Traction Health — Privacy Policy

Last Updated: June 2, 2026

Traction Health ("we," "us," or "our"), operated by Softmax Ltd, provides the Traction Health mobile application (the "App"). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our App.

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

Account Information

When you create an account, we collect your name (first and last name), email address, and optionally a phone number. You may also provide optional profile information such as date of birth and an avatar. You can sign up using email and password, Google Sign-In, or Apple Sign-In; if you use a third-party sign-in method, we receive your name and email address from that provider. We also support anonymous device-based accounts that do not require personal contact information.

Health and Fitness Data

The App is a habit and task tracking tool. All health and fitness data is manually entered by you. We collect habit and task names, descriptions, and categories; completion logs (date, value, and completion status); streak and completion-rate metrics; and schedule and reminder preferences.

We do not integrate with Apple HealthKit, Google Fit, or any automatic health data collection APIs. All wellness data in the App is provided directly by you.

User-Generated Content

  • Custom habit and task names, descriptions, and categories
  • Feedback and bug report text, including steps to reproduce and expected behavior
  • Photos or screenshots submitted with bug reports (up to 5 per report)

Community and Social Data

The App includes optional community features (shared habits, partnerships, and groups) that let you connect with other people, share your progress, and encourage each other. These features are only available after you create an account with an email address and claim a username; anonymous device-based accounts cannot access community features. When you use community features, we process:

  • Public profile: your username (display name), avatar (provided by your sign-in provider or generated by the App), and join date.
  • Connection codes and invite links: a shareable code and invite link. Anyone you give it to can view a preview of your public profile and your aggregate streak and habit-count statistics (unless you hide them) and send you a connection request.
  • Shared habit data: habit names, your completion progress, streaks, completion rate, and group leaderboard ranking become visible to the people you share with or the members of a group you join.
  • Messages and interactions: comments, nudges (with optional messages), mentions, and emoji reactions you send, shown to the other participants and in their community activity feed.
  • Connections and group membership: the people you are connected to and the groups you belong to.
  • Safety actions: records of users you block and reports you submit about other users.

You control how much you share: you can hide your statistics from the community, change or regenerate your connection code, block other users, report abusive content or behavior, and leave any group or end any share at any time.

Device Information

  • A unique device identifier generated and stored locally on your device
  • Device model, platform (iOS/Android), and operating system version
  • App version

Diagnostics and Usage Data

  • Crash data (crash logs and exception reports via Sentry)
  • Performance data (app launch time, request latency, and error rates)
  • Session diagnostics (interaction and error data via LogRocket for debugging, linked to your account; authentication credentials and community message content are excluded from capture)
  • Bug report diagnostics (device model, OS version, app version, screen size, locale, timezone, and network type, collected only when you submit a bug report)

Push Notification Tokens

If you enable push notifications, we collect your push notification token along with your device platform and model to deliver habit and task reminders and community notifications.

How We Use Your Information

  • App Functionality: to authenticate your account, sync your data across devices, power community features, deliver push notifications, and provide customer support.
  • Analytics: to understand app performance, diagnose crashes and errors, and improve the user experience.

We do not use your data for third-party advertising, developer advertising or marketing, targeted advertising or ad measurement, sharing with data brokers, or tracking you across other apps or websites.

How We Share Your Information

We share your information only with the following service providers, solely to operate and maintain the App. The community features have not added any new third-party service providers.

  • Firebase (Google) — authentication and file storage: email, name, auth tokens, bug report attachments.
  • Sentry — crash reporting and performance monitoring: crash logs, performance metrics, device info.
  • LogRocket — session replay and error debugging: user ID, session interaction data, error events (credentials and community message content excluded).
  • Expo — push notification delivery: push notification tokens, device platform.

Sharing With Other Users

When you use community features, you share information directly with other people you choose to connect with. Your username, avatar, shared habit progress, comments, nudges, reactions, and group leaderboard standing are visible to your connections and the members of groups you join, and anyone you give your connection code or invite link to can view a preview of your public profile. This sharing is initiated by you and only occurs when you opt into community features. We do not make your community activity public on the open internet or to users you have not connected with.

We do not sell your personal information. We do not share your data with advertisers, data brokers, or any third parties for marketing purposes.

Data Retention

  • Your account data and habit/task data are retained as long as your account is active.
  • When you delete your account, we initiate deletion of your data with a 14-day grace period, after which your data is permanently removed from our systems.
  • When you delete your account, your community data — including connections, shared habits, comments, nudges, reactions, group memberships, blocks, and reports — is deleted along with your account, and your username, avatar, and connection code are removed from public view.
  • Crash and diagnostic logs are retained according to the retention policies of our service providers (Sentry and LogRocket).
  • Bug reports and feedback are retained to improve the App and may be removed upon request.

Data Security

  • Authentication tokens are stored in encrypted device storage (Secure Store on iOS, encrypted preferences on Android).
  • All data transmitted between the App and our servers is encrypted using HTTPS/TLS.
  • Passwords are never stored on your device; authentication is handled by Firebase.

While we strive to protect your personal information, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights and Choices

  • Access: request a copy of the personal data we hold about you.
  • Correction: update or correct inaccurate personal information through your in-app profile settings.
  • Deletion: delete your account and associated data from within the App or by contacting us.
  • Push Notifications: disable push notifications at any time through your device settings.
  • Anonymous Use: use the App with a device-based account without providing personal contact information. Community features are not available to anonymous accounts.
  • Community Privacy: hide your statistics from the community, change or regenerate your connection code, block other users, report abusive content or behavior, and leave any group or end any share at any time from within the App.

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to request deletion of your personal information; and not to be discriminated against for exercising your privacy rights. We do not sell personal information as defined by the California Consumer Privacy Act.

European and UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, our legal bases for processing your information are contract (processing necessary to provide the App), legitimate interest (analytics, crash reporting, and improving the App), and consent (where required, such as for push notifications). You also have the right to data portability and the right to lodge a complaint with your local data protection authority.

Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us so we can promptly delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App or on our website and updating the "Last Updated" date above. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at support@softmaxco.io. Traction Health is operated by Softmax Ltd, 46 Regents Park Road, London NW1 7SX, registered in England and Wales under company number 15897507.