Privacy Policy

Last updated: July 2025

What We Collect

Retrace collects the minimum data needed to provide the service:

• Account information (email, name) when you sign up
• Journal entries you create through MCP tools or the API
• Usage metadata (timestamps, project names) for search and summaries

Encryption

All journal entry content is encrypted at rest using AES-256-GCM with per-user derived keys. A database breach alone cannot expose your entry content. Metadata fields (project, tags, people) use blind index tokens (HMAC-based) to enable filtering without decryption.

Local Mode

You can run Retrace entirely locally with SQLite storage. In this mode, no data leaves your machine — entries are stored in a local database file.

Third Parties

We do not sell, share, or provide your data to third parties. The service is hosted on Vercel with a Neon PostgreSQL database. Authentication uses GitHub OAuth or email/password credentials.

Data Deletion

You can delete individual entries at any time through the API or MCP tools. To delete your account and all associated data, contact us.

Contact

Questions about privacy? Reach out to us at retrace@paoapps.com.