Trace ("we," "us," or "our") operates the Trace mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and share your information when you use our App.
By using Trace, you agree to the collection and use of information in accordance with this policy.
a. Account Information
When you create an account, we collect your email address and, if you sign in via Apple or Google, the name and email address associated with that account.
b. Skin Photos and Analysis Data
You may upload or capture photos of your skin through the App. We store these photos and the AI-generated skin analysis results (including skin condition scores, trend assessments, and product-response data) associated with your account.
c. Product Usage Records
We collect information about skincare products you log in the App, including product names and dates of use.
d. Device Information
We automatically collect certain technical information, including your device model, operating system version, and app version, to ensure the App functions correctly.
Trace's face scan feature uses photographs of your face to measure how your skin changes over a 30-day product test. This section explains what face data we collect, how we use it, who we share it with, and how long we keep it.
Photographs of your face that you take inside Trace's "Face Scan" flow. Each scan is a single still image captured by your iPhone's camera while you are in the app. We do not collect video, biometric identifiers (such as Face ID templates), or any face geometry used for identification.
Each face photo is processed by four lightweight machine learning analyzers that run entirely on your device:
The output of each analyzer is a numeric score (0–100) and a visualization overlay. These scores and overlays power the daily and 30-day skin trend charts you see in the app.
We do not share your face photos, the resulting overlays, or the derived scores with any third-party AI service, advertising network, or data broker. None of the analyzers send your face data to an external server for processing. They run on your device.
The only place your face photos and scores leave your device is to your own private cloud account on Supabase, a database and storage service we use as our backend. Supabase stores your data in isolation per user account (no other Trace user can see your data). Supabase is a storage and database service; it does not perform any AI/ML analysis on your face photos.
Face photos and the derived scores remain in your account for as long as your account exists. You can delete individual scans from the History or Past Tests view inside the app. Deleting your account from Settings → Delete Account permanently removes all your face photos and derived scores from both your device and Supabase. We do not retain backups of deleted face data.
Trace performs all skin analysis on your device. Photos and scores leave your device only to sync to your own private Supabase account, never to any AI service or third party.
We use the information we collect to:
We do not sell your personal information or skin photos to any third party.
a. Cloud Storage Provider
Your photos and data are stored securely on Supabase, which runs on AWS infrastructure. Supabase processes data on our behalf and is contractually obligated to protect your information.
b. Sign-In Providers
If you choose to sign in with Apple or Google, those services provide us with your name and email address in accordance with their own privacy policies. We do not receive any other data from these providers.
c. Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
We do not share your skin photos or analysis data with advertisers, data brokers, or any other third parties.
d. App Tracking
We do not track you across third-party apps or websites. We do not use your data for targeted advertising or share it with data brokers.
Your data, including skin photos, is stored on Supabase, which runs on AWS infrastructure located in the United States. We implement industry-standard security measures to protect your information from unauthorized access, alteration, or disclosure.
We retain your data for as long as your account is active. If you delete your account, we will delete your photos and personal data within 30 days.
Skin photos and AI-generated analysis results (including skin condition scores, trend assessments, and product-response data) may constitute health-adjacent or sensitive personal information. We treat this data with heightened care:
You have the right to:
To exercise any of these rights, contact us at support@traceshq.com.
California residents: Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your data. We do not sell personal information.
Trace is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@traceshq.com and we will delete it promptly.
The App may reference third-party products or services. We are not responsible for the privacy practices of those third parties.
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date at the top of this policy. Continued use of the App after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy, please contact us:
Email: support@traceshq.com