Privacy Policy

Last updated: 22 February 2026
Effective date: 22 February 2026

This Privacy Policy explains how TrackMyProfit collects, uses, stores, and protects your personal data when you use our website and application. We are committed to protecting your privacy and handling your data with care and transparency. By using TrackMyProfit, you agree to the practices described here.

WHO WE ARE

TrackMyProfit is operated by TrackMyProfit Limited, a company based in County Kildare, Ireland.

For the purposes of the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, TrackMyProfit Limited is the Data Controller responsible for your personal data.

For any privacy-related queries, please email us at: privacy@trackmyprofit.ie

WHAT DATA WE COLLECT

We collect only the data we need to provide you with our service.

Account and Identity Information

Full name — to identify your account and personalise your experience
Email address — to create your account, send important updates, and allow you to log in
Business name and details — to associate jobs, invoices, and costs with your company within the app

Payment Information

Billing details are processed securely through our payment provider, Stripe. We do not store your full card number, CVV, or banking credentials on our servers at any time. Stripe handles all payment processing and is PCI DSS compliant.
Subscription status — we store your current plan, billing cycle, and payment history for account management purposes.

Business and Job Data

Job details — job names, contract values, and associated client information you enter into the app
Invoice and cost data — supplier names, invoice amounts, dates, and categories you upload or scan into the app
Wage and employee data — hours and costs you log against jobs. We store only the data you enter and do not collect your employees' personal data directly.
Scanned documents — images of invoices or receipts you photograph using the app's scan feature

Usage and Analytics Data

Device and browser information — type of device, operating system, and browser used
IP address — used for security monitoring and geographic analytics
Usage data — pages visited, features used, session duration, and click patterns, used to improve the app
Error and performance data — technical logs to help us identify and fix problems

HOW WE USE YOUR DATA

We use your data for the following purposes:

Providing and operating the TrackMyProfit app and service — legal basis: Contract
Processing payments and managing your subscription — legal basis: Contract
Sending transactional emails such as receipts, account alerts, and password resets — legal basis: Contract
Sending product updates and new feature announcements — legal basis: Legitimate interests
Improving and developing the app based on usage patterns — legal basis: Legitimate interests
Security monitoring and fraud prevention — legal basis: Legitimate interests
Complying with legal obligations including tax and regulatory requirements — legal basis: Legal obligation
Marketing emails if you have opted in — legal basis: Consent

WHO WE SHARE YOUR DATA WITH

We do not sell your data. We do not share your data with advertisers. We share your data only with trusted third-party service providers we need to operate the app, and only to the extent necessary.

Stripe — payment processing and subscription management

Hosting provider — secure database storage and app infrastructure

Analytics provider — understanding how users use the app, anonymised where possible Email provider — sending transactional and service emails

All third-party providers are bound by data processing agreements and are required to handle your data in accordance with GDPR.

HOW LONG WE KEEP YOUR DATA

Active account data — kept for as long as your account is active
Financial and billing records — kept for 7 years as required by Irish tax law
Job, invoice, and cost data — kept for the duration of your subscription plus 90 days after cancellation, giving you time to export your data
Scanned invoice images — kept for the duration of your subscription plus 90 days
Usage and analytics data — kept for up to 24 months in aggregated or anonymised form
Deleted account data — permanently deleted within 30 days of account deletion, except where legal retention obligations apply

YOUR RIGHTS UNDER GDPR

As a user based in Ireland or the EU, you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at privacy@trackmyprofit.ie.

Right of access — you can request a copy of all personal data we hold about you
Right to rectification — you can ask us to correct any inaccurate or incomplete data
Right to erasure — you can ask us to delete your personal data, subject to legal retention obligations
Right to restrict processing — you can ask us to limit how we use your data in certain circumstances
Right to data portability — you can request your data in a structured, machine-readable format
Right to object — you can object to processing based on legitimate interests, including direct marketing
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

We will respond to all requests within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Data Protection Commission (DPC) at dataprotection.ie.

COOKIES

We use cookies and similar tracking technologies on our website and app.

Types of cookies we use:

Essential cookies — required for the app to function including login sessions and security. These cannot be disabled.
Analytics cookies — help us understand how users navigate the app so we can improve it. These can be declined.
Preference cookies — remember your settings and preferences. These can be declined.

You can manage your cookie preferences through the cookie banner on our website or through your browser settings. Declining non-essential cookies will not affect your ability to use the app.

DATA SECURITY

We use the following measures to protect your data:

All data is encrypted in transit using TLS (HTTPS)
Data at rest is encrypted on our servers
Access to production data is strictly limited to authorised personnel only
Payment data is handled entirely by Stripe and never touches our servers
We conduct regular security reviews of our infrastructure

In the event of a data breach that is likely to affect your rights and freedoms, we will notify you and the Data Protection Commission within 72 hours as required by GDPR.

INTERNATIONAL DATA TRANSFERS

Some of our third-party providers are based outside the European Economic Area (EEA), including in the United States. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to ensure your data receives an equivalent level of protection.

CHILDREN'S PRIVACY

We may update this Privacy Policy from time to time as our service evolves or as legal requirements change. When we make material changes, we will notify you by email and update the effective date at the top of this page. Your continued use of TrackMyProfit after any changes constitutes your acceptance of the updated policy.

CONTACT US

TrackMyProfit Limited County Kildare, Ireland Email: privacy@trackmyprofit.ie

We aim to respond to all privacy enquiries within 5 business days.

This Privacy Policy is compliant with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.