Private by design

Your diary never has to leave your phone.

Trace was built so the most personal things you write stay with you. Here’s exactly what that means, in plain words.

What we can see, and what we can’t.

Only on your phone

  • Every log, rating, note and brain dump
  • Your medicines, doses and reminders
  • Your patterns, Reviews and reports
  • Voice notes, turned into text on your phone
  • The key that unlocks all of it

What can reach us

  • Together shares, report links and invites — encrypted so only the people you chose can read them
  • An anonymous ID, only once you use one of those
  • Usage stats and error reports, only if you turn them on, with nothing from your diary
  • Purchases, through the App Store or Google Play

What Trace never does

  • Ask you to make an account
  • Show ads or use an advertising ID
  • Sell your data
  • Send your diary to an AI service
  • Set cookies on this website

When you share, we pass it on without reading it.

Together, report links and invites are locked on your phone before they’re sent. Our server only ever holds the locked version. The key travels separately, from you to them.

Your phoneLocks what you chose to share, with a key only you and they have.
Trace’s serverHolds the locked copy. It can’t open it, and removes it when you stop sharing or it expires.
Their phone or browserOpens it with the key you gave them.

You’re in control.

Everything Trace keeps, you can lock, take with you or delete.

App lock

Your face, fingerprint or passcode.

Encrypted backup

Locked with a passphrase only you know.

Export

Take your whole diary with you, any time.

Delete everything

Clears your phone and anything Trace holds for you on our server.

The full details

Our privacy policy starts with a short version, then covers every service we use, what it receives and why.