Privacy

Data on this device

The app stores your working data exclusively in protected app storage. You can export a backup file yourself and optionally protect it with a password; its content is then encrypted (AES-256), and without the password nobody can open it – not even us. “Delete all data” in the settings removes your working data from this device. If it syncs with other devices, the deletion reaches them too at the next sync. The undo points trakki creates on its own before risky steps such as an import, a deletion or a sync (at most five, each with all your data) are deliberately kept, so a mistake can be undone. You delete them one by one under “Undo points on this device”; deleting the app removes them at the latest.

Location

trakki asks for your location only after you tap the map’s location button (“Show my position”), shows it there and neither stores nor tracks it. There is no background location access.

Dictating notes (speech recognition)

When you tap “Dictate note”, trakki listens through the microphone until you stop dictating and writes the recognised text into your note. The recognition is not done by trakki but by your device or browser: on the iPhone and in Safari by Apple’s speech recognition, in Chrome by Google’s, in other browsers by their vendor’s (Microsoft in Edge, for example). Your recording may be sent to that provider – Apple, Google or the browser vendor – and processed there; their privacy policies apply, and a transfer to countries outside the EU (in particular the USA) is possible.

On the watch – Apple Watch or Wear OS – the watch’s own voice input does the recognition, that is Apple or Google; audio may be sent to that provider there too, and trakki receives only the text. trakki itself stores no recording and sends it nowhere – all that stays with you is the text you save.

The microphone is only active while the button shows “Stop dictation”, and your device asks for permission the first time. If you do not want this, type the note or use your keyboard’s dictation; the terms of the keyboard or operating system provider apply to that. You can withdraw the microphone and speech recognition permission in your device settings at any time.

What goes to the internet directly

The app you install from the App Store or Play Store loads maps over an encrypted connection (HTTPS) directly from OpenFreeMap. Technically this transmits your IP address — the number your device is reachable under right now — and the map tiles requested. If you have your position shown, your exact GPS point is not sent to OpenFreeMap; the map section loaded afterwards can still narrow down your location, the closer you zoom the more precisely.

Address search goes directly to Stadia Maps, and it already runs while you type: as soon as an address field or a customer’s name field holds at least four characters and you pause briefly, trakki fetches suggestions. Searches with the magnifier and filling in customer positions, for example after an import, go there as well. Stadia receives the text in the field — in the name field that includes the customer’s name — or the street, postcode and town of your customers, plus technical connection data. Customer numbers, notes and other customer data are not sent along; your GPS point and your saved starting address are not transmitted either to pull results closer to you. The installed app does not query Nominatim of the OpenStreetMap Foundation. Do not type notes or confidential content into search and address fields.

If you tap Navigation, trakki opens Google Maps, Apple Maps or Waze and hands over the customer’s name and address as the destination; from then on, that provider’s terms apply.

On an iPhone the app asks Apple’s public App Store search at most twice a day whether a newer version exists; on an Android phone it asks Google Play instead. Apple or Google see your IP address in the process.

Drive times in the installed app

For real drive times trakki queries the routing service Stadia Maps directly. Only bare pairs of coordinates are transmitted — never names, addresses or other customer data. The answers are cached on the device; without a connection or without the service, trakki calculates locally using clearly marked straight-line values. trakki runs no intermediate server for map, search or routing requests and does not receive them.

Opening hours from OpenStreetMap

When you tap “Fill in opening hours” or import an Excel file, trakki downloads a public list of names, addresses and opening hours of businesses in Austria from OpenStreetMap. trakki provides this list via the hosting service Cloudflare Pages; when it is downloaded, Cloudflare technically sees your IP address and the time, nothing more. The comparison with your customers runs only on your device: no customer data leaves the device, and trakki does not learn which customers you have. The added hours are marked “from OpenStreetMap – please check”. The data comes from the OpenStreetMap contributors and is available under the Open Database License (ODbL 1.0); source: © OpenStreetMap contributors, openstreetmap.org/copyright.

Device sync via your cloud (optional)

Only if you choose a cloud provider in device sync and sign in there does trakki place a file with your data stock (customers, categories, visits, appointments, tasks, plans and the shared settings) into your own account and fetch the states of your other devices from there. Overnight stays, territory split and device settings such as the reminder switch including its lead time, appearance, sounds and vibration do not travel with it; they stay on each device.

You can choose Google Drive (a hidden app folder in your Google Drive account) or Microsoft OneDrive (its own app folder “Apps/trakki”). trakki only ever gets access to that app folder, never to your other files; the sign-in happens directly with the provider, trakki does not see your password, and there is no trakki server in between. The transfer to the provider is encrypted (HTTPS).

The sync file itself is end-to-end encrypted with a key derived from your sync password: only your devices that know this password can read it – neither the provider nor trakki. This holds as long as all your devices are up to date: an older trakki version still writes its state unencrypted. In addition it is signed with a key of this device so that your other devices can recognise an altered or foreign file. The provider can still see only the sync group identifier, device identifier, file size, time and number of files. Older, still unencrypted states may remain in the provider’s version history for a while. If you bought the trakki subscription, the file also contains the licence note described in the section of that name below.

After the first successful sync this device keeps syncing on its own (when you open the app and at intervals) for as long as your sign-in is valid – the “Sync” tab shows when each device last synced. You can end this any time: revoke trakki’s access in your account with the provider (at Google under “Connections to third-party apps”) and delete the app folder or the hidden app data there; on the device it is enough to switch the provider in the “Sync” tab.

The provider’s privacy policy applies to the processing there (Google or Microsoft); transfer to countries outside the EU (in particular the USA) is possible in the process. trakki’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Device sync via your own NAS (optional)

If you choose “Your own network” (WebDAV) instead, the same sync files go exclusively to the address you entered. If that is your own NAS or computer, no third party is involved and what your server logs is up to you. If you enter the WebDAV address of a cloud service, the file sits with that provider and its privacy policy applies. No trakki server is ever involved. Here, too, the sync file is end-to-end encrypted with the key from your sync password; only the sync group identifier, device identifier, file size, time and number of files remain visible. trakki stores the address, username and password on this device only. Note the warning in the app: over an unencrypted “http://” address the credentials travel in the open — use “https://” wherever you can.

Sync over your own Wi-Fi with trakki for Windows (optional)

If you also have trakki on your Windows PC, phone and PC can exchange their sync files directly over your own Wi-Fi – without internet, without a cloud and without a trakki server. The same data stock is transferred as with cloud sync, including the licence note.

So that the phone can find the PC, trakki for Windows announces itself on the local network with the name of the PC; other devices on the same Wi-Fi can see this name. That is also why the phone asks for permission to use the local network. When pairing, you confirm on the phone a number or a code shown on the PC; the code itself never travels over the network. Every transfer carries a proof that lets both sides detect forgeries and a wrong counterpart.

The content is end-to-end encrypted with a key derived from your sync password: anyone listening in on the Wi-Fi cannot read it, and the background service of trakki for Windows only stores the files encrypted, as long as all devices are up to date. Only the trakki app on the PC can read them, once your sync password has been entered there. The sync group identifier, device identifier, file size, time and number of files remain visible.

trakki for Windows

The Windows app stores your data only on your PC, in the user folder of your Windows account. Credentials such as the secret from pairing or a NAS password are stored encrypted with Windows’ own protection, so only your Windows account can read them. On first start it adds itself to autostart and then runs in the background so that your phone can find it for syncing; you can switch this off at any time via the trakki icon next to the clock. For maps, address search and driving times the same applies as in the phone app. Nothing is bought in the Windows app: it is unlocked by the licence note from syncing with your phone.

Camera – only for connecting a device

trakki only uses your phone camera when you tap “Add device” under “Sync” – and only to scan the QR code of another device. No image is stored, and no image leaves the device; only the text in the code is read. Your phone then hands the sync password over to the new device in encrypted form, via your own cloud or your PC – readable only for the device whose code you scanned, not for the provider and not for trakki.

Reminders on your phone

The app works out when to notify you on the device itself. None of it goes through a server on the internet. If you tick off a visit directly in the notification or on a connected smartwatch, it lands in the same data on this device as ticking it off in the app.

Smartwatch (Apple Watch and Wear OS)

If an Apple Watch or a Wear OS watch with trakki is connected to your phone, trakki sends it your day plan, for today and tomorrow. For each stop that is: customer name, postcode and town, a navigation link containing the address, the coordinates, visit time, departure time and driving time, a line about opening hours, the appointment, phone number, email address and contact person, the latest visit note, up to five open tasks, and revenue of the last 12 months with its trend. It also gets your progress and the day wrap-up. The transfer runs over the connection that the operating system sets up between phone and watch: for the Apple Watch, Apple’s connection between iPhone and watch; for Wear OS, Google Play services. If a Wear OS watch is not connected by Bluetooth, the transfer can run through Google’s servers; Google states that it is end-to-end encrypted. What you do on the watch travels the same way back: ticking off visits, dictated notes and tasks, and email drafts. You only send the email once you open the draft on your phone. trakki runs no server for this and receives none of it. If you do not want this, disconnect the watch from your phone or delete the trakki app on the watch.

This section applies once trakki is available in the stores.

Subscription and purchase through the store

trakki sells nothing in the browser: you buy the subscription in the app you downloaded from a store, and only at that store's checkout. Your payment details stay there: trakki receives neither card number nor billing address, neither your name nor your store account or email address, and there is no invoice or receipt in the app.

What the app reads from the store concerns only the two trakki Pro products: which one was bought, what state it is in and whether it should renew; for the purchase window, price and term of the offers are added, plus whether your store account still qualifies for a free trial. Exactly what the store hands over differs from store to store. All of this is processed only at the moment of display or purchase and forgotten afterwards — the only thing that persists is the subscription state in the next section. This information stays on this device: it is in no backup file and goes to no trakki server. Only if you use device sync does a brief licence note derived from it travel along – see “The licence note in device sync” below. The respective store's privacy policy applies to the purchase and its handling.

This section applies once trakki is available in the stores.

The subscription state on this device

So that trakki knows whether your trakki subscription applies even without a connection, the installed app remembers the subscription state last confirmed by the store. It contains: which of the two products applies, what the state is, how long it lasts, whether and to which product it should renew, when it was last checked and whether it came from a store query or a purchase. No name, no account identifier, no price, no transaction number. In the browser this state never comes into existence: nothing is bought and nothing unlocked there.

Its sole purpose is to make the service you paid for available on your device, even when the store is unreachable. The legal basis is performance of the contract you enter into with the purchase (Article 6(1)(b) GDPR). The state sits only in the device's protected app storage, is overwritten on every successful check and disappears completely once you delete trakki from this device — which is also its erasure criterion, since without the app there is nothing left to unlock. “Delete all data” in the settings deliberately leaves it in place: it is not working data of yours but the proof that this device is entitled to the paid version. If it were deleted too, a paying customer without a connection would suddenly face a locked app. Deleting your data does not cancel your subscription — that only works at the store.

This section applies once trakki is available in the stores.

Viewing, changing or cancelling the subscription

Cancelling and switching the term work exclusively at the store you downloaded the app from. trakki takes you there with one tap: the “Manage subscription” button in the purchase window opens that store's subscription management. There you see term and price, switch between monthly and yearly and cancel — cancellation takes effect at the end of the paid term. trakki can neither start nor end a subscription and cannot refund anything; the app only opens the management screen and learns nothing from it — what you change there it sees only the next time it asks the store. You paid at the store, so a refund runs through the store as well.

This section applies once trakki is available in the stores.

The licence note in device sync

So that the trakki subscription you bought also works in trakki for Windows without buying it a second time, the app on the device with the store purchase places a licence note in each of its own sync files. It contains only: which of the two products applies, until when the note is valid, when it was issued and how many devices belong to your sync. No name, no account identifier, no price, no transaction number. The note therefore travels wherever your sync files go – to your cloud, to your NAS or over Wi-Fi to your PC, encrypted like the whole sync file there – but to no trakki server. It is only valid for a short time and is renewed with every sync; if you cancel your subscription, it expires on its own. The legal basis is performance of the contract you enter into with the purchase (Article 6(1)(b) GDPR). Without device sync no licence note is created.

Legal bases and recipients

Maps (OpenFreeMap), address search and driving times (Stadia Maps), “Speak note” (the speech recognition of Apple, Google or your browser vendor) and handing over to your navigation app (Google Maps, Apple Maps or Waze) are only used when you use the respective feature. The legal basis is Art. 6(1)(b) GDPR: we provide you with the feature you call up. Where data about your customers is transmitted – such as an address in a search or name and address for navigation – the legal basis is Art. 6(1)(f) GDPR: the legitimate interest in working route planning; only what the feature needs is transmitted. The update check via Apple’s App Store search or Google Play is based on Art. 6(1)(f) GDPR, the legitimate interest in pointing you to a newer version. Downloading the opening-hours list is likewise based on Art. 6(1)(b) GDPR: it only happens when you tap “Fill in opening hours” or import an Excel file; Cloudflare, Inc. processes your IP address and the time as a processor on our behalf (Cloudflare Data Processing Addendum), and any transfer to the USA is based on the EU-US Data Privacy Framework. Device sync via your cloud, your NAS or trakki for Windows only runs if you set it up (Art. 6(1)(b) GDPR); the cloud provider is your own contractual partner. On the role of the recipients: Stadia Maps processes the search and driving-time requests as a processor on our behalf (Stadia Maps Data Processing Addendum). OpenFreeMap, Apple, Google, the navigation and browser vendors and your cloud provider process the data under their own responsibility and their own terms. trakki itself receives none of this data.

Protection and retention at the map services

Local app storage and the systems of the map services follow different protection and deletion rules. trakki does not control their logs and cannot guarantee protection equivalent to local storage. The providers' current terms, linked below, are what counts.

OpenFreeMap

OpenFreeMap is operated by Hyperknot Software Kft. in Hungary. By its own statement, regular access logs contain no IP addresses, and all server logs are deleted after 7 days. Error logs may contain the IP address and the requested address. In cases of abuse or security incidents, IP addresses may be logged temporarily and are deleted after 30 days at the latest. OpenFreeMap states appropriate security measures and may use Cloudflare as a technical service provider.

Nominatim / OpenStreetMap Foundation

The installed app does not query Nominatim. For the web version of trakki it remains the fallback when the address register of the Austrian Federal Office of Metrology and Surveying (BEV) and Stadia cannot find an address. In that case Nominatim processes, among other things, IP address, app and device type, operating system, time, content accessed and search queries. Search queries may be evaluated to improve the OpenStreetMap dataset. The OpenStreetMap Foundation states 180 days for detailed usage data; it does not guarantee a shorter period of its own for all Nominatim server logs. Data is held in the United Kingdom and in the EU, backups in the EU. Access is organisationally restricted; commissioned providers must meet the Foundation's data protection and security requirements and may not use the data for their own purposes.

Stadia Maps

The terms of Stadia Maps apply to the drive time and address requests. The difference between the two matters: for drive times only pairs of coordinates travel, whereas for an address search Stadia inevitably receives the search text itself, usually an address, from the name field also a name. The provider states encrypted transmission and storage, access controls and security monitoring. Logs of requests and access remain roughly 7 to 14 days under its current statement; security, audit and backup logs may persist longer under internal or statutory periods and in security or legal cases. Processing outside the EU is covered by standard contractual clauses.

Access, objection and erasure

“Delete all data” removes only data on your device, not logs already created at the map services. You avoid further transmissions by no longer using the map and address search and by revoking the location permission.

For access, objection, withdrawal or erasure, write to the trakki privacy contact; we will help you work out who holds what and forward your request where necessary. You can also contact the providers directly at the addresses above. Please state the service, the date, the time and the public IP address you used at the time if you can. Assigning or deleting data afterwards may be impossible once it has been anonymised or deleted; the OpenStreetMap Foundation also states that individual temporary access logs are regularly not accessible.

Controller

Send privacy and support requests to [email protected]

This website

The site is hosted at Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary connection data such as IP address, time and address accessed. The basis is the legitimate interest in operating the site securely (Article 6(1)(f) GDPR). Cloudflare processes the data as our processor, including in the USA. The transfer is based on the adequacy decision for the EU-US Data Privacy Framework, under which Cloudflare, Inc. is certified, supplemented by the standard contractual clauses in Cloudflare's data processing agreement.

Visitor statistics. To measure reach, Cloudflare evaluates the connection data that arise anyway (page views, approximate origin, device type, referring page) and provides them to us only in aggregated form. Nothing is stored on or read from your device for this. The basis is our legitimate interest in visitor statistics (Article 6(1)(f) GDPR).

Cookies only with consent. On your first visit a window asks whether Google Analytics 4 may measure as well (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Before that, nothing is loaded from Google and no cookie is set. If you agree, you receive cookies from this service containing a random identifier that links visits from the same browser; pages visited, time spent, approximate origin, device and the referring page are recorded. Your IP address is sent to Google; according to Google, Google Analytics 4 does not store it but only derives an approximate location from it. Advertising signals are switched off. The cookies “_ga” and “_ga_KRLZC06NVX” are set, each valid for up to two years unless you withdraw before then. Google keeps the analytics data for two months. Recipients are Google Ireland Limited and Google LLC (USA). The transfer to the USA is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Article 45 GDPR), under which Google LLC is certified. The basis of the measurement is consent (Article 6(1)(a) GDPR). You can withdraw at any time via “Cookie settings” in the footer of every page — the choice applies immediately and going forward.

Waiting list. On the home page and most other pages you can enter your email address (“Let me know when the app is out”). You tick yourself what you would like to get, nothing is preselected: the launch message (one email as soon as the app is available in the stores), news about trakki (such as new features, at most once a month), or both. No advertising from other companies. You then get an email with a link to confirm (double opt-in). Only once you confirm there do we send you what you ticked. We store the address, your choice, the language of the page and the times of sign-up, confirmation email and confirmation, at Cloudflare (see above), without an IP address. We send the emails through our mailbox at INWX (see “Email”). If you do not confirm, we delete the entry 30 days after the confirmation email. The basis is consent (Article 6(1)(a) GDPR). To unsubscribe, use the link at the bottom of every email from us, reply briefly to one of our emails or write to the address in the imprint. The entry is then deleted; only the address is kept, marked as unsubscribed, so that you reliably get no more emails (Article 6(1)(f) GDPR). If we stop sending news, we delete the list.

The map on the home page. The map in the section “Your whole territory on one map” only starts when you tap “Start the map”, on every visit anew. Only then does it load tiles from OpenFreeMap (Hyperknot Software Kft., Hungary) and street routes from Stadia Maps. The services receive your IP address and the map sections requested. The basis is our legitimate interest in showing the map you asked for (Article 6(1)(f) GDPR). Apart from that, this site loads nothing from external servers: no fonts from Google, no content network, no advertising networks.

Your browser's storage. In your browser's storage (not as a cookie) the site keeps only what you triggered yourself: your choice in the cookie window, light or dark mode, the map's sample data and, for the current session, the scroll position. None of it is sent to us. You can delete it via your browser's site data.

Email. If you write to us, we process your address and message in order to reply (Article 6(1)(b) or (f) GDPR). Mail for [email protected] is received at INWX (Germany). We delete enquiries once they are dealt with and no retention obligation applies, at the latest after three years.

Your rights. You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to withdraw consent at any time with effect for the future. You can object at any time to processing based on legitimate interests (Article 6(1)(f) GDPR). Write to [email protected]. You can also lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).

This section last updated: 8 October 2026.