Traceora
This Privacy Policy explains how Traceora collects, uses, stores, shares, and protects account, health-related, and technical information in the app.
Traceora is published by Veybyte Labs and operated by Nexoria Labs LLC, registered in Wyoming, USA. This Policy applies to the Traceora mobile app, backend API, app-specific legal pages, support requests, and related app communications. For app support, contact [email protected]. For privacy or legal requests, contact [email protected].
Traceora is a consumer journaling app, not a healthcare provider, health plan, healthcare clearinghouse, or business associate acting for one. Information you enter into Traceora may not be protected by HIPAA. Other privacy, consumer protection, health breach notification, and data protection laws may still apply.
We may collect technical information needed to operate, secure, debug, and improve Traceora, such as IP address, device or browser metadata, app version, operating system, timestamps, API request metadata, crash or error information, and approximate region inferred from network data. We do not use health-related app data for advertising.
Where GDPR, UK GDPR, Saudi PDPL, or similar laws apply, we process personal information based on one or more legal bases, including your consent for health-related data, performance of the service you request, legitimate interests such as security and service improvement, compliance with legal obligations, and protection of vital interests in limited circumstances.
Traceora may process health-related information you enter or import. Pattern insights are generated from your own logs and are for personal journaling only. When AI providers are used to transform statistical patterns into plain language, we send only the structured pattern information needed to generate the wording, not your full account history unless necessary for the feature. AI output is not medical advice.
Traceora may show ads in the free version of the app using Google AdMob or similar advertising services. We use contextual or non-personalized ads for Traceora and do not use your symptom logs, health imports, notes, pattern insights, or other health-related app data to target ads. Advertising providers may process device identifiers, advertising IDs, IP address, approximate location, app information, ad delivery metadata, ad views or taps, and fraud-prevention signals to deliver ads, measure performance, cap frequency, prevent fraud, and comply with their obligations. You can limit ad tracking or reset advertising identifiers through your device settings where available.
We use service providers to operate Traceora, including Supabase for authentication and database services, Render for backend hosting, Resend for transactional email, Anthropic for limited AI-assisted insight wording, and Apple or Google platform services where you use the app on their devices or stores. These providers may process information only as needed to provide, secure, troubleshoot, or support app services, subject to their contracts, policies, and applicable law.
We do not sell your personal health information. We do not share health-related app data with advertisers. We do not use health-related app data for targeted advertising. We may disclose information to service providers, to comply with law, to protect rights and safety, during a business transfer, with your direction or consent, or as otherwise described in this Policy.
We use safeguards such as authentication, row-level access controls, restricted service credentials, rate limiting, transport encryption, provider access controls, and separation between client and backend secrets. No system is perfectly secure. You are responsible for protecting your device, email account, password, and any exported files you create from Traceora.
We keep account and app data while your account is active or as needed to provide Traceora. If you delete your account, we intend to remove your account and app data from active systems, subject to limited backup, security, fraud-prevention, legal, dispute, accounting, and operational retention. Backup copies may persist for a limited time before deletion or overwrite.
Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, or withdraw consent for certain processing. You can use in-app features to export data or delete your account where available. You may also contact [email protected]. We may need to verify your identity before fulfilling a request.
You can delete your account in the app. Because Traceora's core function requires health-related logs, withdrawing consent for health-related processing may require account deletion. Deleting the app from your device does not automatically delete your server-side account or stored app data.
Optional device health imports require permissions controlled by your device or platform. You can change those permissions in device settings. Exported CSV or PDF files may contain sensitive health-related data; once exported, you are responsible for storing, sharing, or deleting those files securely.
We and our providers may process information in the United States and other countries. Those countries may have privacy laws different from your location. Where required, we use appropriate safeguards for transfers of personal information.
Traceora is not intended for children under 13 and is not directed to children. If your jurisdiction requires a higher minimum age or parental consent for digital services or health-related data, you must meet that requirement before using Traceora. Contact us if you believe a child provided personal information.
We may disclose information if required by law, subpoena, court order, regulator request, app store process, or to protect rights, safety, users, security, and the integrity of Traceora. We will assess such requests under applicable law.
If we discover a security incident involving personal or health-related information, we will assess it and provide notices where required by applicable breach notification laws, including health breach notification rules that may apply to consumer health apps.
We may update this Policy as Traceora, providers, laws, or platform requirements change. Material changes may require you to review and accept updated terms in the app. The effective date below shows when this version became effective.
Support: [email protected]
Privacy/legal: [email protected]
Effective date: June 28, 2026