How TrackIt Life protects your household’s data

Amounts are encrypted in your browser

Every amount in Finance is encrypted in your browser, using the Paillier cryptosystem, before it is sent to us. Our servers store only the encrypted value and never see the plain figure.

Who holds the key

The private key that decrypts your amounts is created in your browser. It is protected by a vault passphrase chosen by your household — the key is wrapped with AES-GCM-256 using a key derived from that passphrase. We keep only the wrapped copy, so that you can unlock the vault on a new device. We cannot unwrap it.

If the passphrase is lost

We cannot reset it, and we cannot recover your encrypted figures. There is no back door. That is what makes the design work, and it means the passphrase is the one thing you must keep safe.

What is not encrypted this way

Merchant names, dates, categories and bank identifiers, and your Fitness, Diet and Shopping records, are stored in readable form so that search, categorisation and the other features can work. If our database were ever compromised, it could reveal spending patterns but not the amounts.

On a shared device

So that Finance can show you your figures, a usable copy of the key can be kept in your browser. Locking the vault and logging out are not enough to remove it — on a shared or borrowed device, clear the site’s data in your browser when you have finished.

Where your data lives

Hosted in the EU — OVH in France, encrypted backups with Hetzner in Germany. Run by A&C Digital Ltd, a UK company.

Backups are encrypted before they leave our server and are kept for 30 days. We set no third-party cookies and load no third-party trackers in the apps.

AI only when you opt in

Every AI feature has its own consent switch and is off until you turn it on. When you ask us to read a document — a bank statement, a receipt, a workout screenshot or a meal plan — that file is sent to Mistral, an AI provider in the EU, under a zero-data-retention agreement, and it is not used to train their models. We do not keep the file ourselves.

Transaction categorisation, budget forecasts and the financial health score run on our own servers. Our categorisation model learns from your transaction descriptions only if you switch on that separate consent.

What your household can see

• Household data — the budget, shopping lists and the household diet profile, including any children’s entries — is shared with every member, according to their role.
• Reminders belong to the household: every member can read and edit them.
• Your personal fitness data — profile, weight log, measurements, progress photos and workouts — is scoped to you. Other members do not see it in the app in normal use.
• The exception is the owner’s household export. It includes every member’s user record, fitness profile, weight logs and body measurements. A member who is not the owner can download only their own data.

The roles themselves are set out on the household page.

Signing in

Multi-factor authentication is available in your account settings, and we strongly recommend it. Sessions log out after a period of inactivity, and the Finance vault locks itself after a period you choose.

Who we are

TrackIt Life is run by A&C Digital Ltd, a company registered in England and Wales (company number 17064862), and registered with the UK Information Commissioner’s Office (reference 00014707883). We follow UK GDPR and the Data Protection Act 2018. To report a security concern, contact us.