Privacy Policy

Last Updated: August 2026

Simplytrack is a personal spending tracker published by Nikola Hamovic. This Privacy Policy explains what information the app collects, why it is collected, how it is stored, and the control you have over it. We built Simplytrack so that your financial information stays yours. We do not sell it, rent it, or share it with advertisers.

1. Introduction

Simplytrack ("Simplytrack", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you entrust to us. This policy applies to the Simplytrack mobile application for iOS and Android, and to this website.

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the European Union's General Data Protection Regulation (GDPR), and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). Where these frameworks grant you rights, we honour them regardless of where you live.

By downloading or using Simplytrack, you agree to the practices described in this policy. If you do not agree, please discontinue use of the app and, if you wish, delete your account using the instructions in Section 6.

2. Information We Collect

We collect only what the app needs in order to function. We do not build advertising profiles, and we do not purchase data about you from other companies.

Account Information

When you create an account, we collect and store:

• Your name or display name, as you provide it.
• Your email address, used to identify your account and to contact you about support requests.
• Your authentication provider and the identifier it returns: Email and password, Apple ID (Sign in with Apple), or Google Sign-In.

If you sign in with Apple or Google, we receive only the basic profile details that provider releases to us. We never receive your Apple or Google password. If you use Apple's Hide My Email feature, we store only the relay address Apple generates.

Financial Tracking Data

Simplytrack stores the spending information you choose to enter, which may include:

• Transactions you record, including amount, date, currency, and any note or description you add.
• Expense categories and subcategories, including any you create, rename, or archive.
• Tags applied to transactions.
• Income logs and recurring income entries.
• Budget targets, spending goals, and net worth figures you set.

This information is entered manually by you. Simplytrack does not connect to your bank, credit card, or any financial institution. We do not use aggregation services, and we never request your online banking credentials. Your records are stored in your account on Google Firebase / Cloud Firestore so they can sync across your devices.

Device & Usage Data

To keep the app stable we collect basic technical diagnostics:

• Device model, operating system version, and app version.
• Crash reports and error logs, including the state of the app at the time of a failure.
• Aggregate, non-identifying performance metrics such as load times and feature usage counts.

This diagnostic data is used strictly to find and fix defects and to understand which features are worth improving. It is not used for advertising and is not combined with your financial records to profile you.

Information We Do Not Collect

• We do not collect your credit card or debit card numbers.
• We do not collect your precise geolocation.
• We do not access your contacts, photos, microphone, or camera.
• We do not use third-party advertising or cross-app tracking SDKs.

3. How We Use Your Information

We use the information described above solely to:

• Provide local and cloud-synced expense and income tracking across your devices.
• Calculate the analytics the app displays: spending overviews, month-over-month comparisons, saving trends, category breakdowns, budget progress, and net worth summaries.
• Create, authenticate, and secure your account.
• Manage your in-app subscription status and restore purchases you are entitled to.
• Respond to your support enquiries and bug reports.
• Diagnose crashes, fix defects, and improve app performance and reliability.
• Comply with applicable legal obligations.

4. Legal Bases for Processing

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR:

• Performance of a contract: to create your account, store the records you enter, sync them across devices, and deliver subscription features you have paid for.
• Legitimate interests: to keep the service secure, prevent abuse, and diagnose and fix technical faults.
• Consent: where we ask for it explicitly, such as optional diagnostic sharing. You may withdraw consent at any time.
• Legal obligation: where we must retain or disclose information to comply with the law.

5. Third-Party Service Providers

Simplytrack relies on a small number of established providers to operate. These providers act as processors on our behalf and are contractually restricted to using your information only to deliver their service to us.

Google Firebase

We use Google Firebase for user authentication, secure database storage (Cloud Firestore), and our cloud backend. Your account details and the spending records you enter are stored within our Firebase project, protected by security rules that restrict access to your own authenticated account. Firebase also provides the crash reporting and performance diagnostics described above.

Apple App Store, Google Play Billing, and RevenueCat

In-app subscriptions are processed by Apple's App Store or Google Play Billing, depending on where you downloaded the app. We use RevenueCat to validate purchase receipts and to determine whether your subscription is active so the app can unlock Pro features.

Simplytrack does not store credit card numbers. Payment details are handled entirely by Apple or Google under their own privacy policies and never reach our servers. We receive only the transaction status, product identifier, and renewal or expiry dates needed to grant or revoke access.

Legal Disclosure

We may disclose information if we are legally compelled to do so (for example in response to a valid court order, subpoena, or lawful request from a public authority), or where disclosure is necessary to protect our rights, investigate fraud, or protect the safety of any person.

6. Account & Data Deletion

You can permanently delete your Simplytrack account and all data associated with it at any time. You do not need to contact us first, and you do not need an active subscription.

Delete your account from inside the app

1. Open the Simplytrack app and sign in.
2. Go to Settings > Account > Delete Account.
3. Confirm the request when prompted.

Delete your account by email

If you can no longer access the app, email contact@getsimplytrack.com from the address registered to your account and ask us to delete it. We will verify the request and complete the deletion, then confirm in writing.

Deleting your Simplytrack account does not automatically cancel a subscription purchased through Apple or Google. Cancel your subscription separately in your Apple ID or Google Play account settings, as described in our Terms of Service and on our Support page.

7. Data Retention & Security

We retain your account information and spending records for as long as your account remains active, because the app's purpose is to keep a running history for you. When you delete your account, the associated records are purged as described above. Backup copies and system logs are cycled out within 30 days. We may retain a minimal record of a deletion request where we need it to demonstrate compliance.

We protect your information with the following measures:

• Encryption in transit: all traffic between the app and our backend is encrypted using TLS (HTTPS).
• Encryption at rest: data stored in Google Firebase is encrypted at rest on Google's infrastructure.
• Access control: Firebase security rules scope every read and write to the authenticated owner of the data, so one account cannot read another's records.
• Credential handling: passwords are managed by Firebase Authentication and are stored only as salted hashes. We cannot see your password.
• Least privilege: administrative access to production systems is limited to those who require it to operate the service.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security, and you are responsible for keeping your login credentials and your device secure.

8. Your Privacy Rights

Subject to your jurisdiction, you have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete. Most of this you can edit directly in the app.
• Delete your account and associated data, as set out in Section 6.
• Withdraw consent where we relied on it, without affecting processing already carried out.
• Data portability: receive a copy of the records you provided in a portable format.
• Object to or restrict certain processing.
• Non-discrimination: under the CCPA/CPRA, we will not degrade the service you receive because you exercised a privacy right.

Because we do not sell or share personal information for cross-context behavioural advertising, there is no "Do Not Sell or Share My Personal Information" process to complete: there is nothing to opt out of.

To exercise any right, email contact@getsimplytrack.com. We will respond within the timeframe required by applicable law, generally within 30 days. We may need to verify your identity before acting on a request. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority; in Canada, you may contact the Office of the Privacy Commissioner of Canada.

9. International Data Transfers

Simplytrack is operated from Canada and relies on Google Firebase infrastructure, which may process and store data in facilities located outside your country of residence, including in the United States. Where personal information is transferred out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. By using the app you acknowledge that your information may be processed in these locations.

10. Children's Privacy

Simplytrack is not directed to children. The app is intended for users aged 13 and over, and you must be the age of majority in your jurisdiction to purchase a subscription. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact contact@getsimplytrack.com and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes to the app, our providers, or the law. When we do, we will revise the "Last Updated" date at the top of this page. If a change materially affects how we handle your information, we will provide a more prominent notice, such as an in-app message. Continued use of Simplytrack after an update means you accept the revised policy.

12. Contact Information

If you have questions about this policy or about how your information is handled, please get in touch. We are happy to help.

• Email: contact@getsimplytrack.com
• Publisher: Nikola Hamovic
• Application: Simplytrack for iOS and Android

For help with the app itself, see our Support page.