Aligner Tracker privacy policy
Updated 11 September 2026
Who provides this app
Aligner Tracker is provided by Matej Kalc as free, open-source software. There is no app account, advertising, analytics or developer-operated treatment server. You can use the phone app offline. This policy covers the app, optional watch communication and exports you choose to create.
Records on your device
The app stores the treatment details, wear events, targets, time zone, schedule changes, notes, appointments and photos you enter, plus reminder and display preferences. These records stay in app-private storage protected by Android. They are not sent to the developer. The database is not separately encrypted by the app. Automatic Android backup and device transfer are disabled; keep a portable backup before uninstalling or changing devices.
Photos and camera
You choose individual images with the system Photo Picker, or use an external camera app. Saved copies are resized and re-encoded locally, removing source metadata such as location. Your original images remain with their original provider. Cancelled or imported temporary camera files are removed; an unfinished capture is retained for process recovery and cleaned up on the next app start after 24 hours. Saved photos remain until you delete them.
Backups, exports and other providers
Backups can contain all treatment records and private photo copies. Password-protected backups are encrypted; lost passwords cannot be recovered. Plain backups, CSV reports and photo time-lapse exports are readable by anyone with the file. You choose every export destination with Android’s document picker. A cloud document provider may upload a file you save there under its own privacy terms. The app does not choose a destination or automatically upload your records. Restore replaces records only after validation and your confirmation.
Optional Wear OS communication
A compatible paired watch can exchange compact current status and explicit tracking commands with the phone. Photos, notes, appointments and full history are not sent to the watch. The developer does not receive this exchange. Communication depends on an installed Wear Data Layer service, such as Google Play services, which controls its transport and may use cloud routing. Nearby-device checks do not guarantee Bluetooth-only transfer. The phone app does not require watch pairing, and neither app requests internet access directly.
Permissions and reminders
Notifications and precise-alarm access are optional. Android can deliver reminders and restore their scheduling after a reboot or app update. Lock-screen public notification content is generic, but the device and notification settings affect what is visible. Selected-photo and document access comes from system pickers. No background location, contacts or broad photo-library access is requested. Other apps and providers you choose, including the camera, have their own privacy terms.
Retention and deletion
Records remain on your device until you delete them or uninstall the app. Settings → Your data, your copy → Delete all data removes local treatment records, saved photo copies and temporary captures, resets reminder and display preferences, and cancels pending reminders. Previously exported files and original photos must be deleted separately. A disconnected watch may retain its last acknowledged status and pending actions until reconnection or until you clear its app data. Validated restore replaces the phone’s treatment records; device-specific permissions, pairing and reminder choices are not portable backup records.
Questions and policy changes
For support or privacy questions, email me@matejkalc.com. Email is handled by the providers you and the maintainer use; it is not sent automatically by the app. Include only what is needed for your question, and do not send treatment records, private photos or backups unless specifically needed and agreed. You can also report software issues at https://forgejo.server.matejkalc.com/matejkalc/aligner-tracker/issues. Issues are public: do not post sensitive information. Visiting the repository is a separate web service with its own connection and server processing. Policy changes will be published with an updated date and included in subsequent app versions.