Privacy policy

Developed by HAVEN GLOBAL SERVICES LTD · 16267495 · D-U-N-S 233549461
3 Hornton Place, London W8 4LZ, UNITED KINGDOM
support@havengs.uk · +44 7365 406997

Tracelyo helps adult professionals document their jobs. HAVEN GLOBAL SERVICES LTD provides the application; the contact details above apply to support and privacy requests. Do not submit passwords, private API keys or unnecessary sensitive information to support.

Job records can include titles, client names and contact details, addresses, notes, checklists, outstanding issues, photos, device timestamps, handwritten signatures and PDF versions. Account services process your email, account/workspace identifiers, device installation references, subscription verification data and limited technical/security information. No advertising SDK or covert location recording is part of this implementation.

Your core workspace is stored privately on the device. You choose whether to connect cloud backup to a verified account. After that connection, synchronization may run in the background. Cloud storage processes the jobs and selected media needed for backup and recovery, including photographs, signatures and PDFs. Exporting a file or sharing it with another app sends it outside Tracelyo under your control and the receiving service’s rules. A shared cloud link grants access to anyone holding it for up to seven days, unless revoked sooner. Revocation cannot retrieve downloaded copies.

Optional AI writing tools send only the note text displayed in the request preview through our server to Google Gemini after your explicit request and confirmation. Remove unnecessary personal or sensitive details first. No photo, signature or client record is automatically attached. AI can make factual or translation errors: review its output before applying it. This beta limits AI to eligible paid Pro accounts with recent verification, excluding trials, and to five attempts per UTC day and one hundred per calendar month, including failures. Shared service limits can also restrict availability. AI requires internet and is not essential to local documentation.

Google/Firebase supports authentication, purchase verification and messaging; Cloudflare provides the API, database, private media storage and queues. Gemini is an additional Google AI processor for optional requests. These providers process data for us under their data processing terms. Private media files are stored in the European Union; other processing, including by Firebase and Gemini, may take place in the United Kingdom, the European Union, the United States or other countries, under the safeguards those providers offer, such as standard contractual clauses. We do not promise EU-only processing or zero retention by providers. Phone camera access is requested for capture. Notifications are optional. Android’s document picker and sharing controls avoid broad storage access. System authentication can protect entry to the workspace; the app does not receive your device PIN.

You can export records and request cloud account deletion through the app or contact support. Cloud deletion, local data deletion and Google Play subscription cancellation are separate actions. Keep an encrypted backup of important documents. Its password must have at least twelve characters, is not retained by the app and cannot be recovered. Records on the device stay until you delete them, clear the app data or uninstall the app. Cloud records stay while your cloud workspace exists; deleting the account revokes access and share links and queues their removal, which is retried until it completes. Usage events are kept for up to thirty days, and operational and security logs are kept to a minimum and for a limited time. Billing and account-deletion records are kept for as long as accounting, tax or legal obligations require. Subject to applicable law, you may request access, correction, deletion, restriction, objection or portability and contact the competent data protection authority. Identity will be checked proportionately; no password should be sent. We answer rights requests within one month, extended only where the law allows.

Privacy requests or complaints can be sent to support@havengs.uk. You can also complain to the UK Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ or to your competent local supervisory authority. Choosing not to request optional AI leaves local notes and reports available. You can stop future AI requests at any time; this does not recall text already sent to a provider or erase independent copies. This implementation does not make AI decisions about clients with legal or similarly significant effects.

Optional measurement and diagnostics are off by default and independently controlled in Settings. If enabled, HAVEN receives an installation identifier generated by the app, selected campaign code, language, build channel and a fixed set of usage events, without job text/photos or an advertising ID. If signed in and consenting, a pseudonymous link can attribute subscription validation; verified positive payment observations are a separate server billing record, not client declarations. Usage events are retained for up to thirty days under the scheduled purge, subject to operational incidents. Turning measurement off clears queued events and queues an erasure request for the next connection. Google Play Install Referrer is queried only after opting in; raw referrers and click identifiers are not stored or sent. Optional Google Firebase Crashlytics receives crash/device diagnostics and installation references; fatal reports can include exception messages and stack traces. Application-handled errors are reduced to fixed codes and technical call sites. Turning diagnostics off stops future uploads and deletes unsent reports; already transmitted diagnostics follow Google’s retention and service terms. These optional choices do not restrict local work. This build does not use Google Analytics or an advertising SDK.