Consumer health data privacy policy
For Trace: ADHD Diary & Tracker. Version 2, in force from October 23, 2026.
Who this covers
This policy is for people in Washington and Nevada, and we follow it for everyone in the US who uses Trace. It covers consumer health data as those states' laws define it. Trace ADHD Ltd makes Trace; our privacy policy says more about us and everything else we do.
Your diary isn't collected
Everything you enter in Trace, such as your medicines, doses, how you rated each day, what you log, notes, voice recordings, sleep, steps and calendar numbers, is kept on your phone, encrypted. Trace never sends it to us, so we don't collect it. We never see your diary.
The consumer health data we collect, and why
We count everything below as consumer health data, because it is linked to your phone and to an app about ADHD, so it could suggest that you have ADHD or take a medicine for it. Most of it exists only if you choose a feature that needs it.
| Category | How we use it | Source |
|---|---|---|
| An anonymous ID made on your phone, your purchases and subscription status, the store's country, your phone's type and system version, the app's version, and your IP address | To unlock Premium when you subscribe, to restore it on another phone, and to keep the financial records the law requires | Your phone, and the App Store or Google Play through RevenueCat |
| Only if you turn on usage stats: the events the privacy policy lists, such as which stage of ADHD care you chose when you started, with a random ID, your phone's model, system version, language and time zone; and error reports | To see which parts of Trace are used, and to find and fix errors | Your phone |
| Only if you use Together: an anonymous ID, what you choose to share with one person, encrypted on your phone so we can't read it, when you shared, and a push token | To pass what you share to the person you chose, and to tell their phone something changed | Your phone |
| Only if you share a report as a link: an anonymous ID, the report, encrypted on your phone so we can't read it, when it expires and how many times it has been opened | So the person you send the link to can open the report, and you can see whether they have | Your phone |
| Only if you ask someone who knew you for examples: an anonymous ID, the invite and the examples they write, both encrypted so we can't read them | So they can write examples in a browser, and you can read them in Trace | Your phone, and the person you invited |
| Your phone's IP address, when Trace fetches its stories and articles, public lists, or a speech model you chose to download | To deliver them. They're the same for everyone, and the request says nothing about you or your diary | Your phone |
| What you write to us, and your email address | To answer you | You |
We collect each only as far as it is needed to give you what you asked for. Usage stats and error reports are only with your consent, which you give and withdraw with the switch in Settings → Privacy.
Who receives it
We don't sell your consumer health data. Apart from passing what you choose to share, encrypted, to the people you choose, we don't share it with third parties or affiliates. These companies process it for us, only on our instructions and under contract, to provide the service you asked for:
- RevenueCat, Inc., which handles purchases;
- PostHog, Inc., which receives usage stats, only if you turn them on;
- Functional Software, Inc. (Sentry), which receives error reports, only if you turn them on;
- Supabase, Inc., our server for Together, share links and invites;
- 650 Industries, Inc. (Expo), which sends Together notifications to Apple and Google, with nothing you shared in them;
- Cloudflare, Inc., which hosts our websites and public lists, and checks that a person, not a program, sends examples;
- Sanity AS, which delivers Trace's stories and articles;
- Hugging Face, Inc., which hosts the speech model, only if you choose to download it;
- Google LLC, which holds our mailbox.
No one collects consumer health data about you through Trace or this website as you use other apps or websites over time. This website sets no cookies.
Your rights
You can ask us to:
- confirm whether we collect, share or sell your consumer health data;
- let you see it, with the list of every company that has received it and how to contact each;
- delete it, from our systems and theirs;
- withdraw your consent, for usage stats or anything else you agreed to.
How to ask. In Trace, Settings → Delete everything deletes your anonymous ID and everything stored under it on our server, at once, and Settings → Privacy turns usage stats and error reports off. Otherwise write to hello@trace-adhd.com, or by post to Trace ADHD Ltd, 124 City Road, London, EC1V 2NX, United Kingdom. Trace has no accounts, and usage stats carry only a random ID, so we may not be able to tell which data is yours; we'll tell you if so. We answer within 30 days, and if we need longer we tell you why, and take at most 45 days more.
Deletion. What Delete everything removes is gone from our server at once. Usage stats are kept up to 12 months and error reports up to 90 days, then deleted. Your purchase records under the anonymous ID are kept, up to 6 years, as financial records the law requires.
Appeals. If we refuse a request, you can appeal by replying to our answer with the word Appeal. We answer an appeal within 45 days. If we still refuse, you can contact the attorney general of Washington at atg.wa.gov or of Nevada at ag.nv.gov.
We never treat you differently for using these rights.
Changes
The version at the top says which this is. Before a change that matters applies, we say so here and in the app, and we ask for your consent again where the law requires it.