WorldsBestTracker

Privacy Policy

Effective date: August 17, 2026 · Contact: [email protected]

WorldsBestTracker ("the app", "we") is a personal medication, supplement, nutrition, and wellness tracker. Your health information is yours. This policy explains what we collect, why, and what we never do with it.

What we collect

• Account information. When you sign in with Google or LinkedIn, we receive your name, email address, and profile photo, used to identify your account. LinkedIn sign-in requires a verified email address and shares only that lite profile, never your connections, posts, or employment history. If you sign in with LinkedIn using the same verified email as an existing Google account, both route to the same account rather than creating a second one. We never post anything to your LinkedIn.
• Health information you enter. Medications, supplements, doses, schedules, dose logs, and subjective check-ins (how you feel). This data exists so the app can work for you. It is stored in your own account records and is not shown to other users of the app. See “Who at WorldsBestTracker can see your entries” below for who inside WBT can view it.
• Fitness and wearable data you connect (optional). You may link accounts you already have: currently Strava, Google Health, WHOOP, and Oura. Depending on the device, we import workouts, sleep, recovery or readiness, heart-rate variability, resting heart rate, activity, and daily stress, and store them alongside your other entries so you see them on one timeline. We never write anything back to those services. Connecting is always your choice, each one is a separate decision, and the app works fully without any of them. You can disconnect in Settings at any time (and also revoke access directly with the provider, for example at strava.com/settings/apps), after which we stop syncing immediately. Data already imported stays on your timeline until you delete it.
• Product label photos. Photos you take of product labels are sent to a third-party AI provider for text extraction and are not stored by us after processing.
• Product barcodes and prices. Scanned barcodes may be looked up against public and licensed product-reference databases to identify the item. Prices you record contribute to community price statistics anonymously: the public library shows only aggregates (average, min, max, count), never who reported them. A private record linking a contribution to an account is kept solely for abuse moderation.
• Location: approximate, and only if you allow it. Your precise coordinates stay on your device and are never stored by us. Sunrise, sunset, and moon phase are calculated on your device from them. For local weather, pollen, and air quality, your position is rounded to roughly an 11 km grid square before it leaves your device, and only that rounded square is sent: enough to describe regional conditions, deliberately not precise enough to indicate a home address. You can see when your area was last set, and change it, from the location chip in the app header.
• Assistant conversations. When you use the WBT Assistant, your message and the portion of your own data needed to answer it are sent to a third-party AI provider to generate a reply. So the assistant can act as your concierge, that portion can include profile details you have chosen to enter — body basics such as age, sex, height, and weight, your goals, dietary restrictions and allergies, and your personality assessment results — used to tailor its coaching to you. We send the minimum required, never your full history. The assistant proposes entries; you confirm before anything is saved. Conversation threads are kept on your own device, not on our servers, and are cleared when you sign out.
• How you found us. If you arrive from a campaign link, we record the source (for example a utm_source value or referring site) once per account so we know which channels work. It is never linked to any health entry.
• Error reports. If the app crashes we receive a technical error report through a third-party error-reporting service, configured to exclude personally identifying information. We do not record your screen inside the app.
• Notifications. If you enable dose reminders, we store a push subscription for your browser/device to deliver them.

What we never do

• We never sell your data, health or otherwise.
• We never share your identifiable health data with advertisers or data brokers.
• We never post your data publicly or show it to other users of the app. It is visible only to you, to caregivers you explicitly authorize, and to the authorized personnel described under “Who at WorldsBestTracker can see your entries” below.
• We never use your health information to target advertising.

Sharing you control

You may invite a caregiver to view or manage your tracking with permissions you choose. Invitations use unguessable single-use links; you can revoke access at any time in Settings.

Where data lives

Your data is stored on major commercial cloud infrastructure located in the United States. Transport is encrypted (HTTPS) and data is encrypted at rest. Access is enforced by server-side security rules, so one account cannot read another's.

We use a small number of third-party providers, in these categories:

• Cloud hosting, authentication, and database: stores your account and entries.
• AI providers: read product labels and power the assistant, as described above.
• Product and nutrition reference databases: receive only a barcode or product name, never anything about you.
• Weather and environmental data providers: receive only the rounded ~11 km area, never your identity.
• Fitness and health platforms you choose to connect: currently Strava and Google Health, named because you authorize them directly.
• Error reporting: receives technical crash details, configured to exclude personal information.
• Usability analytics and advertising measurement: named individually in the two sections below, since you may want to opt out of them.
• Web push: operated by your browser vendor, to deliver reminders.

Where a provider processes personal information on our behalf, they are bound by contract to use it only for the service they provide to us. If you need the specific identity of a provider (for example to exercise a data right), email us and we will tell you.

Who at WorldsBestTracker can see your entries

You should know this plainly: authorized WorldsBestTracker personnel can view the data you log. That includes the operator of the service and a limited number of people granted a service role, for example a coach, an accountability partner, or an analyst working with a partner business. This access exists so those services can actually be delivered, and so we can investigate problems you report.

Limits we hold ourselves to:

• Access is read-only. Staff and service roles can view your entries; they cannot edit or delete them. Only you and a caregiver you have authorized can change your records.
• Access is granted individually by the operator and can be revoked at any time.
• It is never used for advertising, and your data is never sold or shared with data brokers.

If you want one-to-one sharing only (a family member or a personal coach seeing your data and nobody else), use a caregiver invitation. That is a direct, permission-controlled link between you and that person, which you can revoke at any time.

WorldsBestTracker is a consumer wellness product. It is not a HIPAA covered entity, and the protections that apply to a hospital or insurer's records do not apply here. If you would rather not have your health information visible to service personnel, please do not record it in the app.

Your rights

Wherever you live (including under the GDPR in the UK and EU, and the CCPA/CPRA in California), you may request access to your personal information, correction, a portable export, deletion, or restriction of processing, and you may withdraw consent or object to certain processing. You can export a full copy of your own data at any time from Settings. We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under California law. To exercise any right, email [email protected]; we respond within 30 days. You also have the right to complain to your local data protection authority.

International transfers

We are based in the United States, and our providers process data there and in other countries. Where required, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Not medical advice

WorldsBestTracker records what you tell it and shows you your own patterns. It does not provide medical advice, diagnosis, or treatment. Decisions about starting, stopping, or changing any medication or supplement belong with you and your clinician.

Affiliate links

Product pages may include links to retailers. As an Amazon Associate, WorldsBestTracker earns from qualifying purchases. Affiliate links never carry your health information.

Usability analytics

We use Microsoft Clarity to understand where the app is confusing: heatmaps, scroll depth, and anonymized session replays of how the interface is used. Recordings are text-masked: on-screen content such as medication names is blanked before anything is stored, so replays show where people click and scroll, not what their health data says. See Microsoft's privacy statement for how Clarity handles its data. We also use Google Analytics for page-view counts and standard usage events (which pages are visited, from where, on what kind of device), with IP anonymization on; it never receives medication names, feelings, or any health text. See Google's privacy policy and Google's opt-out.

Advertising measurement

We use the Reddit and Meta (Facebook) conversion pixels to measure whether our ads work. They record standard events only (that the app was visited and that an account was created), using cookies set by Reddit and Meta respectively. They never receive your health data: no medications, doses, feelings, workouts, or profile contents. You can opt out of personalized ads in your Reddit privacy settings and Meta ad preferences, and browser ad-blockers will block the pixels entirely without affecting the app.

We also load Meta's JavaScript SDK, which registers this site as our Meta app and records an app page view. It sets Meta cookies and is subject to the same rule as everything else on this page: it never receives your health data. The same Meta ad preferences and ad-blockers apply to it.

Retention and deletion

Your data persists until you delete it. You can delete individual items, logs, and products in the app, disconnect integrations at any time, and request full account deletion by emailing [email protected]. We will remove your account data within 30 days.

Children

WorldsBestTracker is not directed at children under 13, and we do not knowingly collect their data. Caregiver features are intended for adults managing care.

Changes

If this policy changes materially, we will update the effective date above and note the change in the app.

← Back to WorldsBestTracker · Terms of Service