Privacy Policy

Effective date: 31 May 2026 · Last updated: 31 May 2026

TrackDesk (“the App”) is owned and operated by YalsTech(“we”, “us”, “our”). It is an operational task-accountability tool for businesses. This policy explains what information the App collects, how we use it, and the choices you have.

1. Who the App is for

TrackDesk is a business tool used by company owners and their managers. Accounts are created by a business owner; individual employees do not self-register. The App is not directed to children and is not intended for anyone under 18, except where access is provided and managed by an employer or organization with the required permissions.

2. Information we collect

We collect only what is needed to run the task-accountability service:

Account information (provided by your business owner when your account is created):

• Your name
• Your mobile number (used as your login identifier)
• Your email address (optional)
• Your role (owner or manager)

Authentication data:

• Your 4-digit PIN, stored only as a one-way cryptographic hash (bcrypt). We never store, log, or transmit your PIN in readable form, and we cannot recover it.
• Sign-in metadata such as your last login time and failed-attempt counts (for account-lockout protection).

Service content you create: tasks, task details, status changes, comments, approvals, and the activity timeline.

Device & notification data: a push-notification token for your device (to deliver task alerts), and standard technical data required to operate the service.

We do NOT collect location/GPS, contacts, photos, advertising identifiers, or biometric data. The App contains no advertising and no third-party analytics or tracking SDKs.

3. How we use your information

• To authenticate you and keep your account secure.
• To provide the core service: creating, assigning, updating, approving, and tracking tasks.
• To send you notifications about tasks relevant to you (in-app and push).
• To maintain an immutable activity timeline for accountability.
• To protect against abuse (e.g., temporary lockout after repeated failed PIN attempts).

We do not sell your personal information, and we do not use it for advertising.

4. How your data is separated

TrackDesk is multi-tenant. Each business’s data is isolated by company and enforced at the database level (row-level security). You can only access data belonging to your own company, and managers can only access tasks assigned to them.

5. Service providers

We use trusted providers strictly to operate the App:

• Supabase — database, authentication, and backend hosting (data stored in the AWS Asia Pacific (Mumbai) region).
• Expo / Apple Push Notification service / Google Firebase Cloud Messaging — to deliver push notifications to your device.

These providers process data only on our behalf and under their respective security and privacy terms.

6. Data security

• PINs are hashed with bcrypt and never stored in readable form.
• All data is transmitted over encrypted connections (HTTPS/TLS).
• Access is restricted by row-level security so users only see their own company’s data.
• Repeated failed sign-in attempts trigger a temporary lockout.

No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

7. Data retention

We retain your account and task data for as long as your company uses TrackDesk. The activity timeline is intentionally immutable for accountability and is not edited or deleted while the account is active. When a business stops using TrackDesk, its data may be deleted on request (see Contact).

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data, or to object to certain processing. Because accounts are managed by your business, please first contact your company’s TrackDesk owner. For requests we control, contact us using the details below and we will respond within a reasonable time.

9. Children’s privacy

TrackDesk is a workplace tool and is not intended for children under 18, except where access is provided and managed by an employer or organization with the required permissions. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated in-app.

11. Contact

YalsTech
Email: priya@yalstech.com
Website: https://trackdesk.in