Version 2.0 · Last Updated: August 24, 2026

Privacy Policy

MindJig LLC ("we", "us", or "our") operates various applications and services, including Trace and other products we may offer. This Privacy Policy explains how we collect, use, and safeguard your data when you use our websites, mobile applications, and services (collectively, "Services").

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name and username
• Profile photo (if provided)
• Authentication data from third-party sign-in providers (e.g., Google)

User Content

Depending on which Services you use, you may provide:

• Text entries, notes, and other written content
• Photos and other media attachments
• Tags, categories, and organizational data
• Ratings, status information, and other metadata

Location Data

With your explicit permission, we may collect:

• GPS coordinates
• Address and place information
• Location names and geographic details

Location is collected only if you grant the permission your device asks for. Once granted, the app attaches your location to each new entry by default. You can turn that off at any time in Settings, per stream, or by withdrawing the permission in your device settings.

Device and Usage Information

We automatically collect:

• Device type, model, and operating system
• App version and build number
• A device identifier, generated when you install the app, which is linked to your account so that we can sync your data and show you your list of signed-in devices
• Sync timestamps and session information, such as when a device last connected

The Trace apps contain no third-party analytics, advertising, or behavioural tracking SDKs. The only outside SDK in the app is our subscription provider's, which is there so that purchases work — it receives a device identifier and your purchase history, never your content.

To be plain about what does happen: your entries do reach our servers. That is how syncing between your devices works, and the rest of this policy describes how we store and protect them. What does not happen is your activity being reported to us as analytics, or your content being sent to an advertiser or data broker at all. The operational information listed above — device details and sync timestamps — contains none of what you wrote.

Our website is a separate matter: mindjig.com uses a cookieless page-view analytics tool that counts page views and referrers. It does not set cookies, does not build a profile of you, and does not follow you to other websites. It is not connected to your Trace account.

Subscription and Payment Data

If you make purchases, we collect transaction records processed through Apple App Store or Google Play Store. We do not directly collect or store your payment card information.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Sync your data across devices
• Respond to customer support requests
• Debug issues and troubleshoot problems
• Understand usage in aggregate — such as how many entries or streams accounts contain, and how often they sync — to guide product decisions
• Communicate with you about updates, security alerts, and support
• Ensure the security and integrity of our Services

Internal Access to Customer Data

Trace is a private journal. We have built our internal tooling so that supporting you does not require reading what you wrote.

The operator console — the tool we use to answer support requests and investigate faults — can read only account and diagnostic information: your name, username, email address, subscription and purchase history, device list, operational event logs for your account, any pending deletion, and the counts and timestamps of your entries, streams, and attachments. It is also used to make support changes to an account, such as correcting a subscription tier or deactivating a device. It cannot read:

• Entry titles or entry text of any kind
• The location attached to any entry
• The names of your streams
• The file paths of your photos and attachments

The journal tables in our database are guarded in code by a strict allowlist: any column not explicitly named as metadata is designed to be unreadable by the tool, so data we add in future is private by default rather than private only if someone remembers to block it. An automated test keeps that boundary in place.

Separately, a small number of authorized personnel hold the database credentials needed to operate and repair the Services. We use that access only to keep the Services running, to investigate a specific fault, to investigate a specific report of abuse or of content that infringes someone's rights — limited to the material identified in that report — or where we are legally required to do so. We do not use it to browse or analyze the contents of your journal.

What We Do NOT Do

We want to be clear about what we will never do with your data:

• We do not sell your personal information to third parties
• We do not share your data with advertisers or for marketing purposes
• We do not use your content to train artificial intelligence models
• We do not monetize your data in any way beyond providing our Services to you

Data Storage and Security

No online service can guarantee perfect security, and we will not pretend otherwise. What we can tell you is specifically what we do:

• Encryption in transit (TLS), and encryption at rest on our servers
• Row-level authorization in our database, configured so that the records belonging to an account are reachable only by that account
• Private file storage for the photos you attach to entries, scoped to your account and designed not to be publicly accessible
• Your profile picture is an exception: it is served from a public address so that it can be displayed in the apps. Anything you attach to an entry is not served this way.
• Security review of changes before releases
• Internal access controls, as described under “Internal Access to Customer Data” above

Your device holds a copy too. Trace keeps your entries on your own device so the app works offline. That copy is protected by your device's own encryption and lock screen rather than by us, and it may be included in your phone's backups (iCloud or Google) if you have those switched on.

Third-Party Services

We use a small number of trusted service providers to operate the Services. Each receives only what it needs to do its job:

• Cloud database, authentication, and file storage — holds your account and your entries. Located in the United States.
• Application hosting and website analytics — serves our website and web app, including standard server request logs. Located in the United States.
• Maps, geocoding, and place search — if you attach a location to an entry, or open the map, up to three providers are involved. A map provider serves the map imagery and receives the part of the map you are viewing. A geocoding provider turns coordinates into a street address; this runs automatically when an entry has a location but no address yet, without you searching for anything. A place-search provider returns nearby places, and receives your coordinates when you open the location picker or move the map, and your search text if you type one. All three receive your coordinates at full precision. By default the app attaches your current location to each new entry, so the geocoding provider receives those coordinates automatically. Turn location capture off in Settings, or decline the location permission, and no provider receives anything unless you open the map or the location picker yourself.
• Subscription management — receives your account identifier and your purchase and renewal history.
• Transactional email — receives your email address so we can send confirmations and account notices.
• Sign in with Google — if you choose to sign in with Google, Google confirms your identity to us.
• Apple App Store / Google Play Store — app distribution and subscription payment processing.

These providers have their own privacy policies governing their handling of your data, and we share only the minimum each one needs to function. If you would like to know which specific companies we use, email privacy@mindjig.com and we will tell you.

Connecting AI Assistants and Other Apps

Trace lets you connect outside applications — including AI assistants such as Claude and ChatGPT — so that they can work with your entries on your behalf. This is entirely optional, and no such connection exists unless you create one.

You connect an app either by signing in to it through Trace or by creating an API key in your account settings. When you do:

• You choose the level of access. Read access lets the connected app read your entries and streams — including their titles and text, the locations attached to them, your channels, and the photos attached to entries. Full access additionally lets it create, change, and delete entries, on paid accounts; free accounts are read-only regardless of the access level chosen.
• Content leaves our control. Anything the connected app retrieves is sent to that app's provider and is then handled under their privacy policy and terms, not ours.
• Choose carefully. Entries can contain deeply personal material. Connect only apps you trust, and grant read access rather than full access unless you genuinely need more.
• API keys can be revoked at any time, in your account settings. Revocation is immediate — the connected app can make no further requests.
• Connections made by signing in to an app expire automatically after one year. There is not yet a way to end one early yourself — email privacy@mindjig.com and we will revoke it for you, usually within one business day. We are building self-service revocation.
• Links to individual photos that a connected app has already retrieved stay usable for up to one hour before they expire, even after you revoke.

Connecting an app does not change our own commitment: MindJig does not use your content to train artificial intelligence models.

Data Retention

We retain your data for as long as your account is active or as needed to provide you Services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal obligations.

Some records survive deletion. We keep a permanent record of the deleted account's identifier, so that a device that was offline at the time cannot resurrect the account, and we keep operational event logs tied to that identifier. Our subscription provider may retain your purchase history under its own policy. None of these contain your entries.

Deletion is scheduled, not instant. When you ask us to delete your account there is a short grace period — currently 7 days — during which your data is still present and you can cancel the deletion. After that it is permanently removed. This is so an accidental or hasty deletion can be undone.

If you delete your account, we remove your data from our live systems as described above. If we hold any backup copies of your data, they are encrypted and are overwritten within 7 days of that deletion, after which no copy of your entries remains in our backups. We do not restore deleted accounts from backup except when recovering from a system failure.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data
• Export your data in a portable format
• Opt-out of non-essential communications
• Withdraw consent for optional data collection (such as location)

To exercise these rights, contact us at privacy@mindjig.com. We aim to respond within 30 days, and in any event within the time the law allows. To permanently delete your account and all associated data, you can do so directly in the app under Account settings, or submit a Trace Delete request.

If You Are in the European Economic Area or United Kingdom

If you are in the EEA or the UK, the General Data Protection Regulation (GDPR) and UK GDPR apply to you. MindJig LLC is the data controller for the personal data described in this policy.

Why we are allowed to process your data

• To perform our contract with you — creating and running your account, storing and syncing your entries, and handling subscriptions. Without this we cannot provide the Services.
• With your consent — collecting your location. You can withdraw consent at any time in your device settings or in the app, without affecting anything you have already done.
• Our legitimate interests — keeping the Services secure, preventing fraud and abuse, and understanding usage in aggregate to decide what to build. We balance these against your rights and use the least data that will do the job.
• Legal obligations — where we are required to keep records, for example for tax purposes.

Sensitive information in your entries

A journal can contain information the GDPR treats as a special category — about health, beliefs, sex life, or political opinions. We never ask you for this and we do not analyse your entries. Anything of this kind is there because you chose to write it, Where an entry contains information of this kind, we rely on your explicit consent under Article 9(2)(a) to store it, sync it, and — where you connect an outside application — transmit it to that application at your instruction. You give that consent by choosing to write and save the entry. You can withdraw it at any time by deleting the entry, disconnecting the application, or deleting your account.

Your rights

In addition to the rights listed above, you have the right to object to processing based on our legitimate interests, the right to ask us to restrict processing, and the right not to be subject to decisions based solely on automated processing. We do not carry out any automated decision-making or profiling.

You also have the right to complain to a data protection authority. You can contact the supervisory authority in the country where you live or work, or where you believe a problem occurred. We would appreciate the chance to help first, but you are not required to come to us before complaining.

If You Are in California

The California Consumer Privacy Act, as amended by the CPRA, gives California residents the rights to know what personal information we collect and how we use it, to request its deletion, to request a copy in a portable form, to correct inaccurate information, and to limit the use of sensitive personal information. Those rights are covered by the "Your Rights" section above and apply to you in the same way.

We do not sell or share your personal information as those terms are defined by the CCPA, and we have not done so in the preceding twelve months.

We do collect precise geolocation, which the CCPA treats as sensitive personal information, when you choose to attach a location to an entry. We use it only to provide the Services to you, and for no purpose that would trigger the right to limit its use — so we do not offer a separate “Limit the Use of My Sensitive Personal Information” link. Because we do not sell or share personal information, there is nothing for a Global Privacy Control or Do Not Track signal to opt you out of; we treat any such signal as confirming the position we already take.

We will not discriminate against you for exercising any of these rights. To make a request, email privacy@mindjig.com. We may need to verify your identity before acting, which normally means confirming control of the email address on the account.

Law Enforcement and Legal Requests

Your entries and the locations attached to them are private, and we treat requests for them accordingly.

• We disclose your data to law enforcement or any other authority only where we are legally compelled to — for example by a valid subpoena, court order, or warrant — or where we believe in good faith that disclosure is necessary to prevent death or serious physical harm, or is separately required by law, such as the mandatory reporting of child sexual abuse material.
• We review requests and push back on ones that are overbroad or not properly issued, and we disclose the narrowest set of data that answers a valid request.
• Where we can, we will tell you before we disclose anything, with enough time for you to object. We will not tell you where we are legally prohibited from doing so, where the authority has asked us not to, or where notice would create a genuine risk to someone's safety.

Children's Privacy

Our Services are not directed to children. You must be at least 13 to use them, and at least 16 if you are in the European Economic Area — unless the country where you live sets a lower age of digital consent, in which case that age applies. The full detail is in our Terms of Service.

We do not knowingly collect personal information from anyone below the age that applies to them. If you believe a child has provided us with personal information, please contact us at privacy@mindjig.com and we will delete it.

International Data Transfers

MindJig LLC is based in the United States, and our infrastructure providers process data in the United States. If you are in the EEA or the UK, this means your personal data is transferred outside your country.

Where we make such transfers, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) with our providers, together with the technical measures described under "Data Storage and Security" above. You may request more information about these safeguards by emailing privacy@mindjig.com.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date. For material changes, we may also notify you through the app or via email.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

MindJig LLC
privacy@mindjig.com