Privacy Policy
Kacci Lab Inc. ("Kacci Lab", "we", "us", or "our") operates the TraceCheck mobile application and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use TraceCheck.
TraceCheck is an Android-only app designed to help people check a device for known stalkerware indicators and high-risk surveillance patterns. TraceCheck is designed to run scans on your device. It does not require an account, and it is not intended to upload your installed-app list to Kacci Lab.
Important privacy summary:
- TraceCheck works without an account.
- Scans are designed to run on your Android device.
- TraceCheck does not require you to create a profile or sign in.
- TraceCheck is not designed to upload your installed-app inventory to our servers for scanning.
- TraceCheck is intended to help you protect your own privacy, not to target or investigate other people.
- Scan results are for personal reference and general information only and do not guarantee detection of all malicious or unwanted apps.
- We do not sell your personal information.
- We do not use your information for advertising tracking.
- TraceCheck does not show ads.
- TraceCheck is available for Android only. There is no iOS version.
1. Information We Collect
1.1 Local Scan Data
When you run a scan, TraceCheck may read information available on your Android device that is needed to perform the scan. This may include:
- Installed application package names and related app metadata available through Android system APIs
- App labels / display names shown on the device
- Signing-certificate fingerprints used to match known stalkerware indicators
- Permission, Accessibility, Device Admin, launcher visibility, and similar device signals used for risk heuristics
- Scan results, finding summaries, and related on-device status information generated by the app
This information is processed on your device to produce your scan results. TraceCheck is not designed to send your installed-app list to Kacci Lab as part of the scan.
1.2 Bundled Indicator Data
TraceCheck includes a locally bundled indicator database derived from publicly available stalkerware research indicators (including community stalkerware-indicator data). This database is used on-device to compare what is installed on your phone with known stalkerware fingerprints.
The indicator database is part of the app package. It is not a live upload of your personal app list.
Example of on-device matching:
TraceCheck may compare an installed package name or certificate fingerprint on your phone with entries in the bundled indicator list. Matching happens locally on the device so your installed-app inventory does not need to be uploaded for the scan to run.
1.3 App Settings and Local Preferences
TraceCheck may store limited local preferences on your device, such as last scan results shown in the app UI or similar on-device state needed for the product to function.
1.4 Device Permissions and Technical Information
TraceCheck may request Android permissions required for its core scanning purpose. In particular, TraceCheck may use broad package-visibility permission (such as QUERY_ALL_PACKAGES where declared) so it can inventory installed apps for stalkerware matching. That permission is requested for the app’s core security-scanning purpose.
TraceCheck does not require camera access, microphone access, contacts access, or precise location access for its core scanning functionality.
Depending on how you obtain or use the app, limited technical information may be processed by app distribution platforms (such as Google Play) under their own policies, including install metadata, crash or integrity signals, and store-account information controlled by Google.
1.5 Optional Support Communications
If you contact us by email or through our website for support, we may collect the information you choose to provide, such as your email address, device type, app version, and a description of your question or issue. We use that information to respond to you.
1.6 Website Visits
If you visit Kacci Lab websites to read TraceCheck’s Privacy Policy, Terms, or related pages, those websites may use cookies or similar technologies for essential functionality, analytics, security, or consent management. Website cookie practices are managed on the website and are separate from on-device TraceCheck scanning.
1.7 Analytics, Crash Reports, and Diagnostics
TraceCheck or the app distribution platform may process limited technical diagnostics, crash reports, or performance information to help maintain and improve the app. This may include:
- Crash logs
- Performance events
- App version and device type
- Operating system version
- Technical information related to errors, bugs, reliability, and app performance
We use this information for app performance monitoring, bug fixes, troubleshooting, safety, and product improvement. We do not use crash or diagnostic data for advertising tracking.
2. How We Use Your Information
We use information to:
- Provide, operate, and maintain TraceCheck
- Run on-device stalkerware indicator matching and risk-pattern checks
- Show scan progress and results in the app
- Improve app reliability, usability, safety, and documentation
- Respond to support requests
- Detect, prevent, and address technical issues, abuse, fraud, or security risks
- Comply with legal obligations and platform requirements
3. Data Storage and Security
3.1 Local Storage
TraceCheck is designed so that core scan processing happens on your device. If you uninstall the app or clear app data, local scan history or preferences stored by the app may be deleted and may not be recoverable.
3.2 No Account Cloud Sync for Scan Inventories
TraceCheck does not provide an account-based cloud sync of your installed-app inventory. We designed the product this way because installed-app lists can be sensitive.
3.3 Security Measures
We use reasonable technical and organizational safeguards designed to protect information under our control. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.
4. Information Sharing and Disclosure
We do not sell your personal information. We do not share your personal information for third-party advertising or cross-app advertising tracking. We may share limited information in the following circumstances:
4.1 Service Providers
We may use trusted third-party service providers to help operate our websites, email, support, or app distribution. These providers may process information only as needed to provide their services to us.
4.2 Legal Requirements
We may disclose information if required to do so by law, regulation, court order, subpoena, legal process, or governmental request, or if we believe disclosure is reasonably necessary to:
- Protect our rights, property, or safety
- Protect users or the public
- Investigate fraud, abuse, security issues, or technical problems
- Enforce our Terms and Conditions
4.3 Business Transfers
If Kacci Lab is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to appropriate safeguards.
5. Third-Party Services
TraceCheck may rely on third-party platforms and services, including but not limited to:
- Google Play for Android app distribution, updates, and store review features
- Operating-system services provided by Android device manufacturers
- Website hosting, security, or consent tools used on Kacci Lab websites
These third-party services have their own privacy policies and terms. We encourage you to review them.
TraceCheck’s indicator matching may reference community research data. That research data is bundled for on-device use and does not mean your personal scan results are shared with those research projects.
6. Ads and Purchases
TraceCheck does not display ads. TraceCheck does not currently require a paid subscription for its core scanning features.
In the future, we may add optional support features. If implemented, such payments will be voluntary and will be processed through Google Play billing where required by platform rules.
7. Data Retention
We retain information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Local scan data and preferences: Stored on your device until you delete them, reset the app, or uninstall the app.
- Support emails: Retained as needed to respond to your request and maintain ordinary business records.
- Website logs or analytics: Retained for a limited period needed for security, operations, or analytics, depending on the website tools in use.
- Crash reports and diagnostics: Retained for a limited period needed to troubleshoot, fix bugs, and improve app performance.
8. Your Choices and Rights
Depending on your location, you may have rights regarding your personal information. These may include the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete information you provided to us
- Withdraw consent where processing is based on consent
- Request export or portability of certain information
- Object to or restrict certain processing activities
You can also control many device permissions directly through Android settings. Denying package-visibility or related permissions may prevent TraceCheck from performing a complete scan.
For privacy requests related to information you sent us by email or through our website, contact us at: contact.us@kaccilab.com.
9. Safety, Purpose, and Limits of the Scan Service
TraceCheck is a self-check tool intended to help users better protect their own privacy. It is not intended to target, accuse, investigate, or monitor another person. Scan results are informational only and do not create a professional security, investigative, legal, or forensic service relationship with Kacci Lab.
TraceCheck does not guarantee that it will identify all malicious, harmful, unwanted, or surveillance-related packages or apps. A clean scan does not mean a device is safe. A flagged result does not automatically prove wrongdoing or that a particular person installed the software. You remain responsible for how you interpret results and for any action you take.
If you may be in an abusive or unsafe situation, scanning a shared or monitored phone, or removing software, can create risk. Consider using a safer device when possible and seeking trusted local support resources before taking action on a device you believe is compromised.
10. Children’s Privacy
TraceCheck is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected personal information from a child under 13, please contact us and we will take reasonable steps to delete it.
11. International Data Transfers
If you contact us or visit our websites, information you provide may be processed or stored in countries other than your country of residence, including Canada. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for such transfers.
12. Cookies and Website Tracking
This Privacy Policy applies to the TraceCheck app and related services. If you visit Kacci Lab websites, those websites may use cookies or similar technologies for essential functionality, analytics, security, or consent management. You can manage cookies through your browser settings or the website’s cookie tools where available.
13. California Privacy Rights
If you are a California resident, you may have additional rights under California privacy laws, including the right to know, access, delete, correct, and opt out of certain sharing or sale of personal information. We do not sell personal information and do not share personal information for cross-context behavioral advertising.
14. European, UK, and Other International Users
If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar privacy laws, you may have additional rights, including rights of access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with a supervisory authority.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date above. For material changes, we may provide additional notice in the app, on our website, or by email if you have provided one.
Your continued use of TraceCheck after changes become effective means you acknowledge the updated Privacy Policy.
16. Contact Us
If you have questions about this Privacy Policy or our privacy practices, contact us at:
Kacci Lab Inc.
Toronto, Ontario, Canada
Email: contact.us@kaccilab.com
Website: https://kaccilab.com
17. Governing Law
This Privacy Policy is governed by the laws of Ontario, Canada and the applicable federal laws of Canada, without regard to conflict of law principles.
By using TraceCheck, you acknowledge that you have read and understood this Privacy Policy.