GratTrack Privacy Policy

Last updated October 20, 2026 · Effective with GratTrack version 1.8

1. Who I am
2. What stays on your device
3. Ads and what Google collects
4. Tracking, ATT and personalized ads
5. Your ad choices
6. Purchases
7. Reviews, update checks and support email
8. Retention and deletion
9. Children
10. Your privacy rights
11. US state notice (CCPA/CPRA, NJ and others)
12. EEA, UK and Swiss users
13. International transfers
14. Security
15. Changes
16. Contact

1. Who I am

GratTrack ("the app") is a tip and wage tracker for restaurant workers. It is made by Jake Smart, an individual developer in Manahawkin, New Jersey, USA ("I", "me"). For this policy, I am the "controller" of the limited information described here. Google is an independent controller of the data its ad software collects. Contact: jake.n.smart@outlook.com.

2. What stays on your device

Everything you put into GratTrack is stored only on your device, in Apple's on-device storage (SwiftData and UserDefaults, plus the GratTrack home-screen widget's shared storage). This includes:

• Shifts: dates, times, hours, cash and card tips, tip-outs, wages, sales, covers, roles and notes
• Photos you attach to shifts, goals and savings entries
• Tax estimates. The Taxes estimator runs entirely on your device.
• Settings such as currency, theme and default values

GratTrack has no account and no backend. I have no server that receives this data, and none of it is sent to me, to Google or to advertisers. It is never used to target ads. The CSV and PDF exports (including the Year-End Packet) are created on your device. They go only where you choose to send them using the iOS share sheet.

If your device backs up to iCloud or a computer, your GratTrack data may be included in that backup. Apple's terms and your backup settings control those backups.

3. Ads and what Google collects

Starting with version 1.8, the free version of GratTrack shows Google AdMob ads. Banners appear on the Insights, Shifts and Goals screens. A rewarded video ad is optional: you can watch one to unlock the PDF export. Ads are served by the Google Mobile Ads SDK, which runs inside the app. Based on Google's data disclosure for this SDK, Google may collect:

I don't receive this data in a form that identifies you. AdMob gives me only aggregate reports, such as the number of impressions and total earnings. Google's handling of this data is governed by the Google Privacy Policy and is explained in How Google uses information from sites or apps that use its services. Google may work with certified ad partners. In the EEA and UK, the ad technology providers it uses are listed in Google's list of ad technology providers.

4. Tracking, ATT and personalized vs. non-personalized ads

After you log your first shift (or the first time you choose to watch a rewarded ad, if that comes first), iOS shows Apple's App Tracking Transparency (ATT) prompt asking whether GratTrack may track you. "Tracking" means linking the advertising identifier and ad data from this app with data from other companies' apps and websites so Google and its partners can show you more relevant ads.

• If you tap Allow, Google can use your IDFA, and you may see personalized ads, subject to any consent choices that apply where you live.
• If you tap Ask App Not to Track, the IDFA is not available to the app or to Google. GratTrack then requests non-personalized ads, which are based on context such as the app and your general location, not on a profile of you. Google may still collect the non-IDFA data listed above to deliver, measure and protect ads.

Where the law requires it (the EEA, the UK, Switzerland and certain US states), GratTrack also shows Google's consent message through Google's User Messaging Platform (UMP) before ads load. You can change your answer later.

5. How to opt out or change your ad choices

• iOS tracking setting: Settings → Privacy & Security → Tracking. You can turn off "Allow Apps to Request to Track" or switch GratTrack off.
• In-app Ad Privacy Choices: GratTrack → More → Settings → Remove Ads section → Ad Privacy Choices. This reopens Google's consent and opt-out options. It appears where those choices apply, such as the EEA, UK and some US states.
• Remove Ads: this one-time purchase turns off all ads. Once you've bought it, GratTrack stops loading the ads SDK and doesn't show the tracking prompt.
• Google's controls: My Ad Center, plus Apple's Personalized Ads settings.

6. In-app purchases (Remove Ads)

Remove Ads is a one-time, non-consumable purchase through Apple's App Store. Apple processes the payment, so I never see your name, Apple Account, card or billing details. The app receives only Apple's signed confirmation that you own Remove Ads. It uses that confirmation to hide ads and to support Restore Purchases and offer-code redemption. Apple's handling of purchase data is covered by Apple's Privacy Policy.

7. Review prompt, update checks and support email

• Review prompt: GratTrack may occasionally ask you to rate it, using Apple's standard review prompt. Apple handles any rating or review you leave. I only see what Apple publishes on the App Store.
• Version check: the app may check Apple's public App Store lookup service to see whether a newer version exists. No personal data is included in that check.
• Email: if you email me, I receive your address and whatever you write. I use it only to reply, and I delete support emails when they're no longer needed (normally within 24 months).

GratTrack has no other analytics, crash-reporting, social or attribution SDKs.

8. Data retention and deletion

• Data on your device stays until you delete it. You can delete single shifts, use Delete All Shifts in Settings, or delete the app. Deleting GratTrack deletes all of its data from that device (copies in your own backups or exports aren't affected). Because I hold no copy, there's no account to delete.
• Google's ad data is retained according to Google's policies. See How Google retains data. You can reset your device's advertising identifier or turn off tracking at any time.

9. Children

GratTrack is a work tool for adults. It is not directed to children under 13 (or under 16 in the EEA and UK), and I don't knowingly collect personal information from them. The app tells Google that it is not child-directed (tagForChildDirectedTreatment = false), so it should not be used by children. If you believe a child has used the app in a way that involved personal information, contact me and I'll help. Deleting the app removes its on-device data.

10. Your privacy rights

Depending on where you live, you may have the right to know about, access, correct, delete or port your personal data. You may also have the right to opt out of targeted advertising, "sale" or "sharing", and profiling, to withdraw consent, to object or restrict processing, to appeal a decision, and to complain to a regulator. I will never discriminate against you for using these rights.

Because your GratTrack data lives only on your device, you can access, export, correct and delete it yourself in the app. For ad data, the fastest options are the controls in section 5 and Google's own tools. You can also email jake.n.smart@outlook.com with "Privacy request" in the subject line, and I'll respond within the time the law allows (generally 30 to 45 days). I may need to ask for information to verify the request. An authorized agent may make a request for you with proof of authority. If I deny your request, you can appeal by replying to my answer with "Appeal" in the subject. I'll respond to an appeal within 45 days (60 days in some states), and if you're unhappy with the result, you can contact your state Attorney General.

11. US state privacy notice (California, New Jersey, Virginia, Colorado, Connecticut, Texas, Oregon and other states)

Categories collected in the last 12 months (through Google's ad SDK in the free version): identifiers (advertising ID and other device IDs, IP address), internet or other electronic network activity (ad interactions and diagnostics), and inferred general geolocation from IP address. I don't collect sensitive personal information. Tips you enter stay on your device and are never collected.

Sources and purposes: these are collected automatically from your device by the Google Mobile Ads SDK to show, measure and protect ads and to fund the free version of the app.

Disclosures: these categories are disclosed to Google (and its ad partners) as described above. Under some state laws, letting an ad network use this data for personalized or cross-context behavioral advertising can count as a "sale" or "sharing" of personal information, or as "targeted advertising". I don't sell personal information for money, and I have no knowledge of selling or sharing data of consumers under 16.

New Jersey residents: under the New Jersey Data Privacy Act (N.J.S.A. 56:8-166.4 et seq.), you have the rights in section 10, including the right to opt out of targeted advertising and sales. You can use the methods above, and you can appeal a decision as described in section 10. California residents: the retention periods are described in section 8, and I don't use or disclose sensitive personal information. Shine the Light: I don't share personal information with third parties for their own direct-marketing purposes in a way that law covers, apart from the ad uses described above.

12. EEA, UK and Swiss users (GDPR / UK GDPR)

• Legal bases: for personalized ads, and for storing or accessing information on your device for ads, the legal basis is your consent, collected through Google's consent message (UMP, IAB TCF). You can withdraw consent at any time through Ad Privacy Choices. For non-personalized ads, ad measurement and fraud prevention, the legal basis is my and Google's legitimate interests in funding and protecting a free app, or consent where the law requires it. For support emails, the legal basis is my legitimate interest in answering you.
• Your rights: you can access, rectify, erase, restrict, object to processing (including for direct marketing), port your data and withdraw consent. You can also complain to your local data protection authority, or in the UK, to the ICO.
• I don't make automated decisions that have legal or similarly significant effects on you.

13. International transfers

I'm based in the United States. Google may process ad data in the US and other countries. Google relies on safeguards such as the EU-US Data Privacy Framework (and its UK Extension and Swiss counterpart) and the European Commission's Standard Contractual Clauses. Your GratTrack data itself never leaves your device unless you export it.

14. Security

Your data is protected by iOS security, including your passcode, Face ID or Touch ID, and data protection. Keep your device and any exported files secure. No method of storage is perfect, but keeping data on your device means there's no GratTrack server that can be breached.

15. Changes to this policy

If my practices change, I'll update this page and the "Last updated" date, and I'll update the App Store privacy details at the same time. If a change is significant, I'll also note it in the app's release notes. Previous version: last updated July 21, 2026, before ads were added.

16. Contact

Jake Smart (GratTrack), Manahawkin, New Jersey, USA · jake.n.smart@outlook.com