Effective date: December 6, 2026

This summary, like the rest of this policy, describes how Trace works today. We may change our practices; before a change takes effect, we'll update this policy and tell you (section 12).

The rest of this policy gives the details. If you live in Washington or Nevada in the United States, also read our Consumer Health Data Privacy Policy.

Trace is provided by MySupplements LLC, 108-14 72nd Ave, Forest Hills, NY 11375, USA ("MySupplements", "we", "us"). We are the controller of the personal data described here.

Trace is offered in the United States, Canada, Australia, New Zealand, Japan, Singapore and Hong Kong. If we offer it in other countries, we'll update this policy as their law requires. This policy covers the Trace app, its website (trace-api.mysupplementsapp.com/legal) and the services that support them. It does not cover services we don't control, such as the app stores, Apple or Google sign-in, or the public databases Trace looks things up in. Their own policies apply.

What you record in Trace is health information. It includes:

Your profile can also hold a name for Trace to call you, if you give one.

It is stored on your device. Your device's own backup may also include it (iCloud on iPhone, Google backup on Android), under your device settings. We don't currently receive this journal, except for the pieces a feature sends (3.3), what you choose to send us, such as feedback (3.10), what you share with our team if you turn that on (3.15), and what your phone shares if you give our team a code (3.17).

Food searches run on your phone, in a copy of the USDA's food database built into Trace.

Food barcode and supplement catalog lookups go through Trace's servers on iPhone and Android, without an account. Our servers look the item up in food databases and product catalogs, such as Open Food Facts and the MySupplements catalog, and may pass a catalog request on to another catalog service. They send the search words, barcode or catalog product identifier needed, without your account details, and these lookups don't send your photos or journal to AI. Our servers may keep and reuse a lookup's answer for a limited time when the same lookup comes again. Technical information used to protect the service is described in section 3.7.

When you type a search, Trace may also send unfamiliar Korean or Japanese words, with the kind of item you're looking for, to our AI services, which check whether the words are a brand name and translate them into English search terms (section 3.3).

Other supplement and medication searches may send search words directly to public services such as the U.S. National Library of Medicine and National Institutes of Health. Like any website, a service your phone contacts directly can see your device's IP address. Opening a result's image or source link may also contact the site that hosts it. Our Data sources page lists the public databases Trace uses.

When you use these features, Trace sends what that feature needs to our servers, and our servers send it on to the service providers that process it for us (section 6). You agree to cloud AI analysis when you continue past setup's "Your data is yours" page, which says under its Continue button that continuing accepts our Terms of Service and this policy, and that AI providers may analyze what you submit. Nothing goes to AI before that, and the app tells you what each feature sends, for example in its first-use guide. You can use these features with an account or, on iPhone and Android, without one, as described below. The account-free database lookups in section 3.2 are separate from these AI-assisted features. Currently, these features are:

What our servers keep. Our servers keep what your phone sends to Trace's AI features, such as meal and cup photos and the words you type or say, with Trace's answers and your fixes, as long as needed to give you the result. We may also keep it after that, for a period we set and can change, which may be none, as needed to keep Trace secure, prevent abuse, find and fix problems, such as a phone that seems to get wrong answers, and meet legal obligations. When that period ends, we delete it automatically. Access to it is limited to the team members who need it, currently only the person who runs Trace, and each time it's opened, that's recorded. Your journal isn't part of it: it stays on your phone. We keep and open each request on its own, and we don't put what we keep together into your journal or a record of your days; our team sees your journal only if you give us a code for help (section 3.17). We don't use what we keep to build a profile of you, to train AI models or for ads. Deleting your account, or asking us to forget your support ID (section 3.13), deletes it at once. If you turn on sharing with our team, it's kept as section 3.15 describes. How long our AI providers keep what they receive is on the Service providers page.

Lock Screen results on iPhone. If you analyze a meal photo and leave Trace before it's done, your iPhone may give our servers its Lock Screen card's push token and how the card looks. When the analysis finishes, our servers may send the meal's name and calories to that card through Apple's push notification service, and then forget the token. If you come back to Trace first, nothing is sent this way.

When you ask Trace to research a product, our servers keep your request and its result in memory, to return the answer and to reuse it for a short time, including before you confirm it, and may keep it as described above. Facts you confirm may be added to Trace's product catalog, without anything that identifies you.

The phone check, signed in or not. To keep Trace's AI features fair and to stop automated use, your phone may prove to our servers that its requests come from the genuine Trace app, whether or not you're signed in. Your phone makes a key for Trace in its secure hardware. On iPhone, Apple's App Attest confirms the key belongs to a genuine copy of the app. On Android, Google Play Integrity confirms that a genuine copy of Trace from Google Play is running on a device that passes Google's checks; Google processes that check under its own terms. Our servers receive an identifier or the public part of the key, with Apple's confirmation or Google's verdict, and give your phone a short-lived pass. Your phone may get the pass when Trace starts and renew it while you use AI features; on Android, renewing it repeats Google's check.

Without an account. The same pass also works as a guest pass, so your phone can use AI features without signing in.

Usage limits, for everyone. Trace's AI features have daily and monthly limits, with or without an account and with or without Trace Plus (Terms of Service, section 9). With every AI request, the app sends your phone's time-zone offset from UTC (how many hours it is ahead of or behind), so a daily limit follows your own day. Our servers use the offset for that count, in memory, and may also stop a phone or account that uses far more than its daily allowance within 24 hours. If a phone or account reaches a limit, our database may keep, for a limited time, the days it did and which limit, under the same pseudonymous number and with no content, so we can spot automated use.

If you create an account, we process:

Accounts are managed by our cloud hosting provider's sign-in service. If you have Trace Plus, its records are described in section 3.8.

With "Say it", your phone turns speech into text. On iPhone, this happens on the device. On Android, your phone's speech service, such as Google's, may process the audio under its own terms. Trace receives the text, not the audio.

You can turn each one off in your device settings.

Our servers can record technical information needed to run and protect the service, such as IP address, time, the feature used and the request, app version, device type, status and errors. When we check the quality of meal analysis, these records can also include a meal's name and calorie summary. They can include a record of each AI request without its content, such as when it was made, which feature it was for, which service answered, how it ended, how long it took and what it cost. We keep technical records for a limited time, as long as we need them for these purposes, for example to investigate a security incident or abuse, or as the law requires, and then delete them. What phones send to Trace's AI features is kept as section 3.3 describes.

Android automatic cup tools. Cup fitting and photo cut-outs use Google's ARCore and ML Kit. ML Kit processes images on the phone; it does not send those images or cut-outs to Google. Google services may download models and send identifiers and app/device, usage and performance diagnostics to Google. ARCore may use a Google account identifier or a device identifier for its service analytics. These services operate under the Google Privacy Policy. Cloud AI cup sizing is a separate photo transfer, described in section 3.3.

Trace Plus is a subscription you buy in the app through the App Store or Google Play. The store handles payment: we don't receive your card, bank or billing details.

We link the ID to a name or email address when you give us one, for example a first name with feedback (section 3.10), what a sign-in service shares (section 3.4) or the address you write to us from (section 3.9).

You manage or cancel Plus in your App Store or Google Play subscriptions. Refunds are handled by the store.

If you write to us, we keep your message and our reply for up to 2 years, to help you and to keep records.

In Settings › About › Send feedback, you can tell us what you think. You choose what to send:

With it, the app sends technical details, such as its version, the platform, the app's language and the screen you sent it from.

Your phone's details, unless you turn off Include these details. The page lists them before you send, and they help us find a problem: your phone's model and system version, where Trace came from (such as the App Store, TestFlight or Google Play), your language and region, text size, whether dark mode and a screen reader are on, free storage, and the kind of connection, such as Wi-Fi. They currently include no identifier, carrier, battery level, location or your phone's name. Text size and the screen reader can hint at a disability, so they go only in feedback you see and choose to send, and we use them to find and fix problems, not to infer anything about you. With the switch off, only the technical details above go.

Feedback arrives under your support ID (section 3.8), so we can see it beside the other records our team keeps for that ID (section 3.13) and reply to you in Trace (section 3.11). If Trace can't confirm with our servers that it's the genuine app at that moment (section 3.3), your feedback arrives without an ID, and we can't reply to it. To keep that kind of feedback from being abused, our servers limit it for each internet (IP) address, counting in memory under a scrambled form of the address.

What you write or show can include health information, such as a food, a supplement or a medication. Send only what you're comfortable sharing. We use feedback to answer you, to fix problems you tell us about and to improve Trace. Your stars don't decide who is asked to rate Trace in the App Store or Google Play.

A screenshot is sent if you add one: you pick it, and the app reminds you that it may show what you eat or take. We keep it for up to 30 days, and access to it is limited to the team members who need it.

If you say it's OK to quote you, we may show your words, unedited, with your stars and your first name if you gave one, among the reviews on the Trace Plus offer in the app, where anyone using Trace can read them. We record the date and that you said OK in the app. We choose which feedback to show. To take back your OK, write to us (section 13), and we'll remove your quote from the offer; phones stop showing it the next time they check for Trace's updates.

We keep feedback, and what the app sends with it, for up to 2 years, as we keep messages you send us (section 3.9).

When we reply to your feedback, the reply waits on our servers under your support ID. Trace picks it up the next time it checks our servers for what's new, as it does for notices and the Trace Plus offer, shows it to you, and tells our servers that it was shown. A reply waits for a limited time, currently up to 30 days. We reply in Trace, so you don't need to give us an email address. We keep our replies for up to 2 years, as we keep feedback.

Trace may ask you: "How did you find Trace?" Answering is optional, and you can skip it. You can pick an answer, such as App Store search, a friend or family member, social media, or a pharmacist or doctor, and add a few words. Your answer arrives under your support ID.

This isn't advertising tracking. Advertising tracking follows you across other companies' apps and websites, usually with an advertising identifier, to choose or measure the ads you see. Trace doesn't currently do that, include advertising SDKs or read your advertising identifier. What we learn here is how you arrived, which we use to understand which ways of finding Trace work and to thank people who share it. The App Store and Google Play also give us counts, such as how many people came from a search, that identify no one.

Our team uses a private website to look after the people who use Trace. For each support ID, it can show:

It doesn't show what you log in Trace, unless you show it to us, for example in a screenshot, turn on sharing with our team (section 3.15), or give us a code for help (section 3.17). While we keep it, it can also show what your phone sent to Trace's AI features (section 3.3), which currently only the person who runs Trace can open. Access to a person's records, and more narrowly to screenshots, is limited to team members whose role needs it. We use these records to answer you, to thank you, to fix what you tell us about and to understand how Trace is doing. Your country also tells us which privacy law applies when you write to us.

When the website counts people, for example how many kept using Trace after a month or how people found it, it shows any group smaller than 5 as "fewer than 5", so a number can't point to anyone. Some numbers are kept with no ID at all, such as how many phones checked for Trace's updates each day, and in which language.

If your Plus moves from one support ID to another, for example when you sign in after using Trace without an account, these records move with it.

To have these records forgotten, write to us with your support ID (section 3.8). We'll delete the records our team and servers keep under it, such as your feedback and its screenshot, our replies, how you found Trace, our tags and notes, what you shared with our team (section 3.15), what your phone shared for help (section 3.17), the safety signals kept under a code made from your ID (section 3.16) and what the website keeps from the subscription management provider. We keep a scrambled form of the ID, which lets us recognize it so the records aren't rebuilt. Deleting your account does the same for your account's ID. The Trace Plus records in section 3.8 are kept as section 8 describes.

We don't receive your payment card or bank details: the App Store or Google Play handles payment. We don't collect your precise location: apart from the internet address any connection carries (section 3.7) and your phone's time-zone offset (section 3.3), the location we see is no more precise than a country (sections 3.8 and 3.13). We don't collect your contacts or advertising identifier. We don't read data from Apple Health or Health Connect. We don't use advertising SDKs or track you across other companies' apps or websites for advertising; how you found Trace (section 3.12) is something different. The Google service diagnostics used by Android's cup tools are described in section 3.7. This section describes our current practice; section 12 explains how it can change.

In Settings › Your data › Share with Trace's team, you can let our team see what Trace's AI sees, so we can find where Trace gets things wrong and fix it. It's off unless you turn it on, and the switch is all it takes.

Turn it on only if you're comfortable with our team seeing what you share. Everything else in Trace works the same either way.

To protect Trace and the people who use it, for example against scripts, automated use and copies of the app, to keep fair use fair, and to compare versions of a screen, Trace records how it's used:

A scrambled code, not your ID. These signals are kept under a code our servers make from your account's or phone's ID with a secret key. Only the part of our servers that answers the app uses the key: to file each signal under its code, to apply a slow-down or block, and to delete the signals when you ask. Our team's website, our statistics and the service provider that checks the numbers work without the key or your IDs, so they can't connect these signals to your other records. We don't use the signals to recognize your phone after Trace is installed again.

How long: the signals and what the checks found, up to 30 days; the record of a slow-down or block, until 30 days after it's lifted; totals with no code, as long as they're useful. Deleting your account, or asking us to forget your support ID (section 3.13), deletes the signals under its code too.

These signals protect Trace and everyone who uses it, so there's no switch for them in the app. We don't use them for ads, sell them or share them with other companies, other than the service providers that work for us (section 6).

If you ask us for help and our team needs to see what happened in your Trace, we can ask your phone to share. Nothing is shared until you give us the code your phone shows.

Give the code only if you asked us for help and you're comfortable with our team seeing what Trace keeps on your phone. Everything else in Trace works the same either way.

Your journal and Trace's on-device features send nothing, unless you give our team a code so we can help you (section 3.17). What the lookups and AI features send is described in sections 3.2 and 3.3, and each AI feature also says what it sends in its first-use guide.

You don't have to give us personal data. Your journal works on your phone, and the features that need data send it when you use them. Like any app that connects to the internet, Trace also sends technical information when it checks our servers for what's new (section 3.7), and safety signals while you use it (section 3.16).

Some features use AI models run by our service providers. They return suggestions, which you review and can correct before saving. We don't make decisions with legal or similarly significant effects about you by automated means. Currently, the one automatic step is the short slow-down in section 3.16, and a person decides any block. To have a person look at a slow-down or a block, write to support@tracewhatyoutake.com.

Our AI providers' current terms don't allow them to use your content to train their models. They may keep it for a short time, as our Service providers page describes. What you share with our team (sections 3.15 and 3.17) isn't used to train AI models either. When you share for help, an AI service may also help our team understand what you shared, for example by sorting your fixes by kind of problem.

We are based in the United States, and our servers are in the United States (Oregon). Our service providers may process data in other countries, as described on the Service providers page.

If you live outside the United States, what Trace sends from your phone goes to the United States, where it's processed and kept as this policy describes. The United States has no single national privacy law. Protection comes from federal laws, such as the Federal Trade Commission Act, which forbids unfair and deceptive practices, and from state laws, such as California's. Courts and government authorities in the United States, and in the other countries where our providers work, can require access to data held there under their own laws. We protect your data as this policy describes wherever you live, and our service providers handle it as section 6 describes.

By email to support@mysupplementsapp.com, wherever you live, you can ask:

Requests are free, unless the law allows a fee, for example for requests that are clearly unfounded or excessive. We'll verify your request, usually by asking you to confirm from your account's email or, without an account, by the support ID shown in Settings › Trace Plus. We'll answer as soon as we can, within the time your law sets: for example, 20 working days in New Zealand, 30 days in Canada and Australia, and 45 days under U.S. state laws. We won't treat you differently for using your rights. If you aren't satisfied with our answer, you can complain to the privacy authority where you live (sections 9.1 and 9.2).

Depending on your state, including California, Colorado, Connecticut, Virginia, Texas and others, you have the right to know, access, correct and delete your personal data, to get a copy, and to appeal a decision about your request by emailing us with "Appeal" in the subject line. If we deny an appeal, you can contact your state attorney general. You can use an authorized agent.

We don't sell or share personal data, and we use sensitive personal information (health information and account credentials) only to provide the features you request and for the other purposes the law permits.

Washington and Nevada residents: see our Consumer Health Data Privacy Policy.

Canada. You can withdraw your consent at any time; some features then stop working. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). In Quebec, our person in charge of the protection of personal information is Moon Kim (section 1). You can also ask us for your personal data in a structured, commonly used technological format, and complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

Australia. Our service providers receive personal information in the United States and in the other countries on our Service providers page, and we stay accountable for how they handle it. Please complain to us first. If you aren't satisfied with our answer within 30 days, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

New Zealand. If we don't correct your personal information as you ask, you can ask us to attach your statement of the correction to it. You can complain to the Privacy Commissioner (privacy.org.nz).

Japan. This is the information Japan's Act on the Protection of Personal Information asks us to make available:

Singapore. Our data protection officer is Moon Kim (section 1). You can complain to the Personal Data Protection Commission (pdpc.gov.sg).

Hong Kong. You can ask to access and correct your personal data under the Personal Data (Privacy) Ordinance by writing to our privacy officer (section 1), and complain to the Privacy Commissioner for Personal Data (pcpd.org.hk).

Trace is not for people under 18, and we don't knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we'll delete it.

We use safeguards suited to the data, for example:

Your journal on the phone is protected by your device's security.

No system is perfectly secure. If a breach affects your personal data, we'll notify you and the authorities as the law requires.

What Trace collects, and how we use it, may change as Trace changes, including what "In short" describes. Before a change takes effect, we'll update this policy, post the new version with its effective date and tell you, for example in the app, normally at least 30 days ahead for a material change. Where the law requires it, we'll ask for your consent first, including before we use data we already have in a new way. When a new feature sends personal data in a new way, we'll tell you what it sends, for example in the app before you first use it.

support@mysupplementsapp.com · MySupplements LLC, 108-14 72nd Ave, Forest Hills, NY 11375, USA