Requests from law enforcement

For Trace: ADHD Diary & Tracker. Version 2, in force from October 23, 2026.

What we hold

Very little. Everything a person enters in Trace is kept on their own phone, encrypted with a key that never leaves it. We never receive it, so we can't give it to anyone, and we can't open a diary on someone's phone. Trace has no accounts, so we hold no names, email addresses or phone numbers for the people who use it.

What we may hold:

• an anonymous ID a phone made, only if its owner used Together, shared a report as a link or asked someone for examples, with what they shared that way. That is encrypted on their phone with keys we never receive, so we can't read it. We can see only when each item was made, how big it is, when it expires and how many times a shared link was opened;
• another anonymous ID a phone made, and our payment provider's record of the purchases under it;
• usage stats and error reports, only if a person turned them on, linked to a random ID rather than to them;
• emails people sent to hello@trace-adhd.com.

Our privacy policy says what each is and how long we keep it.

What we need before we disclose anything

• Valid legal process. A subpoena, court order or search warrant that is valid where it was issued and binds us. We don't answer informal requests, and we may ask a court to set aside a request we think is too broad or unlawful.
• Sent to us in writing, at hello@trace-adhd.com, saying exactly what is sought. Because we hold no names or contact details, we may not be able to find anything about a named person.
• Only what the process requires. We disclose the least data that meets it. We can't decrypt what people share, and we won't try.

We are a company registered in England and Wales. A request from outside the UK may need to come through the procedures between governments for such requests.

We tell the person first, where we can

If we can reach the person, we tell them before we disclose anything, so they can respond. Usually we can't, because we hold no contact details for the people who use Trace. We don't tell them only where a law or a court order forbids it, or in an emergency below; then we tell them as soon as we are allowed, if we can.

Emergencies

If someone's life is in danger, or they face serious physical injury, and we believe disclosing what we hold could prevent it, we may do so without legal process, telling the person afterward if we can.

Reproductive and sexual health

Anything a person records in Trace stays on their phone, and we never receive it. We won't help any investigation into reproductive or sexual health care that was lawful where it was given, unless a court order we must obey requires it.

Changes

The version at the top says which this is. A new version applies from the day it is published here.