SMS code, and there are no passwords.
Asset records you enter. Names, categories, serial numbers, barcode values, purchase details, notes, and the change history the app keeps for each asset.
Asset photos. Photos you take or attach to assets.
Location of assets. The app tags each asset with where it was added, and tracks moves between the locations you define. This is the location of your assets, recorded when you use the app for that purpose.
Device and diagnostic data. Basic device information, app version and crash or error diagnostics, used to keep the app working.
Contact form details. If you write to us through the website, we receive the name, email address and message you send.

We do not collect advertising identifiers, and we do not run third-party advertising or analytics networks on the app or this website.

How we use it

We use the data above to:

run your account and authenticate you by phone number;
keep your team's register in sync across devices;
deliver the messages described in SMS and messaging, such as sign-in codes, transfer requests and invites;
respond when you contact us for support;
keep the service reliable and secure, using diagnostic data.

We do not sell your data, and we do not use it for advertising.

Camera and location permissions

The app asks for two device permissions, each for one stated purpose:

Camera: to scan barcodes and QR codes, and to take asset photos. The camera is never used for anything else.
Location: to tag where an asset was added or moved. Location is attached to asset records you create; the app does not track your movements in the background.

You can decline or revoke either permission in your device settings. The related features stop working; the rest of the app does not.

Offline and local storage

Trackora is offline-first. Your data lives in a local SQLite database on your device, so the app works with no signal, and syncs to our backend when a connection is available. This means a copy of your team's register exists on each signed-in device as well as on our servers. Signing out removes account access from a device.

SMS and messaging

Trackora signs you in with SMS one-time codes and sends transactional messages (for example transfer requests and team invites) by SMS and, where you choose it, WhatsApp. This section contains our messaging disclosures in full.

No sharing of your mobile number.

We do not share, sell, rent, or trade your mobile number or SMS consent with any third party or affiliate for marketing purposes. Mobile numbers are shared only with the messaging providers that deliver messages on our behalf, and only to deliver them.

Message types and frequency.

Verification codes: one message per sign-in attempt, when you request it.
Transactional notices: transfer requests, transfer outcomes, audit results and team invites are sent as those events occur. Message frequency varies with how you and your team use Trackora.

We do not send marketing messages by SMS.

Message and data rates may apply.

Opt-out and help. Reply STOP to any SMS from us to opt out of that message type, and reply HELP for help or contact support@trackora.app. Note that verification codes are how sign-in works: if you opt out of them, you will not be able to sign in to Trackora until you opt back in by replying START.

We share personal data only with the service providers that run Trackora for us, and only so they can provide their service to us:

SMS and messaging delivery: Twilio, which delivers sign-in codes and transactional messages. Your mobile number is shared with this provider solely to deliver messages, as described in SMS and messaging.
Backend hosting and data storage: [hosting provider pending], which runs the sync backend and stores synced account data.

Beyond these processors, we disclose personal data only if the law requires it, to protect our rights or users' safety, or, with notice to you, as part of a merger or acquisition of the business.

Retention, deletion and export

We keep your data for as long as your account exists, because the register is the product. When you delete your account, we delete your personal data and your team data (where you are the last owner) from production systems within 30 days, and from backups on their rotation schedule.

You can take your data with you at any time: the app exports your full asset register to CSV, and audit packs export as printable HTML or PDF, on every plan, including past free-tier limits. To request deletion, or a copy of data the export doesn't cover, email privacy@trackora.app. Depending on where you live, you may also have legal rights to access, correct, restrict or object to our processing of your data. The same address handles those requests.

Security

Data in transit is encrypted with TLS. Access to production systems is restricted and authenticated. Sign-in uses one-time codes rather than stored passwords, so there is no password database to breach. No system is perfectly secure; if a breach affects your personal data, we will notify you and the relevant authorities as applicable law requires.

International transfers

Our processors may store or process data outside your country. Where data protection law applies to those transfers, we rely on the safeguards it recognises, such as standard contractual clauses.

Children

Trackora is a work tool. It is not directed at children and we do not knowingly collect data from anyone under 13 (or the higher minimum age your jurisdiction sets). If you believe a child has an account, contact us and we will delete it.

Changes to this policy

When we change this policy, we will update the Last updated date at the top of this page, and for material changes we will notify you in the app or by message before the change takes effect. The current version always lives at trackora.app/privacy.

Contact

Questions, requests and complaints about privacy:

Email: privacy@trackora.app
Operator: Trackora [legal entity name pending]
Address: [business address pending]