Zásady ochrany osobních údajů

Tyto zásady jsou k dispozici v angličtině. Platí anglická verze.

Effective date: October 27, 2026

This Privacy Policy explains how the Trackful mobile app for Android (an iOS version is coming soon; "the app", "we", "us") collects, uses, stores, shares, and protects information. Trackful finds parcel tracking numbers in your shipping emails and shows the delivery status of your packages. It also shows the delivery status of packages you add on our website, trackful.app (see 1.7). By using the app or the website you agree to this policy.

Summary

  • The app works without an account. We don't ask for your name, phone number, or email address to use it.
  • Your emails are read and analyzed only on your device. Email content never reaches our servers.
  • Tracking numbers found in your emails are only suggested to you. A number leaves your device only after you choose to add it, so we can check its delivery status.
  • We don't sell data, don't show ads, and don't use your data to train AI models.

1. Information we access and collect

1.1 Gmail

Connecting a Gmail account is optional. If you choose to connect one, you create an app password in your Google Account and enter it in the app, which then reads your mail through Gmail's IMAP access (imap.gmail.com). With this access the app:

  • reads email messages (subject, sender, and body text) directly from Gmail to your device;
  • analyzes them on your device with a built-in model to find parcel tracking numbers;
  • keeps on your device the tracking numbers it finds and a short piece of the surrounding email text, and shows them to you as suggestions, so you can see where each number came from and decide whether to add it;
  • keeps on your device, in the operating system's secure storage, the information needed to access the mailbox (your Gmail address and the app password).

The app never sends, modifies, labels, or deletes your emails.

Email content, email addresses, and mailbox credentials are never sent to our servers or to any third party. The only information derived from your emails that may leave your device is a tracking number (and, optionally, its carrier) that you have explicitly chosen to add to your packages (see 1.4). Numbers you don't add never leave your device.

An app password technically gives access to the whole mailbox, so create one only for Trackful, and revoke it at any time in your Google Account under App passwords.

1.2 Other mailboxes (IMAP)

You can also connect a mailbox of another provider using its IMAP settings. The same rules apply: the app connects to your mail server directly from your device, analyzes emails on your device, and stores the mailbox credentials only in the device's secure storage.

1.3 Information you enter

Tracking numbers you add by hand or scan with the camera, and the names you give to packages, are stored on your device. The camera is used only while you scan a barcode; images are not saved or sent anywhere.

1.4 Information sent to our server

To check delivery status and send you notifications, the app sends to our server:

  • the tracking numbers of the packages you added (by hand, by scanning, or by confirming a number suggested from your email) and, optionally, the carrier (delivery service) of each one;
  • additional details you enter for a package when its carrier asks for them, for example the last digits of a phone number or an email address, a postal code, or whether you are the sender or the receiver;
  • a random device identifier generated by our server (not linked to your identity);
  • your device platform, the app version, and the app language (used for the language of push notifications);
  • the result of an app integrity check (see below);
  • a push notification token from Firebase Cloud Messaging, only while notifications are allowed on your device.

When the app registers with our server, it asks Google Play Integrity (on Android) or Apple App Attest (on iOS) to confirm that the request comes from the genuine Trackful app on a real device. Google or Apple returns a signed verdict about the app and the device, which our server checks and stores together with the device identifier. It contains no personal data and is used only to protect the service from abuse.

Additional package details are sent only when you enter them. Together with the tracking number they are passed to the package tracking services and carriers we work with, only to get that package's status. They are stored on our server together with the tracking number and deleted together with it: when you delete or archive the package, change its carrier, or enter other details, and when the device is deleted from our server.

Our server also receives your IP address as part of normal network communication; it is used only to deliver responses and to protect the service from abuse.

1.5 Crash reports and usage statistics

The app uses Firebase Crashlytics and Firebase Analytics (Google). They collect crash reports (the technical state of the app when it crashed) and how the app is used (screens opened, features used), together with an app-instance identifier, your device model, operating system and app version, and your approximate region. This data is never combined with the contents of your email or with your tracking numbers, and it is used only to find and fix problems and to understand how the app is used. Advertising features and ad personalization are turned off.

1.6 Translation of tracking events

On the package screen the app can show the status lines that carriers report for a package (for example "Arrived at sorting center") in your device language. To do that, the app sends the text of these status lines directly from your device to Google Translate, together with your IP address as with any network request. Status lines can contain place names and, for some carriers, the name of the person who signed for the package. Tracking numbers, your email and its content are not sent. Translations are kept on your device only. You can switch back to the original text with the link under the history on the package screen, and the app sends nothing when the text is already in your language.

1.7 Tracking on the website

On trackful.app you can also track up to 3 packages in a browser, without the app. The tracking numbers you enter (and, optionally, the carrier and any additional package details a carrier asks for) are sent to our server as in the app, together with a random device identifier generated by our server and the language of the page. Your packages, their tracking information and this identifier are kept in your browser's local storage and removed 30 days after your last visit. The website sets these functional cookies: lang remembers the language you chose; tf_pk tells the website that this browser has saved packages so it can open them directly. Before the first package is added, Cloudflare Turnstile checks that the request comes from a person and not a program; for this check Cloudflare receives your IP address and technical information about your browser.

The website uses Google Analytics 4 (Google) for aggregate usage statistics: the pages viewed and events such as adding or removing a package, the kind of tracking result shown, or opening Google Play, together with technical information such as the approximate location (for example the country) and the device and browser type. Tracking numbers, package details, and email addresses are never sent, and the address of a tracking page is reported without its tracking number. Google Analytics 4 does not log or store IP addresses. Advertising features, ad personalization, and Google signals are turned off, and no user identifier is set. Google Analytics sets the cookies _ga and _ga_<ID>, which expire after 13 months; its reports are kept for 14 months. Blocking these cookies or the Google Analytics script in your browser does not affect the website.

2. How we use information

  • to find tracking numbers in your emails and show them in the app;
  • to check the delivery status of your packages with postal and courier services;
  • to send you push notifications when the status of a package changes;
  • to keep the service secure and working (rate limiting, error diagnostics, aggregate usage metrics that contain no personal data).

We don't use your information for advertising, profiling, or marketing.

3. Sharing and disclosure

We share information only with the service providers needed to run the app:

  • Third-party package tracking services (including postal and courier services) receive tracking numbers together with any additional package details you entered (see 1.4), and we receive tracking information (delivery status and events) from them in return.
  • Firebase Cloud Messaging (Google) receives the push token and the notification text to deliver notifications to your device.
  • Firebase Crashlytics and Firebase Analytics (Google) receive crash reports and app usage data, as described in section 1.5.
  • Google Play Integrity (Google) and Apple App Attest (Apple) check that the app is genuine, as described in section 1.4.
  • Google Translate (Google) receives the text of carrier status lines to translate them into your language, as described in section 1.6.
  • Cloudflare Turnstile (Cloudflare) receives your IP address and technical information about your browser when you add the first package on the website, as described in section 1.7.
  • Google Analytics (Google) receives usage data from the website, as described in section 1.7.
  • Fly.io hosts our server and the data described in 1.4.
  • Vercel hosts our website.

We may disclose information if required by law or to protect the rights and safety of users. We don't sell or rent information to anyone.

4. Storage, retention, and deletion

  • Data on your device (packages, tracking history, email snippets, mailbox credentials) stays there until you delete it in the app, disconnect the mailbox, or uninstall the app.
  • When you disconnect a mailbox in the app, its credentials are removed from the device.
  • On our server, the tracking numbers of a package, and the details entered for its carrier, are removed when you delete the package in the app. A device that has not contacted the server for 30 days is deleted together with its tracking numbers, those details and its push token. A device registered from the website is deleted after 7 days without contact.
  • You can revoke an app password at any time in your Google Account under App passwords; the app then can no longer read that mailbox.
  • To ask us to delete data stored on our server, email us at the address below; we will do so within 30 days.

5. Security

All network communication uses HTTPS (TLS). Mailbox credentials are stored in the operating system's secure storage (Android Keystore / iOS Keychain). Access to the server is limited to the developer.

6. Children

Trackful is not directed to children under 13, and we don't knowingly collect information from them.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or object to the processing of your information. Most data lives only on your device and is under your control. For anything stored on our server, contact us.

8. Changes to this policy

We may update this policy. The current version is always on this page with its effective date. If changes affect how we use your email data, we will notify you in the app before they take effect.

9. Contact

Questions about this policy or your data: trackfulapp@gmail.com