How MicroTrack collects, uses, protects, and retains your data.
Last updated: July 16, 2026
Effective date: July 16, 2026
Overview
This Privacy Policy explains how MicroTrack collects, uses, stores, and protects information when you use the MicroTrack mobile apps and website. MicroTrack helps users estimate everyday microplastic exposure for educational and informational purposes only. MicroTrack is not a medical device and does not diagnose, treat, cure, or prevent any disease. It does not provide medical advice and does not replace professional medical advice. Exposure scores are estimates generated from available product information retrieved from the Open Food Facts API, together with your inputs, and should not be used as the sole basis for medical or health decisions. You should consult a qualified healthcare professional regarding any medical concerns.
Information We Collect
We may collect account information such as name, email address, authentication identifiers, and account settings; app content such as exposure logs, barcode product scans, favorites, scores, insights, and settings; subscription status needed to unlock Premium; and technical information such as device type, app version, language, and diagnostic information. Products are identified using their barcode. Product information is retrieved from the Open Food Facts API. Users can log products they scan or select, but cannot permanently create or add products to the product database.
How We Use Your Information
We use information to provide authentication, calculate exposure estimates, synchronize your data across devices, personalize insights and educational content, provide support, maintain security, process Premium entitlement status, send transactional emails, and improve app reliability. We do not sell your personal information.
Authentication and Account Security
MicroTrack uses Supabase Authentication to create accounts, sign users in, manage sessions, and send secure password recovery emails. Password reset links are handled through Supabase Auth and the MicroTrack website. We do not generate custom reset tokens, and we do not store or process your password manually.
Cloud Storage and Synchronization
When you create an account, MicroTrack may store selected account data and exposure logs in Supabase so your data can synchronize between your devices. Supabase Row Level Security is used so users can access only their own records. Some information may also remain stored locally on your device.
Subscription Information
Premium subscriptions are purchased and managed through the Apple App Store or Google Play. We may receive limited subscription status information needed to unlock Premium features, such as whether Premium is active and relevant entitlement dates. Payment details are processed by Apple or Google and are not stored by MicroTrack.
Advertising
The free version of MicroTrack may display advertisements using Google AdMob. AdMob may process device identifiers, advertising identifiers, approximate location, ad interaction data, and other information according to Google’s policies and your device privacy settings. You can control ad personalization through your device and Google settings where available.
Cookies and Analytics
The MicroTrack website may use essential cookies or similar technologies needed for hosting, security, and password reset functionality. The mobile app may use diagnostics and platform services to maintain reliability. If additional analytics are introduced, this policy will be updated before they are used for new purposes.
Third-Party Services
MicroTrack relies on selected third-party services: Supabase for authentication, database, and synchronization; Resend for transactional emails; Google AdMob for advertising; Apple App Store and Google Play for subscriptions and billing; and the Open Food Facts API for product information. Open Food Facts is a third-party service. Product information retrieved from Open Food Facts may occasionally be incomplete, outdated, or inaccurate. MicroTrack cannot guarantee the accuracy of third-party product data. Exposure scores are estimates generated using available product information and your inputs. These services may process information according to their own privacy policies.
Data Retention
We retain account data while your account is active or as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. You can delete your account directly within the MicroTrack app where available. Deleting your account removes your user account data from MicroTrack's cloud services, subject to legal obligations, backup retention periods, and Apple or Google subscription records where applicable.
Your Rights under GDPR and UK GDPR
Depending on your location, you may have rights to access, correct, delete, restrict, object to processing of, or receive a portable copy of your personal data. You may also have the right to withdraw consent where processing is based on consent and to lodge a complaint with a supervisory authority. To exercise rights, contact us at support@themicrotrack.com. We may need to verify your identity before acting on a request.
Children's Privacy
MicroTrack is not intended for children under 13 and is not directed to children. If you are in a region with a higher digital consent age, you must meet that age or use the app only with appropriate parental or guardian consent. If we learn that we have collected personal data from a child without required consent, we will take appropriate steps to delete it.
International Data Transfers
Our service providers may process information in countries other than your own. Where required, we rely on appropriate safeguards such as contractual protections and the security measures of our service providers. By using MicroTrack, you understand that information may be processed internationally.
Security
We use industry-standard technical and organizational measures designed to protect personal information. Data is transmitted using encrypted HTTPS/TLS connections. Passwords are securely managed through Supabase Authentication, and password reset links are securely generated by Supabase. Supabase row-level access controls help restrict user data so that users can access only their own records. While we take reasonable measures to protect your information, no online system can be guaranteed to be 100% secure. You should use a strong password and keep your account credentials confidential.
Contact Information
Controller / company: Brezya LTD. Registered address: 8 Mutrix Road, London, UK, NW6 4QG. Contact: support@themicrotrack.com. Please include enough information for us to identify your account, but do not send passwords or sensitive reset links.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If changes are material, we will provide notice in the app, on the website, or by email where appropriate. The updated policy will show a new effective date.