Privacy Policy

Last updated: 2026-08-08

Draft notice: this policy was drafted from Trace's actual data-handling practices to satisfy app-store and regulatory disclosure requirements. It has not yet been reviewed by a lawyer -- treat it as a working starting point, not certified legal advice, until it has been.

Who we are

Trace ("we", "us") operates the Trace mobile app. This policy explains what data we collect, why, and how you can control or delete it. Trace is designed to work without collecting your name, email address, or phone number.

Data we collect

• Device account key. When you first open Trace, the app generates a random key on your device and registers a pseudonymous account with us. We store a one-way hash of this key, never the key itself, so we cannot reverse it back to your device.
• Pseudonym. A randomly assigned display name shown to other users. It is not derived from any personal information.
• Live location (while the app is open). When you go visible, your device sends your current location so nearby users can find you. This location is fuzzed (rounded to an approximate area) before anything is shared with other users, is held only in short-lived cache memory with an automatic expiry, and is never written to our permanent database. Trace never accesses your location while the app is closed or backgrounded.
• Social graph. Friend connections, blocked accounts, and pending friend requests, all keyed to pseudonymous account IDs.
• Reports you file. If you report another account, we store the reported pseudonym, the reason selected, and any details you add, so we can review it.
• Push notification token. If you enable notifications, we store a token issued by Apple/Google (via Expo) so we can deliver alerts, e.g. when a friend goes visible nearby.
• Basic timestamps. When your account was created, when it was last active, and when you accepted these terms.

We do not currently collect analytics, advertising identifiers, or marketing data. If that ever changes, we will update this policy and, where required by law (including Quebec's Law 25 and Canada's PIPEDA), ask for your explicit opt-in consent before collecting it.

Third parties we rely on

Trace runs on the following infrastructure providers, each of which processes data on our behalf:

• Railway -- hosts our backend, database, and short-lived location cache.
• Expo -- builds the mobile app and delivers push notifications to your device.
• Google Maps or MapLibre -- renders map tiles, depending on your map provider setting.

We do not sell your data to anyone.

Your choices

• Choose who can see each time you go visible: everyone, or friends only.
• Block or report any account, at any time, from that account's profile.
• Delete your account entirely from Settings > Legal & Privacy > Delete my account. This permanently removes your account, friendships, blocks, and the reports you've filed, and ends any active broadcast. This cannot be undone.

Children's privacy

Trace is not directed at children. You must be at least 13 years old to use Trace (14, if you're in Quebec). We do not knowingly collect data from anyone younger, and we do not collect birthdates or other identifying information that would let us verify age beyond your own confirmation at sign-up.

Contact us

Questions about this policy or your data? Email support@gotrace.win.