Privacy & Data ProtectionDPDP Act · GDPR Aligned

Privacy & Data Centre

Your unified home for Traketo's statutory privacy policy, personal data inventory, consent preferences, rights requests, and account controls.

Operator & Contact

Who operates Traketo

Traketo is operated by Sourav Verma, an individual based in Jammu and Kashmir, India. In this policy, “Traketo”, “we”, “us”, and “our” refer to that service and its operator.

Privacy questions and data requests can be sent to privacy@traketo.com.

Account, content & devices

Information we collect

Account information: your name, email address, authentication credentials, verification status, and basic profile details. Passwords are stored as secure hashes, not as readable text.
Google sign-in information: if you choose Google, we receive the account identifier and basic profile information that Google makes available for authentication.
Content you create: tasks, labels, gates, workspace information, progression data, timers, reminders, settings, and files you choose to attach.
Shared-study information: room membership, join requests, display information, timer state, and activity needed to operate a shared session.
Device and service information: session cookies, IP address, browser or user-agent information, push-subscription details, and limited operational and security logs.

Features, sync & security

How we use information

We use personal data to:

create and secure your account and keep you signed in;
provide tasks, timers, reminders, offline access, and shared study;
send verification codes, reminders, and service messages;
sync your changes, prevent abuse, and diagnose service failures;
respond to support, privacy, and security requests; and
meet legal obligations and enforce our Terms of Service.

We do not sell personal data or use it for third-party advertising.

Essential vs optional

Cookies, local storage, and offline data

Traketo separates storage that is essential to provide the service from optional preference storage. We do not use advertising, behavioral-tracking, or analytics cookies.

Authentication and security: a first-party session cookie keeps you securely signed in and protects private routes. It is essential to the account service and normally expires after seven days.
Consent preference: a first-party cookie remembers whether you selected essential storage only or allowed preferences. It expires after 180 days so Traketo does not ask on every visit.
Optional interface preferences: only after you choose “Allow Cookies,” local storage remembers dismissed tips and deadline alerts you have marked as read. Choosing “Decline” removes these saved preferences.
Requested in-session features: temporary session storage keeps track of an active timer while the browser tab is open.
Encrypted offline data: offline task snapshots and queued changes use IndexedDB only as part of the separately opt-in offline feature. They are encrypted with your device passcode, generally expire after seven days, and can be cleared in Settings.

You may allow or withdraw optional preference storage at any time. Essential authentication storage remains active while you use a signed-in account.

Providers & legal needs

How information is shared

We share information only in limited circumstances:

Service providers: infrastructure, database, transactional email, and hosting providers that process data on our instructions under strict confidentiality obligations.
Other participants: when you join a shared study room, other participants see the name, avatar, and room state associated with that session.
Legal and safety requirements: when reasonably necessary to comply with a valid legal obligation, protect someone’s safety, investigate fraud, or defend our legal rights.
Business transfers: in connection with an acquisition, reorganization, or transfer of service assets, with appropriate commitments to maintain this policy.

Global hosting & safeguards

Where data is stored and international transfers

Traketo and its providers host and process data in the cloud. If information is transferred internationally, we ensure appropriate safeguards are applied in accordance with applicable data-protection laws.

Account lifetime & cleanup

How long information is kept

We keep personal data while your account is open or as needed to provide the service. When you delete your account, personal data is scheduled for removal or anonymization, except where retention is required for legal compliance, dispute resolution, or fraud prevention.

Access, export & deletion

Your choices and rights

Depending on your location, you may have statutory rights to:

access, review, and receive a copy of your personal data;
correct inaccurate or incomplete information;
request deletion of your personal data;
object to or restrict certain processing activities; and
withdraw consent you previously provided.

You can update profile details or export and delete your data directly using the tabs in this Privacy & Data Centre. You can also contact privacy@traketo.com.

TLS, hashing & controls

Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, or alteration. These include transport encryption (HTTPS/TLS), hashed password storage, and access controls. No internet service can guarantee absolute security, so please use a unique, strong password.

Age requirements

Children

Traketo is not directed to children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact privacy@traketo.com so we can promptly investigate and remove it.

Updates & contact

Changes and contact

We may update this Privacy Policy from time to time. When changes are material, we will update the date above and post a notice within the service. Continued use of Traketo confirms your acceptance of the updated policy.

If you have questions, please reach out to Sourav Verma at privacy@traketo.com.