Your signed identity controls access to your Trace Profile, reports, review decisions, and cleanup progress.
Trace AIPrivate by design
Public evidence. Private workspace. Your decisions.
Trace AI is designed for self-review. It does not ask for social passwords, private messages, contact access, or hidden profile data.
Start free scanEvery report conclusion must stay within allowed public evidence. No source means no claim.
Privacy export and deletion remain available without Premium access.
Review account deletion stepsAbout Trace AI and the controller
Trace AI helps you review and improve your own public digital footprint. It processes public identity clues you choose and public web results to prepare source-backed previews, reports, and cleanup guidance. the approved Trace AI operator, at the public controller address supplied for production, is responsible for the processing described here for the territories approved for launch, unless applicable law assigns a different role.
Information we process
You may provide a public name, country, city, role, handles, profile links, self-scan goals, source decisions, cleanup status, edited removal-request drafts, and support or inaccurate-result details. Account services may provide an opaque identifier and limited recovery-account information. Trace AI creates owner-scoped scan status, sanitized source records, report summaries, review and cleanup state, masked exposure metadata, history, entitlement metadata, allowlisted analytics, and minimized diagnostics.
How information is used
Information is used to create and secure your account and Trace Profile, perform scans you request, prepare and save reports, remember your decisions and cleanup progress, verify Premium access, provide exports and deletion, prevent abuse, enforce limits, maintain reliability, answer support requests, and measure approved product events. The applicable legal basis depends on the purpose and territory and may include performance of a contract, consent, legitimate interests, or legal obligation where permitted.
Public sources and AI
Trace AI uses information visible on public web sources and links you choose. It does not request social passwords, private messages, contact access, or hidden-account data and does not bypass access controls. Search and optional AI providers receive minimized inputs needed for a requested scan. AI enrichment receives redacted structured input, must cite supplied evidence, and falls back to deterministic logic when unavailable or unsafe.
Service providers
Depending on the approved release configuration, providers may include Apple or Google for platform identity, distribution, and purchases; GoTrue and PostgreSQL services for identity and owner-scoped product data; infrastructure hosting; Brave Search for public web results; OpenAI for optional redacted enrichment; RevenueCat for entitlement reconciliation; PostHog EU for allowlisted analytics; and Sentry for minimized diagnostics. Only providers enabled for the released environment are part of the live processing chain.
Analytics, advertising, and tracking
Trace AI does not use product data for third-party advertising or cross-app tracking and does not sell personal data to data brokers. Analytics is restricted to approved events and bounded enum or bucket properties. It must not include names, handles, URLs, source snippets, report text, draft text, or sensitive values. Session replay and native autocapture are disabled.
Purchases
Apple and Google process payment credentials for their stores. Trace AI and RevenueCat receive product, entitlement, renewal, and transaction timing metadata needed to provide Premium. Deleting Trace AI data does not cancel a store subscription. Minimal transaction or reconciliation records may remain where required for refunds, fraud prevention, accounting, store obligations, or law.
Retention
Trace AI keeps data only for the approved periods needed for the purposes above, security, dispute handling, store reconciliation, and legal obligations. Eligible deletion removes data from normal product access. Deleted content may remain in protected backups for a limited approved expiry window before removal. Provider settings and operational cleanup jobs must match the published retention commitments.
Your privacy choices
Free privacy/account export, individual eligible scan deletion, owner-account deletion, logout, and management of saved public clues do not require Premium. Deleting Trace AI data does not delete information from third-party public websites. Use the in-app controls or the public account-deletion path. A separate Premium PDF report export does not replace the free privacy export.
Security
Trace AI uses owner-scoped access controls, signed identity for hosted releases, encryption in transit, server-side secret handling, minimized logs, rate limits, provider kill switches, and telemetry scrubbing. No online service can promise absolute security. Do not send passwords, payment details, full reports, or private evidence through support email.
International processing
Some approved providers may process information outside your country. The released service must use the processor agreements, transfer safeguards, hosting regions, and regional rights approved for the territories approved for launch.
Children
Trace AI is not designed for children. You must be at least the minimum age approved for launch and satisfy any higher age or parental-consent rule that applies in your territory. The production minimum age must match the store rating and approved legal position.
Changes and contact
Material changes update the effective date and include notice where required. The monitored privacy contact is supplied by the approved production release configuration.
Pre-release legal preview for product and staging QA. Production publication remains blocked until the reviewed copy digest, runtime disclosure version, and owner/legal approval reference match at build time.