Last updated: November 4, 2026
These kinds of companies process personal data for MySupplements to run Trace, under contracts that limit them to our instructions. To learn which providers process your data, email support@mysupplementsapp.com. We'll update this page, and tell you in the app, at least 30 days before we add or replace a provider, unless we must act sooner for security or legal reasons.
Cloud hosting provider
What they do for Trace
Our servers, database and meal-photo storage; account sign-in; passing database lookups on
What they receive
Account data, meal photos and descriptions, cup photos while they're analyzed, lookup requests and answers, technical logs
Where
United States (Oregon)
AI model provider
What they do for Trace
AI models that read meal and cup photos and descriptions, research products, including by web search, and translate search words
What they receive
Meal and cup photos, descriptions and corrections; a product's name or barcode, its category and the app's language; unfamiliar search words and their category
Where
United States, and other countries where it operates
Kept by them
Under its own terms: its standard policy deletes what it receives within 30 days, unless needed longer to enforce its usage policies or the law; not used for training. Its web searches go through its own search partner, which receives only the search words
Photo, meal and ranking provider
What they do for Trace
Photo checks, checking spoken or typed meals, food matching, ranking food search results, checking search words for brand names
What they receive
Meal photos and usual-meal thumbnails, meal descriptions, food search words with candidate foods and nutrient summaries, unfamiliar search words and their category
Kept by them
Kept only as long as reasonably necessary, under the provider's privacy policy; not used for training
Subscription management provider
What they do for Trace
Keeps Trace Plus working: checks purchases with the App Store and Google Play, and tells our servers about renewals, cancellations and billing problems
What they receive
A pseudonymous app user ID (an account's identifier, or the number our servers know Trace on a phone by; never a name or email); purchases and renewals from the store, with product, price, currency, store country, trial and renewal dates and cancellation reasons; technical details its software sends, such as platform, app version and language
Kept by them
Under its own terms, while it provides the service
Services you use directly, under their own terms (not our processors):
•
Apple: Sign in with Apple, the App Store (including Trace Plus purchases and payment), App Attest (which confirms the app is genuine when you use AI features without an account), and on-iPhone speech recognition.
•
Google: Sign in with Google (when available), Google Play (including Trace Plus purchases and payment), Google Play Integrity (which confirms the app is genuine when you use AI features without an account on Android), Android speech recognition, and the Android cup tools' Google Play Services for AR (ARCore) and ML Kit. Their models, diagnostics and identifier handling are described in our
Privacy Policy, section 3.7, and the
Google Privacy Policy.
Public databases and product catalogs receive lookup words, barcodes or catalog product identifiers, without account details. Food barcode and supplement catalog requests pass through Trace's servers, which may pass them on to another catalog service; other public database searches may go directly from your phone. See our
Privacy Policy, section 3.2, and Data sources.