Metrune Privacy Policy

1. Information we collect

Account information. We collect your email address, display name and username, together with an internal account identifier and information about account creation, verification, onboarding and settings. We process passwords to authenticate you and store password hashes rather than plaintext passwords. We also use session information and verification or password-reset codes to secure account access.

Information you enter. We store categories, descriptions, measurements and units, starting values, goals, targets, entries, notes and relevant dates. We retain configuration and history needed to interpret those records, including category status and changes over time. We also calculate and store information supporting Momentum, Lifetime Progress and other progress views.

Depending on what you choose to record, your content may include health-related, financial or other personal information. Metrune does not automatically obtain records from your bank, wearables or health services.

App and technical information. The app stores session information and preferences on your device. Our services and infrastructure providers process technical information needed to deliver and protect the service, such as network connection information, security counters and error information. Analytics and diagnostics are described below.

Communications. We receive information you send through feedback or support, including the content you choose to provide.

2. How we use information

We use information to:

• Create, verify and secure accounts.
• Store and display your records and progress.
• Interpret goals, targets, trends, Momentum and Lifetime Progress.
• Provide available export and support features.
• Send verification and password-reset messages.
• Understand product usage, diagnose problems and improve reliability.
• Prevent abuse and address applicable legal obligations.

We may also use aggregated or de-identified information that does not reasonably identify an individual for analytics, research and product improvement. Account-linked analytics records are not treated as de-identified merely because they omit your name or email address.

We do not sell, license or commercially distribute aggregated or de-identified information.

3. Product analytics

We use PostHog to understand how people use Metrune.

Our analytics records selected actions, such as completing onboarding, creating categories, recording progress and viewing analytics. Events can include limited feature settings, coarse progress context, app and operating-system information, timestamps and app-generated identifiers.

Analytics can be associated with your internal account identifier. Earlier activity may become linked to your account when you sign in. These records are pseudonymous, not necessarily anonymous.

We configure the integration to exclude your name, email address, category names, entered values, notes and authentication credentials. We do not enable broad interaction autocapture or session replay, and we do not use advertising identifiers in this integration.

In app versions with analytics enabled, analytics starts enabled unless you turn it off in Settings → Analytics Sharing. This choice applies to the current installation. Turning it off stops future analytics collection from that installation; it does not automatically delete previously received events or disable diagnostic reporting.

4. Diagnostics

We use Sentry to identify and investigate application and backend errors.

Diagnostic reports can contain redacted error or crash details, sanitized stack information, limited app/platform/build context and an internal account reference. Some reports include a restricted API operation and response status.

We configure diagnostics to exclude screenshots, session replay, request bodies, entered progress content and broad performance tracing. The Analytics Sharing setting does not control this separate diagnostic reporting.

Analytics and diagnostic providers may receive the IP address used to connect to them, even where our event payloads omit or mask IP information.

5. Transactional email

We use Postmark to deliver account-verification and password-reset messages. This involves your email address, the message and code being delivered, and ordinary delivery information.

These messages support account access and security. They are not a marketing subscription.

6. Feedback and support

Where in-app feedback is available, we store your message, feedback type, account relationship, submission time and limited app version, build, platform and processing information.

The feedback feature does not automatically attach screenshots, files, progress records or a diagnostic bundle. Please avoid including passwords, authentication codes or information you do not want reviewed by support.

If you email support@getmetrune.com, we receive your address, message, any attachments you send and ordinary email metadata. We use Google Workspace to manage support correspondence.

7. Service providers and disclosures

We use service providers to operate Metrune:

• Render for application hosting, database and supporting infrastructure.
• Cloudflare for our public website and domain infrastructure, and for storage of encrypted database backups.
• Postmark for transactional email.
• PostHog for product analytics.
• Sentry for diagnostics.
• Google Workspace for support email.

These providers receive or process information relevant to their roles. For example, database infrastructure handles stored application records, while our configured analytics integration receives the restricted events described above.

We may disclose information when required by law or when reasonably necessary to protect the service, investigate abuse or protect people’s rights and safety. Information you choose to export or share is sent to the destination you select.

We do not sell personal information or share personal information for targeted advertising. We do not use behavioral-advertising integrations or collect advertising identifiers.

8. Website and local storage

The public marketing website does not use client analytics or set application cookies. Its hosting provider still processes ordinary network requests needed to deliver and protect the site.

The mobile app uses local storage for session information and preferences. This is separate from website cookies.

9. Your information and choices

You can use the available app controls to review and change supported profile and progress information. You can turn product analytics off for the current installation as described above.

Where Export Data is available, it provides a JSON copy of account basics, categories, goals, entries and selected configuration/history. It can include retained archived or deleted records. It does not include every internal record, support correspondence, feedback or provider-held diagnostics and analytics.

The export process uses temporary files and attempts to remove app-managed copies after sharing and during subsequent cleanup. Copies you save or share elsewhere are controlled by you and the destination you choose.

The current version does not yet offer account deletion. Exporting data, signing out or uninstalling the app does not delete your account or server-held information.

Contact us with questions about your information. The export feature is not a complete process for all privacy requests.

10. Retention

We retain account information and progress records to provide and maintain Metrune and preserve your history. We have not established an automatic expiry period for these records. Categories or entries removed from active views may remain in retained history and progress records.

We retain feedback and support communications to handle requests, investigate issues and maintain the service. We have not established fixed retention periods for these communications.

Support, feedback, analytics, diagnostics, provider logs and backups do not currently follow one verified company-wide fixed retention schedule. Retention depends on the information involved, its operational purpose, applicable provider settings and any legal requirements.

Backup copies may remain until the relevant backups rotate or expire. We do not promise immediate deletion from every system or backup.

Authentication codes and sessions have separate expiration and invalidation rules; those rules do not determine how long account or progress records are retained.

11. Security

We use technical safeguards including password hashing, authenticated access controls, encrypted connections in the configured production services and encrypted database backups.

No system can guarantee absolute security or confidentiality. Please protect your login credentials and avoid sending passwords or verification codes in feedback or support messages.

12. Age eligibility

Metrune is intended only for users age 18 or older. People under 18 should not create an account or use the application.

If you believe someone under 18 has created an account or provided personal information to Metrune, please contact support@getmetrune.com.

13. Changes to this policy

We may update this policy as Metrune or its information practices change. The current policy and effective date will appear on this page. Where required, we will provide additional notice or obtain consent before a change takes effect.

14. Contact

Metrune LLC
New York
support@getmetrune.com