Privacy
Privacy and local dictation
Entries and drafts remain in Trace's existing local stores. Optional Pro iCloud sync and exports apply to saved journal text and supported entry metadata. Dictation does not change these boundaries or free/Pro entitlements.
Dictation is off initially. Enabling it downloads public transcription files from Hugging Face and its download infrastructure. Selecting cleanup downloads additional public files. Providers receive ordinary download requests, including network information such as the requesting IP address. Trace does not put journal text or audio in these requests. Once files are installed, recording, transcription, and cleanup work without network access. Speech and text are not uploaded for model processing.
Temporary audio, raw transcription, pending cleanup, and downloaded models live in protected Application Support storage excluded from backup. They are not attachments and do not enter iCloud or exports. A local draft refers to its native session by a random ID for interruption and relaunch recovery.
Audio and the native result remain until text and its insertion receipt have successfully persisted to the local draft, or the user explicitly discards the recording. Removing downloads leaves journal text and unfinished dictation recoverable. Turning dictation off does not delete writing or an unfinished recording.
Trace stops recording when inactive or locked, and cancels inference on inactivity, App Lock, or memory pressure. Returning never resumes the microphone automatically. Users can revoke microphone permission in iPhone Settings and continue typing.