Privacy Policy

Our Core Commitment

What you write is not our data asset. TraceIt does not require you to create an app account, and it does not use your personal records for advertising, behavioral analysis, or user profiling. The app clearly displays where your data is stored and lets you choose and manage that location.

Data We Process

To provide journals, notes, bookkeeping, assets, scanning, and library features, the app processes text, tags, dates, financial and asset information that you create or import, as well as photos, videos, audio recordings, files, and recognition results. Free-form content may include personal or sensitive information that you choose to record.

The app also stores settings and state needed to operate its features, such as appearance and language preferences, storage location, reminder times, search indexes, widget summaries, import and export records, and subscription entitlements verified by the App Store. This information is used only to provide the corresponding features.

Storage Location and iCloud Sync

Regular data is stored in the app container on this device or in your private Apple iCloud database. On new installations that support iCloud, the app may use private iCloud by default to enable cross-device sync. The current storage location is clearly shown under Settings — Data & Sync, where you can migrate between local storage and iCloud.

When iCloud mode is enabled, journals, notes, financial records, assets, scans, and eligible attachments are synced through your private iCloud space. This content does not enter a backend operated by TraceIt. Its transmission, storage, and retention are also governed by Apple’s privacy and security practices.

Private vault data always remains separate from regular data. Names, account details, passwords, and notes are encrypted on the device, while decryption credentials are stored securely by the operating system. Private vault data is excluded from regular backups by default and is not synced to iCloud.

Permissions and On-Device Processing

Camera, photo library, and file access are used only when you actively capture media, select an attachment, scan, import, or export. The microphone is used only while recording. Speech-to-text runs only when you initiate it and is restricted to offline, on-device recognition.

Document text recognition is performed on the device. When available, writing prompts, summaries, and tags use system capabilities provided by Apple on the device; otherwise, local rules are used. Suggested results are written to a record only after you confirm them and are not sent to external artificial intelligence services.

Face ID, Touch ID, or device passcode verification is performed by the operating system. The app does not obtain or store biometric data. Notification permission is used only for local reminders that you choose to create.

Apple Services and Network Requests

Cross-device synchronization uses your private iCloud space. Subscription purchases, trial eligibility, and purchase restoration use Apple’s App Store services. Apple processes payments, and the app does not access or store payment card numbers or similar payment credentials.

When you manually check for an update, the app asks Apple’s App Store whether an update is available for the current app and device region. Journals, financial records, attachments, and private vault data are not included in that request.

The app does not integrate third-party advertising, analytics, crash collection, or tracking SDKs, and it does not transmit user content to cloud services operated by TraceIt. Apple services may process necessary account, device, and diagnostic information under Apple’s own privacy policy.

Free Record Allowance and Subscription

When you first use the app, you can successfully create up to seven records for free, including journals, notes, income, or expenses. Editing an existing record does not count again, and the free allowance does not itself initiate a purchase, trial, or charge. After the allowance is used, an active annual subscription is required to create new records. Existing content remains available to view, export, and delete.

The app displays the actual annual subscription price for the country or region of your current Apple ID through the App Store. Eligible new subscribers may receive a seven-day free trial. After the trial, the subscription automatically renews at the annual price displayed on the system purchase screen unless canceled at least 24 hours before the end of the current subscription period.

Apple handles purchases, renewals, trial eligibility, refunds, and purchase restoration. The app reads only App Store-verified product, eligibility, and entitlement status. It does not receive your payment card number, full billing address, or other payment credentials. You can view pricing, cancel renewal, or restore purchases in the App Store subscription settings.

Widgets, Export, and Sharing

Home Screen widgets read only a limited set of On This Day and anniversary summaries stored in a system shared container. This data is marked as privacy-sensitive so the operating system can protect it in situations such as when the device is locked. Widgets do not directly open the complete database.

When you export a full backup, financial spreadsheet, or private-key recovery package, the file is written to a location you choose or passed to an app you select. TraceIt no longer controls that copy after export. Keep it secure and share it only with people or services you trust.

Retention, Deletion, and Privacy Choices

Active content is retained until you delete it. Journals, notes, and financial records moved to the Trash are retained for up to 30 days and can be restored during that period. When the retention period expires or you choose Delete Permanently, the content is removed from the current database and, when iCloud is in use, the deletion is propagated through sync.

You can revoke camera, photo library, microphone, speech recognition, notification, and biometric authentication permissions in system settings. You can also change the storage location, export data, or permanently delete content in the app. Final retention of exported copies, system backups, and iCloud data depends on the locations you choose and your Apple settings.

The app does not maintain a separate account system or store user content on servers operated by TraceIt, so there is no remotely hosted account data that TraceIt can delete on your behalf.

Third Parties and Policy Updates

Except for the Apple system services described above, the app does not provide your user content to third parties. If a future version introduces a new service that processes user data, this policy will be updated first to explain its purpose, consent will be obtained where required, and the service provider will be required to offer protections no less stringent than those described here.

If data handling, the free allowance, or subscription arrangements change materially, the app will update this policy and its last-updated date. The public web version and the in-app version will remain consistent.