← retrack

privacy

retrack — reaction tracker

the short version: your entries stay on your devices and in your private icloud — we can't read them. retrack has no account system or data server of ours, no analytics, and no tracking. if you opt in, retrack can also write selected entries to apple health under your apple id. here's the long version.

what retrack stores

your entries, reactions, triggers, saved reaction-trigger pairs, notes, drawn faces, reaction names and visibility, and syncable reminder preferences are stored on your iphone or apple watch. if you're signed into icloud, those records also sync to your private icloud database, which only your apple id can access. other iphone settings — including security and health choices, sounds and haptics, on-device trigger analysis, pause choices and active pause state — stay local, as do actual scheduled notifications. the widget's ordered one-to-four reaction or reaction-trigger pair choices also stay local to the iphone; apple's watchconnectivity sends that small selection directly to the paired watch, where its last-known copy is cached for offline use. apple encrypts private icloud data in transit and at rest. mostly lentils llc has no way to see, read, or recover any of it.

what we collect

nothing. retrack contains no analytics, no advertising frameworks, and no tracking of any kind. it sends nothing to us; private icloud sync and the apple health writes you enable are handled by apple under your apple id.

apple health

off unless you explicitly switch it on in retrack's settings on your iphone. pauses of at least one minute can be written as mindful minutes. reaction sharing is separate and future-only: new entries created under that iphone's sharing choice are eligible whether you log them in the iphone app, through siri or shortcuts, from its home screen widget or a control, or on its paired apple watch. each iphone keeps its own choice; one with sharing on does not adopt entries created under another iphone's off choice. the watch uses the last choice it received from its paired iphone, and the iphone checks when the entry was created before writing. only the iphone app has health access. when retrack runs there, it makes a best-effort write for eligible entries and retries failures; an apple watch entry must first reach the iphone through your private icloud, so delivery is not necessarily immediate. turning reaction sharing on does not import older history, and entries created while it was off are excluded. editing or deleting an entry later does not update or remove its health copy. retrack only ever writes — it never reads anything back out of health, and asks for no permission to do so. entries already written belong to apple health under your control and stay there until you remove them in the health app.

notifications

daily check-in reminders are scheduled locally on your device. they never involve a server.

on-device trigger suggestions

on supported iphones, apple's on-device model can analyze a note to suggest a shorter trigger name. this starts on by default and can be turned off in retrack's settings. the analysis stays on the phone: the note is never sent to an ai service or to mostly lentils. the note remains part of its entry and may still sync through your private icloud as described above.

subscriptions

retrack plus purchases are handled entirely by apple's app store. we receive no payment details — apple processes the purchase against your apple id, and the app only learns whether a subscription is active.

deleting your data

delete any logged entry in the iphone app with a swipe. settings → start fresh deletes entries, trigger quick picks and saved pairs row by row, so those deletions reach your other devices, including apple watch, as private icloud sync delivers them. custom reaction definitions and faces, settings and reminders, active pause state, and apple health copies remain. a custom reaction can be hidden and later restored under settings → reactions, triggers, reaction-trigger pairs, but retrack deliberately retains its definition so past entries keep its name and face. remove health copies in the health app. deleting retrack from a device removes its local app data, while private icloud copies follow your icloud settings (settings → apple id → icloud → manage storage).

children

retrack is not directed at children under 13 and collects no data from anyone, of any age.

changes & contact

if this policy ever changes, the update will appear on this page with a new date below. questions, ideas, a bug? retrack@mostlylentils.com

last updated: september 4, 2026 · © 2026 mostly lentils llc  ·  support