Privacy policy

Your data is yours.

Last updated 17 May 2026

Who we are

TraceHealth (“TraceHealth,” “we,” “us”) is a metabolic research platform for iOS. This policy covers the TraceHealth app and this website. We built TraceHealth as a measurement instrument, not an advertising product — and this policy is the long version of that promise.

What we collect

We collect only what the app needs to be useful to you:

• Your account. When you sign in with Apple, we receive an opaque Apple identifier and — only if you choose to share it — your email address. We never receive your Apple password or your name.
• What you log. Meals, calories and macros, weight, and the gut, mood, and energy check-ins you enter. Gut and symptom tracking is off by default and only ever runs after you explicitly turn it on.
• Apple Health (optional). If you connect Apple Health, we read only the metrics you authorize — steps, energy, body mass, workouts, sleep, body composition. You grant and revoke this access in iOS at any time, and we write back only what you ask us to.
• Coach conversations. The messages, meal descriptions, and photos you send the coach, and the replies it returns.
• Notes you add, including any notes from doctor visits, if you use that feature.

We do not collect your location, your contacts, advertising identifiers, or device fingerprints.

How we use it

Your data is used to run the app for you — to log your meals, compute your adaptive TDEE, draw your trends, and let the coach answer you accurately. That is the whole list. We do not use your data to advertise to you, and we do not build a profile of you for anyone else.

The one company we share with: Anthropic

The coach is powered by Anthropic's Claude models. When you message the coach, the content of that conversation — meal descriptions, photos, and the context it needs — is sent to Anthropic's API to generate a response.

This is the only third party your content is shared with. Anthropic processes it to return an answer and does not use data submitted through its API to train its models. Their side of it is covered in Anthropic's privacy policy.

We share your data with no one else — no advertisers, no data brokers, no analytics companies.

Apple

TraceHealth uses Sign in with Apple so you never hand us a password, and integrates with Apple Health as a data source you control. Apple's handling of Sign in with Apple and Apple Health is governed by Apple's privacy policy.

How your data is protected

• Your data is encrypted at rest, and on your iPhone it sits behind iOS's built-in data protection.
• Every account's data is isolated at the database level — your records are only ever reachable through your own authenticated session, and one user's data is never visible to another.
• We identify you only by a signed token on each request; we never read your identity from the content you send us.
• We do not log your health data, your messages, or the contents of app requests to our systems.

What we don't do

• No advertising, and no ad networks.
• No selling or renting your data.
• No third-party analytics, tracking pixels, or social trackers — and this website sets no cookies.

Your choices

• Export. You can export your data as CSV from the app at any time.
• Delete. Email us and we will delete your account and erase every record tied to it.
• Apple Health. Revoke TraceHealth's access at any time in the iOS Settings app.
• Gut tracking. It stays off unless you turn it on, and you can turn it back off.

Data retention

We keep your data for as long as your account is active. When you delete your account, we erase it.

Children

TraceHealth is not directed to children under 13, and we do not knowingly collect data from them.

Changes

If we change this policy, we will update the date above and — for anything significant — tell you in the app.

Contact

Questions about privacy or your data: hello@usetrace.health.