privacy notice

Information we collect

• Your record: readings, notes, food entries and stream names that you or your AI agent record, and values calculated from them.
• Device data: data sent by wearables you connect.
• Account data: an identifier and email address from your sign-in provider.
• Sign-in records: the IP address and time of each sign-in.
• Usage data: how often you log, view dashboards and share, which features you use, and errors. Usage data never includes the contents of your record or the names of your streams.
• Messages: feedback, support requests and trial requests you send us.

We treat everything in your record as health data. We do not collect precise location.

How we use it

• To store your record and provide it to you, your AI agent, and anyone you share it with.
• To secure the service, investigate incidents and send breach notices.
• To improve the service, using usage data only.

We process health data with your consent, given when you connect an AI agent. We do not inspect or analyze the contents of your record. We do not collect, use or sell personal data to train large language models.

How we share it

• Your AI agent's provider. Data your agent reads or writes passes through its provider, such as OpenAI for ChatGPT or Anthropic for Claude, under that provider's terms.
• People you share with. Pages you publish are visible to anyone with the link and are marked so search engines do not index them. Unpublishing stops serving a page; it does not remove copies others have saved.
• Service providers. Hosting, network, backup storage and email delivery providers that process data on our behalf.
• Legal requirements. When required by law or valid legal process. We tell you about any legal demand for your data unless the law or a court order forbids it.

We do not sell or rent personal data, including usage data and aggregated data, and we do not share it for advertising.

Retention and deletion

• Your record: until you delete it, or one year after your account lapses.
• Backups: up to 30 days.
• Sign-in records: 90 days.
• Usage data: up to 90 days.
• Messages: as long as needed to respond.

When you delete your record, it is removed from live systems within 24 hours and from backups within 30 days. We keep a record that the deletion occurred, containing identifiers and a date but no health data. Corrected and withdrawn readings stay in your record's history until the record is deleted.

Your rights

• Access and export your record.
• Correct your record.
• Delete your record.
• Withdraw consent, by removing the Traceroute connector from your AI agent or deleting your record.
• Get a list of the third parties that have received your data.

Use your AI agent or the app, or contact us. We respond within 45 days and may verify requests through your account. Exercising these rights does not affect your service.

If we deny a request, you can appeal by replying to our decision. We decide appeals within 45 days. If we deny an appeal, you can contact your state attorney general.

Security and breaches

Data is encrypted in transit, and backups are encrypted at rest. If a breach affects your data, we notify you by email and in the app, and notify regulators as the law requires, including the Federal Trade Commission.

Children

Traceroute is for adults 18 and older. We do not knowingly collect data from anyone under 18, and we delete it if we learn we have.

Cookies and tracking

traceroutehealth.com sets no cookies. The app sets one cookie to keep you signed in. Neither uses third-party analytics, advertising or tracking, and no third party collects information about your activity across sites through Traceroute. We do not respond to Do Not Track or Global Privacy Control signals because there is no tracking or sale for them to stop.

Changes

We notify you by email before a material change takes effect. A change that expands how we use or share data we already hold applies to that data only with your consent.

Contact

Email privacy@traceroutehealth.com or use the contact form.