Privacy Policy

Who we are

TrackedPR is operated by CS Technologies Group LLC, a Delaware limited liability company. TrackedPR helps you record and visualize your physical presence for Puerto Rico Act 60 residency. This policy explains what we collect, where it is stored, and the control you have. We do not sell your personal information.

Information we collect

• Account details — your email address, and — if you sign up with an email and password rather than with Google — a securely hashed password. Signing in with Google gives us your Google account's email address and basic profile details; it does not give us your Google password. Optionally, a phone number you provide for account recovery.
• Profile details you enter — your name, your accountant’s or attorney’s email address (only if you add one to email reports), and your Act 60 decree information (number, type, year).
• Travel and location entries — the dates, locations (city/state/country, and coordinates if you enable location), notes, and any proof documents you choose to attach.
• Terms acceptance — the version of the Terms of Service you accepted and the date and time you accepted it.

Where your data is stored

• With our authentication provider (Supabase) — your account credentials, the profile details above, and your Terms-acceptance record.
• On your device only — your travel/location entries and proof documents are stored locally in your browser (localStorage and IndexedDB). They are not uploaded to or stored on TrackedPR servers.
• Backups you create — are saved by you to your own storage (for example iCloud Drive or Google Drive) using your device’s share feature. We never receive or store your backups.

Third-party services

• Supabase — authentication and profile storage.
• Google Sign-In — optional. If you choose to sign in with Google, Google authenticates you and returns your email address and basic profile details to us. Google's own handling of that sign-in is governed by their privacy policy. You can avoid it entirely by creating an account with an email and password instead.
• Resend — sends the transactional emails you trigger (email confirmation, password reset, and any reports or backups you choose to send).
• OpenStreetMap / Nominatim and CARTO — when you use the map or look up a place name, location coordinates are sent to these services to display maps and resolve place names.
• Netlify — hosts the application.

We do not sell your personal information and we do not use it for advertising.

How we use your information

To operate your account, perform the residency calculations you request, send the emails and reports you trigger, record your acceptance of these Terms, and keep the service secure.

Your choices and control

• Export — download your full data at any time from Settings → Data & Reports.
• Delete your data — wipe your tracking data from Settings → Danger Zone.
• Delete your account — permanently delete your account and profile from within the app under Settings → Danger Zone → Delete account. For your protection there is a short grace period of about 72 hours, during which you can cancel from within the app; after that, deletion is permanent and cannot be undone.

Cookies & local storage

TrackedPR uses your browser’s local storage to keep you signed in and to store your travel data on your device. We do not use third-party advertising or tracking cookies.

Children

TrackedPR is intended for adults (18+) and is not directed to children.

Changes to this policy

We may update this policy from time to time; the “Last updated” date shown on this page reflects the latest version.

Terms

Your use of TrackedPR is also governed by our Terms of Service.

Operator & Contact

TrackedPR is operated by CS Technologies Group LLC, a Delaware limited liability company.

For CS Technologies’ company-wide privacy practices, see the CS Technologies privacy policy.

Questions about your privacy or this policy? Email privacy@trackedpr.com. For general support, email support@trackedpr.com.