Privacy Policy

TestoTrack handles health information, so we hold ourselves to a simple standard: we collect the minimum needed to make the product work, we never sell it, and you can take it with you or delete it at any time. This policy explains the specifics.

What we collect

• Account information — your email address, and the authentication identifier from whichever sign-in method you choose (email, Google, or Apple).
• Health data you enter — testosterone lab results, test dates, and any notes you attach to them.
• Coach conversations — the questions you ask the AI health coach and the answers it returns, so guidance can build on earlier context.
• Basic technical data — app version, device type, and error diagnostics, used to keep the service working.
• Waitlist email — if you join the waitlist on this website, we store your email address for launch announcements and nothing else.

What we do not collect

We do not collect your location, your contacts, or your browsing activity outside TestoTrack. We do not run third-party advertising or analytics trackers that profile you across other sites. We do not ask for your Social Security number, insurance details, or payment card data (payments, when introduced, will be handled by a PCI-compliant processor that we never see card numbers through).

How your data is used

Your health data is used to do the three things the product promises: plot your trend over time, give the AI coach the context to answer questions about your own numbers, and produce summaries you can bring to a physician. That is the whole list. It is not used to train general-purpose AI models, and it is not shared with other users.

How your data is stored and protected

• Encrypted in transit (TLS) and at rest.
• Stored in a private-network database that is not reachable from the public internet.
• Access is authenticated per user — you can only ever read your own records.
• Health data is excluded from application logs and omitted from diagnostic reports.

Third parties we rely on

Running the service means using a small number of infrastructure providers, each limited to what it needs: Google Cloud Platform hosts the application and database, Firebase handles authentication, Anthropic's Claude API generates coach responses from the context we send it, and Formspree receives website waitlist submissions. We do not authorize any of them to sell your data or use it for their own advertising.

Your controls

• Export — take a copy of your results and history at any time.
• Deletion — delete individual entries, or your whole account and everything in it. Deletion is permanent, not a soft-hide.
• Correction — edit any result you logged incorrectly.
• Unsubscribe — every email we send includes a one-click unsubscribe.

To exercise any of these, use the in-app controls or email hello@testotrack.com.

Children

TestoTrack is intended for adults. We do not knowingly collect data from anyone under 18, and we delete such data if we discover it.

Regulatory status

TestoTrack is a wellness and tracking tool, not a medical device, and is not a covered entity under HIPAA. We nevertheless build to HIPAA-aligned security practices — encryption, private networking, access control, and no health data in logs — because the sensitivity of the data warrants it regardless of what the law requires of us.

Changes to this policy

If this policy changes in a way that materially affects how your data is handled, we will notify waitlist members and account holders by email before the change takes effect, and update the date at the top of this page.

Contact

Questions about privacy, or a request about your data: hello@testotrack.com.