Trace

Privacy notice

Effective 1 October 2026

A starting point, not legal advice. Review this against your own jurisdiction before relying on it. Edit it under Platform → Legal.

Where your data lives

This is a self-hosted installation. Your photographs and records are stored on infrastructure controlled by whoever operates this install — not by the authors of the software. Ask them where that is if you need to know.

What is collected

Account data. Name, email address, phone number and job title, as supplied at sign-up or by whoever invited you.

Content. Photographs, video, captions, notes, checklists, tasks and reports you create.

Capture metadata. For each photograph: the time it was taken, and — where the device provides one and location permission is granted — the coordinates and accuracy of the fix. This is the mechanism by which photographs are filed to the correct job.

Device data. Device name, platform, operating system version and application version, so the office can see which devices still hold unsynchronised work.

Usage data. Sign-in times and last-seen timestamps.

Location

Location is used for one purpose: matching a photograph to a job. It is recorded at the moment of capture and stored with the photograph. It is not tracked continuously, and the application does not record location when it is not capturing.

Denying location permission does not prevent capture. Photographs are simply filed by hand instead.

Third parties

A team may optionally configure an AI provider using its own credentials. When it does, only text metadata — captions, tags, timestamps, coordinates and job names — is sent to that provider. Photographs are never transmitted. Where a local model is configured, nothing leaves the operator's own infrastructure.

No analytics, advertising or tracking service receives your data.

Retention

Content is retained until you delete it. Deleted photographs are soft-deleted and recoverable for a period. Generated export files are deleted after seven days. Webhook delivery history is retained for thirty days.

Your rights

Depending on where you are, you may have rights of access, correction, deletion, restriction and portability. Every dataset in the application can be exported as CSV from Settings → Exports; for anything further, contact the operator of this installation.