Privacy Policy

1. Introduction

Trace (“we,” “our,” or “us”) is operated by TKM Ventures. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Trace mobile application and the website at trace.xyz (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Phone number (for authentication via OTP), username, display name, bio, and location (optional).
• Vehicle Information: Make, model, year, color, state, and license plate of vehicles you register.
• Messages: Content of messages sent between users through the Service.
• Photos: Vehicle photos you upload to your profile.
• Maintenance Records: Service history entries including dates, costs, mileage, and notes.

2.2 Information Collected Automatically

• Location Data: GPS coordinates when you use Trace Locate to save your parking location. Location data is stored locally on your device and is not transmitted to our servers unless you explicitly share it.
• Motion Data: Activity recognition data (driving, walking, stationary) used by Trace Locate to detect when you park and start driving. This data is processed on-device and is not stored or transmitted.
• Device Information: Device type, operating system version, and app version for diagnostics.
• Usage Data: Feature usage patterns, crash reports, and performance metrics.

2.3 Information from Third Parties

We do not purchase or receive personal information from third-party data brokers. If you sign in via Apple Sign In, we receive only the information you authorize Apple to share.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Enable messaging between car owners via Trace Tags
• Save and display your parking location (Trace Locate)
• Track vehicle maintenance records and send reminders
• Process subscription payments (via Apple's App Store)
• Send push notifications related to messages, parking, and account activity
• Detect and prevent fraud, abuse, and policy violations
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• With Other Users: Your username, display name, bio, location, and vehicle information are visible to other users who view your profile or scan your Trace Tag. Your phone number is never shared.
• Service Providers: We use Supabase for backend infrastructure and data storage, and Apple for payment processing. These providers process data on our behalf under contractual obligations.
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or government request.
• Safety: We may disclose information to protect the safety of any person or to prevent illegal activity.

5. Data Storage and Security

Your data is stored on secure servers managed by Supabase (hosted on AWS). We implement industry-standard security measures including:

• Row-Level Security (RLS) policies ensuring users can only access their own data
• Encrypted data transmission (TLS/SSL)
• Phone-based authentication with one-time passwords
• No storage of plaintext passwords

Parking location data from Trace Locate is stored locally on your device using encrypted storage and is not transmitted to our servers.

6. Your Rights and Choices

• Access and Update: You can view and update your profile information at any time within the app.
• Delete Your Account: You may request deletion of your account and all associated data by contacting us at info@trace.xyz.
• Location Permissions: You can revoke location access at any time in your device Settings. Trace Locate will not function without location permission.
• Motion Permissions: You can revoke motion data access in your device Settings. Automatic parking detection will not function without this permission.
• Notifications: You can disable push notifications in your device Settings at any time.
• Do Not Track: We do not track you across third-party websites or apps.

7. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: (a) request disclosure of the categories and specific pieces of personal information we have collected, (b) request deletion of your personal information, and (c) opt out of the sale of personal information. We do not sell personal information. To exercise these rights, contact us at info@trace.xyz.

9. International Users

The Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or on our website. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

TKM Ventures
Email: info@trace.xyz
Website: trace.xyz