Legal
Privacy Policy
Trace&Trap operates Trace&Trap. This policy explains what information the app handles, why, and what you can do about it.
Last updated 13 August 2026. Questions: support@traceandtrap.co.za
1. Information we handle
Account details. Your email address, password (stored only as a hash by our authentication provider), and the contact information and lock-screen message you choose to display on a stolen device.
Device records. A label you give each device, a locally generated device identifier, the reported platform, its safe/stolen status, and check-in timestamps.
Location check-ins. If you grant location permission, the companion app records latitude, longitude, accuracy and a timestamp when it opens, and stores a history of those points against the device.
Billing records. Your plan, subscription status and the payment references returned by PayFast. Card numbers are entered on PayFast's own checkout and are never sent to or stored by us.
2. Why we handle it
To create and secure your account, to register and display your devices, to deliver the lock screen, alarm and location reporting you asked for, to take payment for your plan, and to respond to support requests.
We do not sell your information, and we do not use your location data for advertising or profiling.
3. Who we share it with
Only the service providers needed to run the product: our hosting and database provider, which stores your account, device and location records; Google, if you choose to sign in with a Google account; and PayFast, which processes payments. Each receives only what it needs for that purpose.
We may disclose information if we are legally required to, or where you ask us to assist a police investigation into a stolen device.
4. Access controls
Your records are protected by row-level access rules so that an account can only read and change its own profile, devices and location history. Traffic between your browser and our servers is encrypted in transit.
5. Retention and deletion
We keep your data for as long as your account exists. You can delete an individual device, which removes its location history, at any time from the dashboard. To delete your whole account and its data, email support@traceandtrap.co.za and we will action the request. We may retain billing records where law requires it.
6. Your choices and rights
Location permission is optional and is granted through your phone's operating system — you can withdraw it at any time in your device settings, and Trace&Trap will simply stop reporting positions. Under South Africa's POPIA you may ask us to confirm what we hold about you, to correct it, or to delete it. Write to support@traceandtrap.co.za.
7. Children
Trace&Trap is intended for the owner of a device and is not directed at children under 18. A parent or guardian should hold the account for a minor's phone.
8. Changes and contact
If this policy changes we will update the date at the top of this page. Questions or requests: support@traceandtrap.co.za.
See also our Terms of Service.