Privacy

Updated 23 October 2026. This describes the early Track beta.

On your iPhone

You choose which Apple Health categories Track may read. The app stores its local Record in an encrypted database, with its key in the iPhone Keychain. The current app does not write to Apple Health. Camera access is used to scan a pairing code.

Servers and assistants

A fresh install does not connect to a Track-operated data service. You can explicitly pair a runtime or connect an optional Health server. That server receives the data needed for the connection you enable. Pairing a runtime and granting assistant access are separate decisions.

Track supports encrypted Record sync between paired devices. A runtime that is allowed to process your data can read that data. The new local-runtime preview stores imported Health data and added Record context in encrypted databases, with keys in macOS Keychain. Paired changes travel as ciphertext; local phone-to-Mac requests pin the certificate in the pairing code. An agent’s instructions and added context are encrypted. Agent names, configuration metadata, and operational logs remain in private local configuration files. Older developer deployments may use different storage protection, including filesystem-protected Finance SQLite.

Agent conversations

Codex hosts conversations in the new internal preview. Installing a plugin, allowing processing, and choosing an agent’s context and tools are separate actions. Once you allow access, the context an agent reads may be processed by the conversation provider you use in Codex. Added or edited context retains its actor, source basis, and revision history; agents do not change imported Apple Health observations.

Your choices

You can change Health permissions in iOS Settings and manage connections in Track. Disconnecting a server does not delete records already held by that server. Review the app’s removal options and the server’s storage separately.

Beta feedback and this website

TestFlight distribution and its diagnostic reporting are handled by Apple. If you send feedback, include only the details you want to share. This website is hosted by Cloudflare and has no additional analytics script or sign-up form.

Questions

Contact Velislav about privacy, deletion, or a suspected security issue. Track remains in active development and has not received an independent security audit.