Trace ("we," "us," or "our") operates the Trace mobile application (the "App"). This Privacy Policy explains how we collect, use, store, and share your information when you use our App.
By using Trace, you agree to the collection and use of information in accordance with this policy.
a. Account Information
When you create an account, we collect your email address and, if you sign in via Apple or Google, the name and email address associated with that account.
b. Skin Photos and Analysis Data
You may upload or capture photos of your skin through the App. We store these photos and the on-device-generated skin analysis results (including skin condition scores, trend assessments, and product-response data) associated with your account.
c. Product Usage Records
We collect information about skincare products you log in the App, including product names and dates of use. When you add a product by taking a photo of it, that photo is sent to our servers to identify the product, and we retain a copy of it. These photos show the product packaging and may also capture your surroundings or parts of your body if they are in frame. You can add products by typing the name instead, in which case no photo is taken or stored.
d. Device Information
We automatically collect certain technical information, including your device model, operating system version, and app version, to ensure the App functions correctly.
Trace's face scan feature uses photographs of your face to measure how your skin changes over a 30-day product test. This section explains what face data we collect, how we use it, who we share it with, and how long we keep it.
Photographs of your face that you take inside Trace's "Face Scan" flow. Each scan is a single still image captured by your iPhone's camera while you are in the app. We do not collect video, biometric identifiers (such as Face ID templates), or any face geometry used for identification.
Your four skin scores come from lightweight machine learning analyzers that run entirely on your device. Producing these numbers never sends your photo anywhere:
The output of each analyzer is a numeric score (0–100) and a visualization overlay. These scores and overlays power the daily and 30-day skin trend charts you see in the app.
We do not sell your photos or scores, and we do not share them with advertising networks or data brokers.
Your four skin scores are measured on your device. The analyzers listed above run inside the app, so producing your Acne, Redness, Pores and Spots numbers does not send your photo anywhere.
Some optional AI features work by sending content to third-party AI service providers that process it on our behalf. These run only when you choose to use the feature, and they return text only. They are the AI product recommendations in the Routine tab, product photo recognition when you add a product, Buddy describing your latest photo when you ask, and turning a spoken or typed journal entry into tags. Depending on the feature, what is sent is a face photo, a photo of a product label, or the text of your entry. If you do not use these features, none of this happens; the rest of the app, including your four scores and your trend charts, works without them.
International transfer. Our AI service providers operate outside the EEA and the UK. Using those optional features therefore involves transferring the content described above internationally. Their handling of it is governed by their own published terms.
Your photos and scores are also stored in your own account on Supabase, the database and storage service we use as our backend. Supabase isolates data per user account and does not perform AI analysis on your photos.
Face photos and the derived scores remain in your account for as long as your account exists. You can delete individual scans from the History or Past Tests view inside the app.
Deleting your account from Settings → Delete Account permanently deletes your account and the information that identifies you, including your login, email address, and profile. Your photos and derived scores are kept in de-identified form: the link between that data and your identity is severed, and we retain no means of re-associating it with you. We keep this de-identified data to improve the accuracy of our skin measurement. We do not retain backups of the identifying information we delete.
One limitation you should know: photos stored before this policy took effect are filed under a folder named with your internal account identifier, and that identifier remains in the storage path after deletion even though the account itself is gone. We are migrating those files to fully de-identified paths.
Your four skin scores are measured on your device. Your photos are stored in your own Supabase account. Some optional AI features send content to third-party AI service providers, and only when you use them. We do not sell your data and do not share it with advertisers or data brokers.
We use the information we collect to:
We do not sell your personal information or skin photos to any third party.
a. Cloud Storage Provider
Your photos and data are stored securely on Supabase, which runs on AWS infrastructure. Supabase processes data on our behalf and is contractually obligated to protect your information.
b. Sign-In Providers
If you choose to sign in with Apple or Google, those services provide us with your name and email address in accordance with their own privacy policies. We do not receive any other data from these providers.
c. Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
We do not share your skin photos or analysis data with advertisers, data brokers, or any other third parties.
d. App Tracking
We do not track you across third-party apps or websites. We do not use your data for targeted advertising or share it with data brokers.
Your data, including skin photos, is stored on Supabase, which runs on AWS infrastructure located in the United States. We implement industry-standard security measures to protect your information from unauthorized access, alteration, or disclosure.
We retain your data for as long as your account is active. If you delete your account from Settings → Delete Account, we immediately and permanently delete your account and your personal data, including your email address and profile. Photos, skin scores, and product records are retained in de-identified form, unlinked from your identity, and used only to improve our skin measurement. We do not retain backups of the personal data we delete.
Skin photos and on-device-generated analysis results (including skin condition scores, trend assessments, and product-response data) may constitute health-adjacent or sensitive personal information. We treat this data with heightened care:
You have the right to:
To exercise any of these rights, contact us at support@traceshq.com.
California residents: Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your data. We do not sell personal information.
Trace is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@traceshq.com and we will delete it promptly.
The App may reference third-party products or services. We are not responsible for the privacy practices of those third parties.
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date at the top of this policy. Continued use of the App after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy, please contact us:
Email: support@traceshq.com