Back to Trackly

Privacy Policy

Last updated: 17 October 2026

Your privacy matters to us. This policy explains what information Trackly collects, why we collect it, who we share it with, and the choices you have. We do not sell your personal information.

In short

  • We collect your name, email, courses and assignments so Trackly can work for you.
  • We never sell your information and we do not show ads.
  • If you connect Google Calendar, Trackly only adds and removes its own reminder events. Details are in section 4.
  • You can switch Google Calendar off in Profile at any time, and ask us to delete your account by email.
  • Service providers (Google Firebase, Cloudinary, Cloudflare and Pixabay) help us run Trackly, as explained in section 5.

1. Who is responsible for your information

Trackly is run by the Trackly team in Nigeria. For privacy questions or requests, email [email protected].

2. Information we collect

  • Account details: your full name, email address and, if you sign in with Google, your Google profile photo. Your password is handled by Google Firebase Authentication, so we cannot see it.
  • What you add: your courses (title, code, instructor, colour and photo), your assignments (title, notes, due date, priority, status and reminder choices), and a profile photo if you upload one.
  • Sign up record: the date you created your account, and the date and version of the terms you agreed to.
  • Alerts and history: your alert choices in Settings, a short history of events in your account (such as an assignment being added or marked as submitted), and which notifications you have read.
  • Google Calendar details, only if you connect it: see section 4.
  • Basic technical data: information such as device and browser type, which our service providers may collect to keep Trackly working and secure.

3. How we use your information

  • to create your account and keep you signed in;
  • to show your courses and assignments;
  • to show alerts and a short history in Trackly, such as when an assignment is due soon or overdue;
  • to add and remove reminder events on your Google Calendar, if you connect it;
  • to find a suitable photo for your course header;
  • to keep Trackly secure, fix problems and improve it;
  • to answer your questions and meet our legal duties.

4. Google user data and Google Calendar

This section explains exactly how Trackly uses Google user data. It only applies if you choose to connect Google Calendar. Signing in with Google is separate: it only gives us your name, email address and profile photo.

What Trackly asks for

When you switch on Google Calendar Reminders in your Profile, Google asks you to allow Trackly to use the permission https://www.googleapis.com/auth/calendar.events.owned. This permission lets an app view, create, change and delete events on calendars you own. It is the only Google Calendar permission we ask for, and we only use the part of it described below.

What Trackly does with it

  • Creates reminder events on your main Google Calendar for your assignments: a "Due:" event at the due time with popup reminders, and, if you use the default schedule, a repeating "Work on:" event each morning at 8:00 until the day before the due date. Each event contains the assignment title, the course name, the due time and a link back to the assignment in Trackly.
  • Removes those events when they are no longer needed: when you mark the assignment Submitted, delete it, change something shown in the event, or switch Google Calendar Reminders off.
  • Finds its own events: every event Trackly creates carries a private tag. When you switch the feature off, Trackly searches for events with that tag, and before deleting an event it checks the tag. Trackly does not read, copy, change or delete any other event in your calendar, and it does not access your email, contacts or any other Google data.

What we store, and where

  • A long-lived Google access code (a "refresh token") that lets Trackly keep working after you close the page. It is encrypted and kept in our Cloudflare storage, linked only to your account. It is never stored in your browser or in our database.
  • A short-lived Google access token, kept only in the memory of our server for a few minutes while it is used. It is not saved.
  • In our Firebase database: the ids of the calendar events Trackly created and your time zone (saved with each assignment), a note that Google Calendar is connected, and, briefly, a list of event ids waiting to be removed if Google could not be reached.
  • The events themselves live in your Google Calendar, which Google controls.

What we never do

  • We do not sell Google user data or use it for advertising.
  • We do not share it with anyone except the providers that run Trackly for us (section 5).
  • We do not allow people to read it unless you ask us to, it is needed for security or support, or the law requires it.
  • We do not use it to develop or train artificial intelligence models.

How to stop

Switch off Google Calendar Reminders in your Profile. Trackly removes the reminders it created, takes back its permission from Google and deletes the stored token. You can also remove Trackly's access at any time in your Google Account's third-party access settings. If you do, Trackly will notice, delete the stored token and ask you to connect again. Reminders that were already in your calendar at that point can be deleted by you in Google Calendar: look for events starting with "Due:" or "Work on:".

Trackly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who we share information with

We share information only with the service providers that help us run Trackly, and only as much as they need:

  • Google (Firebase): sign in, our database and hosting, and Google Calendar if you connect it.
  • Cloudinary: storing and delivering images, including photos you upload.
  • Cloudflare: running the services that connect Trackly to Google Calendar and to photo search, and storing your encrypted Google Calendar token.
  • Pixabay: course photos. We send only the subject words of a course, never your name or email.

We may also share information when the law requires it or to protect the rights and safety of Trackly or its users. We do not sell your personal information.

6. Why we are allowed to use your information

Under the Nigeria Data Protection Act 2023, we rely on your consent (when you create an account and agree to our terms), on what we need to provide the service you asked for, and on our legitimate interest in keeping Trackly safe and working.

7. Where your information is kept

Your information is stored on the servers of our service providers (Google, Cloudflare and Cloudinary), which may be outside Nigeria. We choose providers that use industry standard security, and we take steps to protect your information wherever it is kept.

8. How long we keep it

  • Your account, courses and assignments: while your account is active.
  • Your Google Calendar token: until you switch Google Calendar Reminders off, remove Trackly in your Google Account, or ask us to delete your account.
  • Calendar event ids waiting to be removed: deleted as soon as the events are removed.
  • Your notification history: for 30 days, then it is removed.
  • Photos you upload: while your account is active. We remove them when your account is deleted, and when you remove or replace a photo.
  • When you delete your account in Settings, Trackly removes your Google Calendar reminders, your photos, your courses, assignments and notification history, and your login, straight away.
  • If you ask us by email instead, we delete your personal information within 30 days, unless we must keep some of it for legal reasons.

9. Your rights

You can ask us to:

  • show you the information we hold about you;
  • correct information that is wrong;
  • delete your information or close your account (you can do this yourself with Delete account in Settings);
  • stop or limit how we use your information, or give you a copy of it.

Email [email protected] and we will respond as soon as we can. To delete your account, use Delete account in Settings, or email us from the address on your account. If you are not happy with how we handle your information, you may complain to the Nigeria Data Protection Commission.

10. Cookies and browser storage

Trackly uses your browser's storage to keep you signed in (for longer if you choose "Remember me"), to keep a short-lived copy of recent screens so pages load faster (it clears when you close the tab), and to remember a few small settings, such as which list filter you chose. We do not use advertising cookies or third-party analytics tools.

11. Children

Trackly is meant for students aged 18 and over. If you are under 18, you need permission from a parent or guardian. If we learn that we hold information about a child without that permission, we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we make an important change, we will tell you in the app or by email. If we ever want to use Google user data in a new way, we will update this policy and ask for your permission first.

13. Contact us

Email [email protected], or use our contact page.