Security

How we keep your account and data safe

Trackapp holds real money records and client details, so we treat security seriously and build it in several independent layers, so that one failure is not enough to expose your data. This page explains those measures in plain language.

Signing in

Signing up requires confirming your email. A new password must be at least 12 characters, and the app refuses the most common passwords. We do not currently check passwords against lists of breached passwords. Passwords you already use keep working.

Two factor authentication is optional. You can turn it on in Your account. Once it is on, the database does not return your business data until you enter the code from your authenticator app, and turning it off or managing recovery codes needs that code too.

Changing your password needs your current password, and deleting your account needs your password or a fresh sign in. Both are checked on our server, with a limit on wrong tries. When you change or reset your password, your other devices are signed out and the device you used stays signed in. You can also sign out of all your devices at any time.

Your workspace is isolated

Every seller's workspace is separated at the database level by row level security. Before any record is read or written, the request is checked against your active workspace, so a workspace only ever sees its own clients, orders, payments, and files. Visitors who are not signed in get nothing beyond the public pricing information.

Encryption in transit and at rest

All traffic uses TLS (HTTPS), and browsers are told to refuse an insecure connection. Your data is encrypted at rest by our platform providers. We do not add our own column level encryption, and we do not claim your data is invisible to us as the operator: we can access data where needed to run and support the service.

Least privilege access

Access is kept to the minimum needed. Visitors who are not signed in can reach almost nothing. Signed in access is gated by your workspace membership. We do not ship any secret keys to the browser.

Shareable links

When you share an order, receipt, or statement by link, the link uses a long code that cannot be guessed. An order link can also have a 4 digit PIN. Wrong PINs are counted on our server: after 5 wrong tries the link locks for 15 minutes. Links you revoke or that expire stop working immediately. Public pages show only what your client needs, never your internal notes or a client's full contact details.

Money and files

• Payment and order amounts are stored in precise numeric types and cannot be recorded as negative values. Each payment carries a safeguard so a dropped connection or a double tap cannot record the same payment twice.
• Payment proof photos are private and reached only through short lived signed links. Uploaded images are encoded again, which removes hidden location data.

On your device

The home screen app's offline copy holds only the app itself, never your records. When you sign out, Trackapp removes what it kept on that device: the records it loaded, anything it saved in the browser for your account, and the home screen app's offline copies. The next person to use the phone or computer starts at the sign in screen.

Payment proof photos open through links that stop working after an hour. Your browser may keep its own copy of a photo you viewed until you clear its browsing data.

Ongoing practice

Automated tests, including security checks for shared links, sign in, input safety, and money rules, run on every change we publish. When we change security related code, we also test it against the live service using separate test accounts, never your data.

Reporting a concern

If you find a security issue or have a concern, please email us at security@trackapp.ae. We welcome responsible disclosure and will respond promptly.