Effective date: July 2, 2026
This Privacy Policy describes how Trace ("Trace," "we," "us," or "our") collects, uses, discloses, and protects information when you use the Trace mobile application and related services (collectively, the "Service"). By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.
Trace is a personal wellness and health-coaching application. Because the information you entrust to us is sensitive, we hold ourselves to the strictest reading of the laws that protect it, including the FTC Health Breach Notification Rule and state consumer-health-privacy laws such as Washington's My Health My Data Act and the California Consumer Privacy Act as amended.
Information you provide directly:
Apple or email sign-up, and your authentication credentials.
and workouts, body weight and measurements, sleep, hydration, mood, supplements and medications (including dosages), menstrual-cycle information, substance use, and any conditions, allergies, or goals you record.
upload, which the Service reads to extract results.
choose to attach.
provide and the sections you select.
Information collected automatically:
notifications), app version, and basic request logs (timestamps, endpoints, and status codes — never the content of your health data) used to operate and secure the Service.
weight, steps, and heart-rate metrics). HealthKit data is used solely to provide the Service's features, is never used for advertising or marketing, and is never disclosed to third parties for their own purposes, consistent with Apple's HealthKit guidelines.
We do not collect: advertising identifiers, location data, contacts, or browsing history. The Service contains no advertising or third-party analytics trackers.
We use your information solely to provide, maintain, secure, and improve the Service:
and insights you request or enable;
We do not sell your personal information. We do not share it for advertising or cross-context behavioral advertising. We do not use your health information for marketing. We do not use your personal information to train artificial-intelligence models, and our service providers are contractually prohibited from doing so.
We share information only with the service providers ("processors") necessary to operate the Service, under contracts that limit their use of your information to providing services to us:
is encrypted at rest.
context are transmitted to Anthropic's API to generate coaching responses. Anthropic does not train models on this data.
computation for the coaching memory.
content is deliberately generic and never includes health details.
We may also disclose information: at your direction (for example, when you email a report to a recipient you choose); to comply with law, legal process, or a governmental request; to protect the rights, safety, or property of users or the public; or in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information and you will be notified of any change in ownership or use.
We never post your information publicly, never place health information in third-party issue trackers or developer tools, and never disclose health information to data brokers.
Depending on your place of residence (including California, Washington, Colorado, Connecticut, Virginia, and other states with consumer-privacy laws, and the EEA/UK if applicable), you may have the right to:
provides this directly: Settings → share a report of any sections you choose);
Settings → Delete account. Deletion is immediate and permanent: it removes your health data, conversations, photos, lab documents, feedback (including screenshots), and your sign-in identity from our systems;
notifications, or stop using the Service;
degrade quality because you exercised a privacy right;
and, where applicable, contact your state attorney general.
To exercise any right, use the in-app controls above or contact us via the support page listed at the end of this policy. We verify requests using your authenticated account. Authorized agents may submit requests as permitted by applicable law.
We retain your information while your account is active. When you delete your account, all personal information is permanently deleted from our production systems immediately; residual copies in encrypted backups expire on the backup rotation schedule (no longer than 35 days). Anonymous, aggregate operational metrics that cannot be linked to you may be retained.
We employ administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including: encryption in transit (TLS) for every connection; encryption at rest; row-level access controls so each account can only read its own records; secret management with scoped credentials; audit logging of administrative access, exports, and deletions; and device-side protections (transcripts are stored in encrypted, non-backed-up files). No method of transmission or storage is 100% secure; if a breach affects your unsecured health information we will notify you and regulators as required by law, including the FTC Health Breach Notification Rule.
Trace is a wellness tool. It is not a medical device, does not provide medical advice, diagnosis, or treatment, and is not a substitute for professional judgment. Always consult a qualified health provider about medical conditions, medications, or symptoms, and never disregard professional advice because of something the Service said.
The Service is not directed to children and may not be used by anyone under 13 (or the higher minimum age in your jurisdiction). We do not knowingly collect information from children; if we learn we have, we will delete it.
The Service is operated from the United States and your information is processed in the United States. If you use the Service from outside the U.S., you consent to this processing. Where GDPR or UK GDPR applies, our legal bases are performance of a contract (providing the Service you request), your consent (health data, which you may withdraw at any time), and legitimate interests (security and abuse prevention).
We will update the effective date above for any change and provide in-app notice of material changes before they take effect. Continued use after notice constitutes acceptance.
Settings → Delete account / export for data rights.