# Who can read my tracker and medication data?

Your tracker values live inside your journal entries, which are encrypted on your device and stay encrypted when they sync. Your medication list and custom trackers live in your settings. They sync encrypted like your notes, but the copy this device keeps of them is not sealed yet, so your disk encryption and screen lock are what protect it there. Statistics, [the Doctor PDF](https://privacynotes.app/help/doctor-pdf/), [the AI prompt](https://privacynotes.app/help/ai-prompt/) and both downloads are computed on your device.

[With self-custody](https://privacynotes.app/help/threat-model-levels/), the server holds nothing that opens them. If you signed up with Google, Apple or GitHub and chose "Keep it simple & convenient", your phrase is stored on our server under a key of ours; Settings > Account > Key custody shows your mode and lets you switch. More in [what PrivacyNotes can see](https://privacynotes.app/help/what-can-you-see/).

---
Source: https://privacynotes.app/help/tracker-privacy