TraceCosts Privacy Policy
First and most important: we do not sell your data. Ever. TraceCosts is a personal finance app that works on your device first; your numbers are yours.
1. What data the app handles
Data you enter: transactions (amounts, categories, notes, merchants, tags), accounts, budgets, savings goals, recurring rules, receipt photos, and preferences. They are stored in a local database on your phone.
Account data (optional): if you create an account for backup, we store your email address and a user identifier. Your password is handled by our authentication provider (Supabase Auth) with secure hashing; we never see it or store it in plain text.
Usage analytics (anonymous): we measure product events (e.g. "a transaction was created", "a screen was opened") with an anonymous identifier. Events never include amounts, notes, merchants, names, emails, or balances; this sanitization is built into the app's own code.
2. Where your data lives
The app is offline-first: everything works without a connection and your data lives on your device. If you turn on backup, it syncs encrypted in transit (TLS) to our database on Supabase, where every row is protected by per-user isolation (Row Level Security): neither other users nor third-party applications can read your records. Receipt photos are backed up to private per-user storage; your goal photos never leave your phone.
3. Who it is shared with
No one, for commercial purposes. We only use infrastructure providers to operate the service: Supabase (database, authentication, and backup storage) and a product analytics service that receives only the anonymous events described above. There is no advertising and there are no data brokers.
4. Your rights and controls
Right from the app, no need to contact support:
Export everything: Settings → Your data → "Export ALL my data" generates a complete JSON file with transactions, accounts, categories, budgets, goals, recurring rules, templates, and profile. This right is always free.
Delete everything: Settings → Your data → "Delete account & data" permanently deletes your data from the cloud and wipes the device. We only keep a record of the deletion date, with no personal data. Full guide (including what to do if you no longer have access to the app): delete your account.
Trash: deleted transactions can be restored for 30 days; after that they disappear from the app's views.
Analytics: anonymous analytics can be disabled via app configuration in builds that expose it.
5. Retention
We keep your data for as long as you keep your account. If you delete it, remote deletion is permanent and immediate in our application tables. Without an account (local mode), your data exists only on your device and is removed when you uninstall the app or use permanent deletion.
6. Children
TraceCosts is not directed at children under 13, and we do not knowingly collect data from children.
7. Changes to this policy
If we change this policy, we will update the date on this page and announce it in the app when the change is significant.
8. Contact
Privacy questions or requests: support@mordobo.com.