Privacy Policy | M-Tracker

Privacy Policy for M-Tracker

Last updated: 20 October 2026

M-Tracker (“we”, “our” or “us”) is operated by Meckanzy International Limited, a company registered in Nigeria, of Eleganza Gardens Estate, Nigeria. We are the data controller for the personal data described in this policy.

M-Tracker helps teams get feedback on their work. We look at the work, not the person. M-Tracker does not take screenshots, record screens, log keystrokes, use webcams or track mouse movement.

This policy explains what we collect, why, who we share it with, and the choices you have.

1. Information we collect

a. Information you give us

Account details: your name, email address, phone number, company, role and password.
Work content: tasks, briefs, instructions, comments, goals, key results, projects, milestones, estimates, rates and standards (such as a client’s brand guide).
Files and links you attach to tasks. When you ask for a review, we open the files and public links you added (for example a public Google Docs or Google Drive link) to read the work.
Voice notes, if you use voice typing. The recording is turned into text and is not kept after that.
Time records you track in M-Tracker or import from a Toggl Track or Harvest CSV export.
Client details you add, such as a client’s name and email address, and the approvals or change requests a client sends through an approval link.
Messages you send to our support team, demo requests and partner applications.

b. Information from integrations you connect

Google Calendar: read-only access to your calendar events (titles, times and attendees) and your Google account email address, so meeting time can be shown alongside your work.
Jira: read-only access to your Jira issues and basic Jira user details, so you can import tasks and get reviews inside Jira.
ClickUp: access to your ClickUp tasks so you can import them, and permission to log time back to ClickUp when you ask.

You choose whether to connect each integration, and you can disconnect it at any time.

c. Information collected automatically

Device and browser type, IP address and approximate location.
Usage data, such as features used and when, to keep the service working and secure.
Cookies and similar technologies that keep you signed in and remember your preferences.

d. Payment information

Payments are handled by Paystack and Flutterwave. They collect your card or bank details directly. We receive only what we need to manage your subscription, such as the plan, amount, status and the last digits of a card.

2. How we use your information

To provide M-Tracker: run your workspace, tasks, goals, projects, time records, reports and client approval links.
To review work and make suggestions with AI, when you or your team ask for it (see section 3).
To send service emails, such as invitations, review results, approval requests, daily reports and alerts.
To process payments and manage subscriptions and review credits.
To give support, fix problems, keep M-Tracker secure and prevent abuse.
To improve M-Tracker, using usage data.
To send product news, which you can unsubscribe from at any time.
To meet legal, tax and accounting obligations.

We process your data to perform our contract with you, for our legitimate interest in running and improving a secure service, with your consent where the law requires it (for example, marketing emails and connecting integrations), and to comply with the law.

We do not sell your personal data, and we do not use it for advertising.

3. AI processing

When someone asks for an instant review, a goal or project plan suggestion, or voice typing, we send the relevant content to OpenAI to process it. This can include the task brief, the linked goal and key results, the person’s role, attached files and links, and the client’s standards. OpenAI processes this data on our behalf. Under OpenAI’s API terms, data sent through the API is not used to train its models by default.

AI reviews are a first opinion for the person doing the work. They are not used to make automated decisions about anyone’s employment. Organisation admins can turn AI features off for their whole organisation.

4. Google user data

M-Tracker’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to show your meetings and meeting time in M-Tracker. We do not use it for advertising, we do not sell it, and we do not use it to train AI models. People at M-Tracker can only read it with your permission, for support or security, or where the law requires it.

5. Who can see your information

Your workspace: people in your team or organisation can see work you share with them, according to their role. Managers and admins can see the tasks, time, goals and reviews of the people they manage.
Your clients: anyone who opens a client approval link or report can see what it contains. Client reports do not show internal reviews, comments, revision counts or costs.
Service providers that help us run M-Tracker, listed in section 6. They may use your data only to provide their service to us.
Authorities, when the law requires it, or to protect the rights and safety of our users, the public or M-Tracker.
A buyer or successor, if M-Tracker is merged or sold. We will tell you before your data is covered by a different privacy policy.

6. Service providers (subprocessors)

Supabase: database, sign-in, file storage and back-end functions
Cloudflare: hosting for the M-Tracker web app, DNS and security (including protection against attacks)
OpenAI: AI reviews, suggestions and voice-to-text
Pingram: email notifications
Paystack and Flutterwave: payments
tawk.to: support chat and help centre
Google, Atlassian (Jira) and ClickUp: only when you connect those integrations

We will update this list when we add or change a provider.

7. International transfers

Our service providers may store and process data outside Nigeria, including in the United States and the European Union. When we transfer personal data abroad, we use contracts and safeguards that the Nigeria Data Protection Act 2023 and other applicable laws require.

8. Security

We protect your data with encrypted connections, access controls that keep each workspace’s data separate, and restricted staff access. No system is completely secure. If a breach affects your personal data, we will tell you and the relevant authorities as the law requires.

9. How long we keep data

We keep your account and work content while your account is active.
If you or your organisation close an account, we delete or anonymise its personal data within 90 days. We may keep some records longer where the law requires it, for example invoices and payment records.
Voice recordings are deleted once they have been turned into text.
When you disconnect an integration, we stop collecting data from it. You can also remove M-Tracker’s access from your Google, Atlassian or ClickUp account settings at any time.

10. Your rights

Depending on where you live, including under the Nigeria Data Protection Act 2023, the GDPR and US state privacy laws such as the CCPA, you may have the right to:

access the personal data we hold about you and get a copy;
correct inaccurate data;
delete your data;
object to or restrict some processing, and withdraw consent at any time;
receive your data in a portable format;
complain to a data protection authority, such as the Nigeria Data Protection Commission.

Email hello@mtrackerapp.com to use these rights. We will reply within 30 days. If your account belongs to an employer’s workspace, we may pass your request to them, because they control that workspace’s data.

11. Cookies

We use essential cookies to keep you signed in and secure, and cookies on our website to understand visits and remember preferences. You can control cookies in your browser settings. Blocking essential cookies may stop the app from working.

12. Children

M-Tracker is a workplace tool and is not meant for anyone under 18. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy. If a change is significant, we will tell you by email or in the app before it takes effect, and update the date at the top of this page.