Privacy Policy

1. Who we are

Track My Win (“we”, “us”, “our”) is operated by Hiig Media. We decide how and why your personal information is used. For any question about this policy, or to make a privacy request, contact us at hello@trackmywin.com.

2. Information we collect

Information you give us

• Account details: your email address, a password, and a display name. We never see or store your password in readable form; our authentication provider protects it with a one-way hash.
• Your content: wins, goals and tasks, links to proof (we store the link you paste, not the file it points to), gratitude entries, vision board images and their layout, drafts you choose to save from Articulate My Wins, and any feedback or reviews you submit.
• Preferences: which emails and notifications you want to receive.
• Referral details: if you share or use a referral code, we record the code, who referred whom, and referral points.

Information collected automatically

• How you arrived: if you reach us through a link carrying a campaign tag (a “utm_source”), we record that source when you sign up so we can understand which channels bring people in.
• Technical data: when you use the site, our hosting and backend providers receive standard technical information such as your IP address, browser type and the pages requested. Providers keep this in their server logs for security and reliability. We do not use it to build a profile of you.
• Push notification details: if you turn on browser notifications, we store the address and encryption keys your browser provides for delivering them, plus a short description of your browser or device.
• Email delivery records: when we email you, we keep a record of the address, the type of email, whether it was delivered or bounced, and when.

What we do not collect

Track My Win is free, so we do not collect payment details. We do not collect your precise location or your contacts, and we do not use advertising identifiers. You decide what you write in your wins and reflections, so please avoid entering sensitive information (such as health details or financial account numbers) that you would not want stored.

3. How we use your information

Where privacy law requires us to have a legal basis, it is shown in brackets.

• To provide and secure Track My Win: creating your account, signing you in, storing and showing your content, and preventing abuse (to perform our agreement with you, and our legitimate interest in keeping the service safe).
• To send service emails: confirming your email address, resetting your password and important account notices (to perform our agreement with you).
• To send optional emails and notifications: a weekly reminder, a monthly summary, product updates and push notifications. You can turn each of these off at any time in Settings, and every email has an unsubscribe link (our legitimate interest in keeping you engaged, or your consent where the law requires it).
• To run features you ask for: such as Articulate My Wins and the referral programme (to perform our agreement with you).
• To understand overall use and improve the product, using aggregate statistics such as totals and trends rather than your individual content (our legitimate interest in improving the service).
• To meet legal obligations and protect rights: responding to lawful requests and enforcing our terms (legal obligation, and our legitimate interests).

Our internal dashboards show aggregated figures only. As the operators of the service we can technically access the data we store, and we only look at an individual’s content where it is needed to give you support you have asked for, to keep the service secure, or to meet a legal obligation. We do not sell your personal data, use it for advertising, or use your content to train AI models.

4. Our AI writing feature

When you use Articulate My Wins, the wins you select (their text and the month and year recorded) and the options you choose (such as platform, purpose, tone and length) are sent securely to Anthropic, which provides the AI model that writes the draft. We do not send your name or email address with the request. The result is shown to you and is kept only if you choose to save it as a draft. AI output can contain mistakes, so please review it before you use it. Anthropic acts as a service provider for this feature; you can read its privacy policy at anthropic.com/legal/privacy.

5. Who we share information with

We share personal information only with service providers that help us run Track My Win, and only what they need to do that job:

• Supabase: database, sign-in, file storage and server functions. Your data is stored in the European Union (Ireland).
• Vercel: hosting and delivery of the website.
• Resend: sending our account and notification emails (your email address and the content of the email).
• Brevo: managing our email contact list so your email preferences are respected (your email address, first name and notification preferences).
• Anthropic: the AI writing feature described above.
• Browser push services (for example Google, Apple and Mozilla): delivering push notifications to your device if you turn them on.

We may also disclose information when the law requires it, to protect people’s rights, safety or the security of the service, or as part of a merger, sale or reorganisation of the business, in which case we will let you know who holds your information. We do not sell personal information, and we do not share it for advertising.

6. International transfers

Some of our providers are based outside your country (for example in the United States), so your information may be processed there. Where the law requires it, we rely on safeguards such as standard contractual clauses or an adequacy decision to protect it.

7. Cookies and similar storage

We do not use advertising or analytics cookies, so we do not show a cookie banner. We only use essential storage that the site needs in order to work:

• Sign-in session: kept in your browser’s local storage so you stay signed in.
• Referral code and campaign source: stored briefly so that signing up can credit the right referrer or channel.
• Display preferences: for example a small cookie that remembers whether the sidebar is open, and whether you have dismissed an install or notification prompt.
• Offline cache: you can install Track My Win on your device, and it saves files in your browser so that it loads quickly and works offline.

You can clear this storage at any time in your browser settings. You will just be signed out.

8. How long we keep information

• While your account is open, we keep your information so the service works for you.
• If you delete your account (Settings, then Delete Account), we permanently delete your profile, wins, goals, tasks, proof links, gratitude entries, vision board items and uploaded images, saved drafts, feedback, referral records, push notification subscriptions and the email delivery records for your address, and we remove you from our email contact list.
• One thing we keep: if you unsubscribed, or an address bounced or was reported as spam, we keep that email address (and nothing else) on a suppression list so that we never email it again.
• Backups: residual copies may remain in our providers’ backups for a limited time before they are overwritten.
• We may keep limited information for longer where the law requires it or to resolve a dispute.

9. Security

We protect your information with encryption in transit (HTTPS), hashed passwords, access controls that limit each account to its own data, a private storage area for uploaded images that can only be viewed through short-lived links, and restricted administrative access. No online service can be completely secure, so we cannot guarantee absolute security. If a breach affecting you occurs, we will tell you and the relevant authorities where the law requires us to.

10. Your rights and choices

Depending on where you live (for example under the GDPR, the UK GDPR or the Nigeria Data Protection Act), you may have the right to access your information, correct it, delete it, receive a copy of it, object to or restrict how we use it, and withdraw consent you have given.

• Edit your information: update your content and details in the app at any time.
• Download your data: in Settings → Export Data you can download a copy of your information as a JSON file at any time.
• Delete your account: do it yourself in Settings.
• Emails and notifications: change them in Settings, use the unsubscribe link in any email, or switch off push notifications in Settings or in your browser.
• Anything else: such as an objection or restriction request, or help with your data, email us at hello@trackmywin.com. We aim to reply within one month, and we may need to confirm your identity first.

If you are unhappy with how we handle your information, you can complain to your local data protection authority, such as the Information Commissioner’s Office in the UK or the Nigeria Data Protection Commission. We would appreciate the chance to put things right first.

11. Children

Track My Win is not intended for children under 16, and we do not knowingly collect their information. If you believe a child has given us personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top, and for significant changes we will let you know by email or in the app.

13. Contact us

Questions, concerns or requests about your information? Email us at hello@trackmywin.com.