Privacy Policy

1. Data we collect

We collect different types of information depending on how you use Traccia:

1.1 Information you provide to us

• Account information: name, email address, and password when you create an account.
• User content: projects, entries ("Steps"), photos, videos, text, moods, and milestones you publish in the app.
• Communications: messages you send us by email or through the support form.

1.2 Information we collect automatically

• Usage data: how you interact with the app, which features you use, and how often.
• Device information: device model, operating system, app version, and unique device identifiers.
• Log data: IP address, access date and time, pages visited, and app errors.
• Camera and photo information: we access your camera and photo gallery only when you explicitly authorize it to upload content to your projects.

1.3 Information from third parties

If you sign in through a third-party identity provider (such as Apple Sign-In or Google), we receive basic profile information from that provider based on the permissions you grant.

2. How we use your information

We use the information collected for the following purposes:

• Providing the service: creating and managing your account, storing your projects and entries, generating your timeline.
• Improving the app: analyzing usage patterns to optimize features and user experience.
• Communications: sending you service-related notifications, important updates, and responses to your support requests.
• Security: detecting and preventing fraud, abuse, and unauthorized activity.
• Legal compliance: fulfilling applicable legal obligations.

We do not sell your personal information to third parties.

3. Who we share your information with

We may share your information in the following circumstances:

3.1 Service providers

We work with trusted third parties that help us operate Traccia. These providers only access your information to provide specific services to us and are subject to confidentiality obligations:

• Supabase: database, authentication, and multimedia file storage.
• Expo / EAS: mobile app building and distribution.
• Analytics providers: to understand anonymized usage patterns.

3.2 Public content

If you set a project as Public, its content (including photos, videos, and entries) will be visible to anyone. You can change your project's privacy at any time from the project settings.

3.3 Legal requirements

We may disclose your information if required to do so by law, court order, or valid government request.

3.4 Business transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4. Storage and security

Your information is stored on secure servers managed by Supabase. We implement appropriate technical and organizational measures to protect your information against unauthorized access, loss, or alteration, including:

• Encryption of data in transit (TLS/HTTPS).
• Encryption of data at rest.
• Secure authentication using password hashing.
• Role-based access control.

We retain your personal information while your account is active or as needed to provide the service. If you delete your account, we will delete or anonymize your personal information within 30 days, unless the law requires us to retain it for longer.

5. Your rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Deletion: request the deletion of your account and personal data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to the processing of your data in certain circumstances.
• Withdraw consent: when processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@tracciahq.com. We will respond within 30 days.

Account and data deletion

You can delete your account directly from the app under Settings > Account > Delete account. You can also request deletion by email at support@tracciahq.com.

6. Minors

Traccia is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, contact us at privacy@tracciahq.com and we will take steps to delete that information.

For users in the European Economic Area, the minimum age may be 16 years depending on applicable local law.

7. Cookies and similar technologies

The Traccia mobile app does not use cookies. However, our website may use essential technical cookies for its proper functioning. We do not use third-party tracking or advertising cookies.

8. Changes to this policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you through the app or by email at least 30 days before the changes take effect. Continued use of Traccia after the effective date constitutes your acceptance of the changes.

9. Contact

If you have questions, concerns, or requests related to this Privacy Policy, you can contact us: