What Trask stores, and why

Who is responsible

Trask is made by Lucas Holter (HolterTek), Norway, who is the data controller for the personal data described here. Questions or requests go to [email protected].

This policy covers the Trask iPhone app. The HolterTek website has its own privacy page.

What Trask collects

Data	What it is	Why
Account	The identifier Sign in with Apple gives us, and the email address Apple shares (this can be Apple's private relay address if you choose to hide yours).	To create your account and sign you in.
Profile	Your display name, time zone, daily step goal, the badges you choose to show, and when you last had the app open.	To show you to your groups and count your days in your own time zone.
Steps	Your step count per day, and per hour for the last ten days, read from Apple Health. Also the names of the devices that recorded them (for example "iPhone" or "Apple Watch").	To show your progress, run leaderboards and group goals, award badges, and check that counts are genuine.
Groups and friends	Which groups you are in, your friends in the app, and group results such as goals, XP and badges.	To run the competitions you take part in.
Notifications	A push token for your device, your language, your notification settings, and a record of which notifications were sent.	To send the notifications you have turned on, and never the same one twice.
Device check	A public key created by Apple's App Attest on your device.	To confirm uploads come from the real Trask app, so nobody can fake steps. It does not identify you.

Trask reads step counts from Apple Health only, and only after you allow it. It never writes to Apple Health. While the app is open it also uses the iPhone's motion sensor to update today's count live; that reading stays on your phone.

What Trask does not do

• No ads and no advertising SDKs.
• No analytics or tracking tools, and no tracking across other apps or websites.
• Your data is never sold, and health data is never used for marketing.
• Step data is not stored in iCloud.

Who can see your data

Other members of your groups see your display name, the badges you show, your step counts, your contributions to the group, and whether you have had the app open recently. Nobody outside your groups sees your steps.

Service providers process data on our behalf:

• Supabase hosts the database and server functions. Your data is stored in the EU (Stockholm, Sweden).
• Apple provides Sign in with Apple, push notifications and App Attest.

We only hand over data to anyone else if the law requires it.

Legal basis

Your account, profile, groups and notifications are processed because they are needed to provide the service you signed up for (GDPR Article 6(1)(b)). Checking that step counts are genuine and keeping the service secure is our legitimate interest (Article 6(1)(f)).

Step counts can count as health data. Trask reads them only with your explicit consent, which you give in Apple Health's permission screen (Article 9(2)(a)). You can withdraw it at any time: open the Settings app and go to Health → Data Access & Devices → Trask. Steps already uploaded stay until you delete them or your account.

How long data is kept

• Hourly step counts are deleted automatically after ten days.
• Everything else is kept for as long as you have an account.
• When you delete your account, your profile, step history, friendships, group memberships, push tokens and device keys are deleted immediately. Groups you created stay for their other members.
• Our providers keep short-lived technical logs and backups according to their own policies, after which deleted data is gone from those too.

Deleting your account

In Trask, open Konto and tap «Slett kontoen min». This deletes your account and data permanently. You can also email [email protected] and ask us to do it.

Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict or object to how it is processed, and get it in a portable format. Email [email protected] and you'll get an answer within 30 days.

If you are unhappy with how your data is handled, you can complain to the Norwegian Data Protection Authority, Datatilsynet.

Children

Trask is not intended for children under 13. Where local law sets a higher age for agreeing to this kind of service, users below that age need a parent or guardian to agree on their behalf.

Changes to this policy

If what Trask collects changes, this page is updated first and the date at the top changes.