Privacy Policy

Last updated: August 29, 2026

OweTrace is an iPhone and iPad app operated by TaoApex Limited. It keeps track of the things other people still owe you — a reply, a decision, a document, a repair, an approval, a refund — and tells you when it is time to follow up. This policy explains exactly what the app handles and what it does not.

1. Data processed

  • Trace content you enter: titles, the person or organisation you are waiting on, expected outcomes, promises, dates, timeline notes, categories, and reference codes you choose to record.
  • AI request data (optional): when you tap an AI feature, the app sends only the text you submitted for that action plus the trace fields needed as context, along with your language, time zone, and the current date.
  • Purchase data: Apple processes the subscription transaction and reports the entitlement back to the app. TaoApex never receives your Apple payment credentials or card details.
  • Anonymous quota identifier: a randomly generated installation identifier that lives in your iOS Keychain. Only its SHA-256 hash is sent to the AI endpoint, so daily free-tier limits can be enforced without an account.

2. On-device storage and the AI round trip

Trace content is stored in the app's private on-device database. There is no account, no sign-in, no profile, and no server-side copy of your traces.

When you deliberately use an AI feature, the request travels over HTTPS to the developer's own Cloudflare Worker endpoint at `owetrace.taoapex.com`, which forwards it to Google Gemini 2.5 Flash-Lite and returns the structured result. That endpoint responds with `Cache-Control: no-store`, does not write your request body, your trace text, or the model's answer to any database, and does not use your content to train models. Model provider credentials are held only as server-side secrets and are never shipped inside the app.

The only value the endpoint stores is the SHA-256 hash above, a UTC date, and small per-day counters. The raw installation identifier never leaves your device, the hash cannot be reversed into it, and the counters roll over daily.

3. How data is used

Only to show you your own traces, to produce the AI result you asked for, to schedule the reminders you set, to unlock the Pro features you purchased, and to answer support requests. We do not sell data, do not build advertising profiles, and do not use your content for anything other than the single action you triggered.

4. Tracking and analytics

OweTrace contains no analytics SDK, no advertising SDK, and no third-party trackers. The app's privacy manifest declares `NSPrivacyTracking` as false with an empty tracking-domain list. The collected-data entries it declares — other user content, product interaction, device identifier, and purchase history — are all marked as not linked to you and not used for tracking, and exist solely to make the features above work.

5. Notifications and permissions

Reminders are generated locally on your device with Apple's User Notifications framework. Permission is requested only the first time you save a follow-up or expected-by date, and there is no push server. You can revoke it at any time in iOS Settings.

6. Retention and deletion

Delete a trace in the app and it is removed from your device; there is no server-side copy left behind to delete. Deleting OweTrace removes all local data. For a verifiable request, contact privacy@taoapex.com and we will respond within 30 days within the limits of applicable law. Because there are no accounts, there is no separate "delete my account" flow.

Cancelling a subscription does not delete your traces; the data stays on your device and reverts to the free tier's limits.

7. Service providers

Apple provides iOS, local notifications, Keychain, and App Store purchase processing. Cloudflare hosts the Worker and its anonymous counter table. Google provides the Gemini inference used for optional AI features. Each processes data under its own terms and privacy policy.

8. Children and sensitive content

OweTrace is not directed at children. Do not record information about other people that you are not authorised to hold, and be considerate about what you enter — timeline notes can contain names, amounts, and health or financial context.

9. Your rights and contact

Depending on where you live you may be able to access, correct, delete, restrict, or export your personal data. For privacy questions write to privacy@taoapex.com; for product help write to support@taoapex.com.

TaoApex Limited may update this policy when the app's data flows change. Any material change is reflected in the effective date above.