Privacy Policy

Ontrack (“Ontrack”, “we”, “us”) is a university-application deadline planner for IB and British-curriculum students in the UAE applying to UK universities. This policy covers the Ontrack mobile app (Google Play package com.ontrack.ucas) and the Ontrack website at ontrack.darae.ai. By using Ontrack you agree to this policy.

Ontrack is local-first. The information you enter — your target universities and courses, deadlines you tick off, your academic schedule, checklists, subjects, awards, activities, your preferred name and any private notes — is saved in your device's local storage. It stays on your device and works fully offline and signed out. It is never sent to, or stored on, our servers.

Because Ontrack is local-first, we process very little on our side:

• Account email (only if you sign in). Sign-in is optional and exists solely to enable Google Drive backup and, in future, a paid plan. If you sign in with Google, our authentication provider receives your email address and basic Google profile (such as your name) to identify your account. We do not use it for advertising or profiling.
• Feedback you choose to send. If you use “Send feedback” in the app, we store your message and, if you include one, an email address so we can reply. You don't have to give an email.
• Technical server logs. Serving the website and app produces standard, transient logs (for example an IP address and request time) used only to keep the service secure and reliable. These are not used to identify you or to track you.

We do not store your applications, schedule, notes, or any of your planning content on our servers.

If you turn on backup, Ontrack saves a copy of your data to your own Google Drive, in a private application-data folder that only Ontrack can access. This uses the non-sensitive drive.appdata permission. Your backup goes directly between your device and your Google Drive — it never passes through or is stored on our servers, and we cannot read it. You can back up, restore, or stop backing up at any time, and remove Ontrack's access in your Google Account settings.

• We never sell your personal data.
• We never share your data with third parties for their own purposes.
• We show no advertising and use no ad networks.
• We use no analytics or tracking SDKs, and do not track you across apps or websites.
• We do not collect your location or your contacts.

To provide optional sign-in, backup and hosting, we use a small number of processors. Each handles data only as needed for that function and under its own privacy policy:

• Google — Google Sign-In (identity) and the Google Drive API (your own-Drive backup), when you choose to use them.
• Supabase — our authentication provider, which stores your email so you can sign in.
• Google Cloud — hosting that serves the app and website.

The dates and facts Ontrack shows come from official sources (such as UCAS); each is labelled with its source and the date we last verified it. Community reactions, where shown, are clearly separated and are never treated as a source of dates or facts.

Ontrack is used by secondary-school students, many of whom are minors. We built it to minimise data by design: no behavioural tracking, no advertising, no profiling, and no collection of identifiable personal information beyond an optional sign-in email. We do not knowingly collect more personal data than is necessary to provide the service, and parents (who are treated as the primary account holder) can review a student's use. Our approach is aligned with children's-privacy expectations under laws such as COPPA, the UK/EU GDPR-K, and the UAE Personal Data Protection Law (PDPL).

Because your planning data lives on your device, you are already in direct control of it — you can view, edit, and delete it at any time in the app, including a one-tap delete my datain Settings, or by uninstalling the app. If you signed in, you can delete your account (and the stored email) from Settings, and revoke Ontrack's Google Drive access from your Google Account.

Depending on where you live, you may also have rights under the GDPR or the UAE PDPL to access, correct, delete, port, or object to the processing of your personal data. To exercise any of these, contact us (below).

On-device data is kept until you delete it or uninstall the app. A Google Drive backup is kept in your own Drive until you delete it. If you signed in, we retain your account email until you delete your account. Feedback you send is kept while we read and respond to it.

Data sent between the app and any service is encrypted in transit (HTTPS/TLS). Data on your device is protected by your device's own security, and your Drive backup by Google's. No method of storage or transmission is ever completely secure, but we work to protect your information and to hold as little of it as possible.

Ontrack serves students in the UAE and beyond. Where we use processors such as Google and Supabase, your limited account data may be processed on their servers in various countries, in each case under their own safeguards and privacy policies.

We may update this policy from time to time. We will change the “Last updated” date above and, for material changes, make a reasonable effort to highlight them in the app.

For any privacy question or request, contact us at uae24@naver.com, or through Settings → Send feedback in the app.