Legal

Privacy Policy

Last updated: 12 July 2026

Trock is a small, self-hosted mood, task, and water tracker. This page explains exactly what it collects, why, and where it lives. There's no ad network, no analytics tracker, and no data broker anywhere in this app — everything below is the complete picture.

What we collect

• Account: a username and a password (stored as a salted bcrypt hash — we never see or store your actual password).
• Personal info (optional): age and weight, used only to calculate a personal daily water-intake goal.
• Mood entries: a 1–10 score, an optional note you write, and an optional "currently playing" song if you connect Spotify.
• Tasks: titles, notes, priority, duration, reminder time, and sub-tasks you create.
• Water logs and day-activity breakdowns: the glasses-of-water counts and the labeled percentage slices you create in the Calendar day view.
• Family links (optional): if you link a guardian/child account via an invite code, the linked account can see your mood/task/water trends and aggregates only — never your mood notes or task titles.
• Profile picture (optional): a photo you choose to upload in Settings. You can delete it at any time, which removes the file completely — nothing is kept after deletion.

Optional device permissions

• Location: only requested if you say yes to a one-time prompt (or turn it on later in Settings), and used only to look up local weather so Analytics can show whether your mood tends to track with the weather. Your coordinates are stored so that lookup can happen, but are never displayed anywhere in the app or shared with anyone. Say no, and nothing location-related ever happens.
• Camera / photos: only accessed if you tap "Change picture" in Settings to set a profile picture. Trock never touches your camera or photo library at any other time.

Optional third-party connections

• Spotify: if you connect your Spotify account in Settings, Trock stores an access/refresh token so it can look up the track you're currently playing when you log a mood. You can disconnect at any time in Settings; this revokes and deletes the stored tokens. Trock never posts to Spotify or reads your library/playlists.
• Mistral AI (optional, on request only): if you tap "Summarize my data with AI" on the Analytics page, or use the Trock Assistant, Trock sends aggregate numbers only (for the summary) or your typed question (for the Assistant) to Mistral's API. Your mood notes, task titles, and any other free text are never included in the summary request. This only happens when you explicitly use one of those two features.
• Open-Meteo (optional): if you enable weather correlation, Trock sends your stored location to Open-Meteo (a weather data provider) to look up the day's weather. No account or personal identifiers are sent, just coordinates.

What we don't do

• No advertising, no ad SDKs, no advertising ID collection.
• No analytics or tracking libraries.
• No selling or sharing of your data with third parties, ever.
• No access to your device's contacts or microphone, ever.
• No background location tracking — location is only ever looked up on request, never continuously.

Where your data lives

Trock runs on a single server (Fly.io, hosted in Amsterdam) with a SQLite database. Only you can see your own mood, task, and water data — the one exception is the limited, aggregate-only trend view available to an account you've explicitly linked as a guardian via an invite code, which you can unlink at any time in Settings.

Notifications

If you set a reminder time on a task or habit in the Android app, that reminder is scheduled entirely on your device via Android's own notification system. Nothing about your reminders is sent to or stored on our server beyond the reminder time itself (which is needed to schedule it).

Deleting your data

Go to Settings → Danger zone → Delete my account to permanently and immediately delete your account and everything in it — moods, tasks, water logs, and any guardian links. You'll need to re-enter your password to confirm; there's no way to undo it once it's done. This is also the only way to delete your data: because Trock doesn't collect an email address or anything else that could identify who you are outside the app, there's no support workflow that could look up or access your account on your behalf, for us or anyone else. Deleting it yourself in Settings is the only route there is.

Children's accounts

Trock's Family Link feature is designed to let a parent or guardian follow trend-level data for a child's account with the child's own knowledge — a child never has to share their password, and the guardian only ever sees aggregates, never raw entries.

Changes to this policy

If this policy changes in a way that affects what we collect or how we use it, the "Last updated" date above will change and, for material changes, we'll show a notice in the app.

Contact

Questions about this policy or your data: odd@oddcord.com