Privacy Policy

1. Summary

2. Information we do not collect

We do not collect, sell, or rent:

Your browsing history, bookmarks, notes, or selected text
Your reading habits, page views, or session durations
Usage analytics, advertising identifiers, or crash reports through our own servers
Your contacts, messages, precise location, or device identifiers

Because we do not host your vault, we cannot access, recover, or reset your password for you. This is by design.

3. Data stored on your device

The app stores the following locally on your iPhone:

Encrypted bookmarks in the app's private storage
Encrypted notes (Pro) in the app's private storage
Per-site shield preferences
App preferences and configuration
Nothing else — no contacts, photos, or browsing history
Aggregate privacy report counters (lifetime, on-device only)

Encryption uses industry-standard algorithms (AES-256-GCM). Keys are derived from your password via HKDF-SHA256 and protected with the iOS Keychain.

3.1 Vault encryption

Bookmarks and notes are sealed inside AES-256-GCM containers. The encryption key is derived from your vault password using HKDF-SHA256 and never leaves the iOS Keychain. We do not have a copy of your key and cannot recover it.

3.2 Local translation

Page translation uses Apple's on-device Translation framework. Selected text never leaves your iPhone — translation runs entirely on the Apple Neural Engine.

3.3 Content blocker

The content blocker rule sets ship inside the app. ZeroTrace does not download remote filter lists. All blocking decisions are made locally by the Apple content blocker engine.

4. Device permissions

ZeroTrace requests only permissions needed for features you use:

ZeroTrace requests the minimum set of permissions needed. We do not access your system Photos library, microphone, or personal files unless you explicitly trigger an action.

5. Subscriptions and payments

We do not receive your payment card details.

6. Network use

Core browser features work without our servers. The only network requests made by ZeroTrace are:

Pages you visit (sent directly to the site's server, never to us)
Subscription validation with Apple's App Store (Pro only)
Links you choose to open (e.g. this website, Terms, Privacy, or email feedback)

We do not operate any servers that receive your browsing data, bookmarks, notes, or translation requests.

7. Third-party services

The app does not include third-party advertising SDKs, analytics SDKs, or social tracking SDKs.

8. Children's privacy

ZeroTrace is not directed at children under 13. We do not knowingly collect personal information from children.

9. Data retention and deletion

Your data remains on your device until you delete items, reset the vault, or uninstall the app. Uninstalling removes app-private data subject to iOS behavior.

10. International users

This policy is provided in multiple languages. Because data is stored locally on your device, cross-border transfer by us does not apply to your vault contents.