Privacy policy

Plain language, one page. It covers zyratrack.com (the site), app.zyratrack.com (the tracker) and zyratrack.com/forum (the community). Last updated 22 August 2026.

Who we are

Zyra Track is operated by Yankov Soft 2015 Ltd. („Янков Софт 2015“ ЕООД), EIK 203541098, Burgas, Bulgaria — the data controller for everything below. Questions and data requests: support@zyratrack.com. The GDPR applies to all of it.

The website

The site is static reference material. It uses Google Analytics (measurement ID G-49PJ6FVE7L) to count visits and see which pages are read; Google sets its own cookies for that and processes the data under its terms. Our web server keeps standard access logs (IP address, page, time, browser) for up to 14 days, used only to keep the site running and to investigate abuse. Questions you type into Ask are sent to our AI provider to produce the answer and are not tied to an account.

The tracker app

Your dose log, protocols, inventory and lab results live on your device and — with an account — in your private, per-user space in our cloud database (Supabase, EU-hosted), readable by you alone and used only to back up and sync your own devices. It is never shared between users, never sold, never used for advertising, and never analysed except by features you switch on yourself. Research contributions (Zyra Science) happen only if you explicitly join, with identity stripped, and can be withdrawn in Settings. The app has its own full statement under Settings → Privacy; where this page and that statement differ, the app’s statement governs for app data.

Subscriptions are billed by Stripe; we receive your subscription status and the last digits of your card, never the full card number. Transactional email (welcome, receipts, support replies) is sent through Resend, processed in the EU. Our own product analytics run under a random identifier; the IP address is discarded at ingestion.

The community forum

To post you need an account: an email address and a password, or a Google sign-in (we store Google’s account identifier, never your Google password). You choose a handle; your email is never shown to other members. Everything you post is public, stays attributed to your handle, and may remain visible after you leave the forum unless you ask us to remove it.

IP addresses. To keep the forum free of sellers and fake accounts we record the IP address used to create an account, to start a session, and to publish a post, and we limit how many accounts can be created from one address per day. These addresses are visible only to our moderators, are used only for abuse prevention and moderation, and are deleted when the account is deleted. Moderation records (held posts, reports you make or receive, moderator notes) are kept while the account exists.

Cookies: one first-party session cookie (zt_forum) that keeps you signed in for up to 30 days and holds no personal data, plus a short-lived cookie during Google sign-in. No advertising cookies.

Processors

Supabase (accounts, app data), Scaleway (forum database, Paris), DigitalOcean (hosting), Stripe (payments), Resend (email), Google (sign-in; analytics on the site), and our AI provider for Ask. Each is bound by a data-processing agreement and may not use your data for its own purposes.

Your rights

Access, export, correction, erasure, restriction and objection — email support@zyratrack.com from the address on the account. App data can be exported and deleted from inside the app. Forum accounts are deleted on request; posts are removed or anonymised as you choose. We answer within 30 days. You can also complain to the Bulgarian Commission for Personal Data Protection (CPDP) or your local authority.

Children

Zyra Track is for adults. Accounts are not offered to anyone under 17, and the forum requires 18+.

See also the terms of use and the community rules.