Privacy Policy

Introduction

Track that Mac Ltd. ("we", "us", or "our") operates the Track that Mac fleet management service. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our service.

Track that Mac has two types of users with different privacy considerations:

• Administrators — People who sign up for an account and manage a fleet of Macs
• Agent Users — People whose Macs have the Track that Mac Agent installed (often employees of an organisation)

This policy covers both. If you're an Agent User looking for a quick overview of what data is collected from your Mac, please see our Privacy for Users page.

Information We Collect from Administrators

When you create a Track that Mac account, we collect:

Account Information

• Email address — Used for account identification, communications, and password recovery
• Name — As provided during sign-up (optional)
• Authentication data — If you sign in with Apple or Google, we receive a unique identifier from that provider; we do not receive your password

Payment Information

If you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card details. Stripe provides us with:

• A customer identifier
• Subscription status and plan details
• Last four digits of your card (for display purposes only)

Usage Information

• Login timestamps and IP addresses
• Actions taken in the Admin app (e.g., viewing fleet status, generating join keys)

Information We Collect from Monitored Macs

When the Track that Mac Agent is installed on a Mac, it periodically reports the following device information to the administrator's account:

How We Use Information

We use the information we collect to:

• Provide and maintain the Track that Mac service
• Process payments and manage subscriptions
• Send service-related communications (e.g., security alerts, billing notices)
• Respond to support requests
• Improve and develop new features
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information to third parties.

Information Sharing

With Administrators

Device information collected by the Agent is accessible to the administrators of the organisation that enrolled the device. If your employer installed Track that Mac on your work computer, your employer (as the administrator) can see the device data listed above.

Third-Party Service Providers

We use the following third-party services to operate Track that Mac:

• Amazon Web Services (AWS) — Cloud hosting and data storage (US and EU regions)
• Stripe — Payment processing
• Apple and Google — Authentication (Sign in with Apple / Google)

These providers process data on our behalf and are contractually obligated to protect it.

Legal Requirements

We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Data Retention

We retain data as follows:

• Device monitoring data: Retained according to your subscription plan (3 months for Free tier, 12 months for Pro plans). Older data is automatically deleted.
• Account information: Retained while your account is active, plus 30 days after deletion to allow for recovery.
• Payment records: Retained as required for tax and legal compliance (typically 7 years).

Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit: All data is transmitted using TLS 1.2+ encryption
• Encryption at rest: Data is encrypted at rest in our databases using AES-256
• Authentication: Agent devices use HMAC-based authentication; user accounts use OAuth 2.0
• Infrastructure: Hosted on AWS with multi-region redundancy
• Access control: Strict internal access policies and audit logging

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Objection: Object to certain processing of your data

To exercise these rights, contact us at privacy@trackthatmac.com.

For Agent Users

If you are an employee whose Mac is monitored by Track that Mac, your employer is the data controller for device information. Please contact your employer's IT department for data access requests. We will assist them in fulfilling such requests.

International Data Transfers

Track that Mac operates globally with infrastructure in the United States and European Union. Data may be transferred to and processed in these regions. We ensure appropriate safeguards are in place for international transfers.

Children's Privacy

Track that Mac is not intended for use by children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the effective date. For significant changes, we may also notify you by email.