Privacy Policy

Kacci Lab Inc. ("Kacci Lab", "we", "us", or "our") operates the TraceCheck mobile application and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use TraceCheck.

TraceCheck is an Android-only app designed to help people check a device for known stalkerware indicators and high-risk surveillance patterns. TraceCheck is designed to run scans on your device. It does not require an account, and it does not upload your installed-app list to Kacci Lab.

1. Information We Collect

The TraceCheck app is designed so that scan processing stays on your device. The app does not send your installed-app list, scan results, crash logs, or usage analytics to Kacci Lab.

1.1 Local Scan Data

When you run a scan, TraceCheck may read information available on your Android device that is needed to perform the scan. This may include:

• Installed application package names and related app metadata available through Android system APIs
• App labels / display names shown on the device
• Signing-certificate fingerprints used to match known stalkerware indicators
• Permission, Accessibility, Device Admin, launcher visibility, and similar device signals used for risk heuristics
• Scan results, finding summaries, and related on-device status information generated by the app

This information is processed on your device to produce your scan results. It is not sent to Kacci Lab as part of the scan.

1.2 Bundled Indicator Data

TraceCheck includes a locally bundled indicator database derived from publicly available stalkerware research indicators (including community stalkerware-indicator data). This database is used on-device to compare what is installed on your phone with known stalkerware fingerprints.

The indicator database is part of the app package. It is not a live upload of your personal app list.

1.3 App Settings and Local Preferences

TraceCheck may store limited local preferences on your device, such as last scan results shown in the app UI or similar on-device state needed for the product to function. This information stays on your device.

1.4 Device Permissions and Technical Information

TraceCheck may request Android permissions required for its core scanning purpose. In particular, TraceCheck may use broad package-visibility permission (such as QUERY_ALL_PACKAGES where declared) so it can inventory installed apps for stalkerware matching. That permission is requested for the app’s core security-scanning purpose.

TraceCheck does not require camera access, microphone access, contacts access, or precise location access for its core scanning functionality.

TraceCheck does not include in-app analytics, advertising, crash-reporting, or diagnostic SDKs. The app does not send crash logs, performance events, or device diagnostics to Kacci Lab.

If you download TraceCheck from Google Play, Google may process limited store information under Google’s own policies. That can include install metadata, your Google account used with Play, ratings, and platform integrity signals. That information is controlled by Google, not collected by the TraceCheck app.

1.5 Optional Support Communications

If you contact us by email or through our website for support, we may collect the information you choose to provide, such as your email address, device type, app version, and a description of your question or issue. We use that information to respond to you.

1.6 Website Visits

If you visit Kacci Lab websites to read TraceCheck’s Privacy Policy, Terms, or related pages, those websites may use cookies or similar technologies for essential functionality, analytics, security, or consent management. Website cookie practices are managed on the website and are separate from on-device TraceCheck scanning.

2. How We Use Your Information

Where information is available to us, we use it to:

• Provide, operate, and maintain TraceCheck
• Run on-device stalkerware indicator matching and risk-pattern checks
• Show scan progress and results on your device
• Respond to support requests you send us
• Improve documentation and the product based on support feedback and our own testing
• Comply with legal obligations and platform requirements

3. Data Storage and Security

3.1 Local Storage

TraceCheck is designed so that core scan processing happens on your device. If you uninstall the app or clear app data, local scan history or preferences stored by the app may be deleted and may not be recoverable.

3.2 No Account Cloud Sync for Scan Inventories

TraceCheck does not provide an account-based cloud sync of your installed-app inventory. We designed the product this way because installed-app lists can be sensitive.

3.3 Security Measures

We use reasonable technical and organizational safeguards designed to protect information under our control. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

4. Information Sharing and Disclosure

The TraceCheck app does not share user data with other companies or organizations. We do not sell your personal information. We do not share your personal information for third-party advertising or cross-app advertising tracking.

If you contact us or visit our websites, we may share limited information in the following circumstances:

4.1 Service Providers

We may use trusted third-party service providers to help operate our websites, email, support, or app distribution. These providers may process information only as needed to provide their services to us.

4.2 Legal Requirements

We may disclose information if required to do so by law, regulation, court order, subpoena, legal process, or governmental request, or if we believe disclosure is reasonably necessary to:

• Protect our rights, property, or safety
• Protect users or the public
• Investigate fraud, abuse, security issues, or technical problems
• Enforce our Terms and Conditions

4.3 Business Transfers

If Kacci Lab is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to appropriate safeguards.

5. Third-Party Services

TraceCheck may rely on third-party platforms and services, including but not limited to:

• Google Play for Android app distribution, updates, and store review features
• Operating-system services provided by Android device manufacturers
• Website hosting, security, or consent tools used on Kacci Lab websites

These third-party services have their own privacy policies and terms. We encourage you to review them.

TraceCheck’s indicator matching may reference community research data. That research data is bundled for on-device use and does not mean your personal scan results are shared with those research projects.

6. Ads and Purchases

TraceCheck does not display ads. TraceCheck does not currently require a paid subscription for its core scanning features.

In the future, we may add optional support features. If implemented, such payments will be voluntary and will be processed through Google Play billing where required by platform rules.

7. Data Retention

We retain information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Local scan data and preferences: Stored on your device until you delete them, reset the app, or uninstall the app. Kacci Lab does not receive a copy.
• Support emails: Retained as needed to respond to your request and maintain ordinary business records.
• Website logs or analytics: Retained for a limited period needed for security, operations, or analytics, depending on the website tools in use. This applies to website visits, not to in-app scanning.

8. Your Choices and Rights

Depending on your location, you may have rights regarding your personal information. These may include the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete information you provided to us
• Withdraw consent where processing is based on consent
• Request export or portability of certain information
• Object to or restrict certain processing activities

Because the TraceCheck app does not collect scan data off your device, we generally cannot access, correct, or delete on-device scan results for you. You can remove those results by clearing app data or uninstalling TraceCheck.

You can also control many device permissions directly through Android settings. Denying package-visibility or related permissions may prevent TraceCheck from performing a complete scan.

For privacy requests related to information you sent us by email or through our website, contact us at: contact.us@kaccilab.com.

9. Safety, Purpose, and Limits of the Scan Service

TraceCheck does not guarantee that it will identify all malicious, harmful, unwanted, or surveillance-related packages or apps. A clean scan does not mean a device is safe. A flagged result does not automatically prove wrongdoing or that a particular person installed the software. You remain responsible for how you interpret results and for any action you take.

If you may be in an abusive or unsafe situation, scanning a shared or monitored phone, or removing software, can create risk. Consider using a safer device when possible and seeking trusted local support resources before taking action on a device you believe is compromised.

10. Children’s Privacy

TraceCheck is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected personal information from a child under 13, please contact us and we will take reasonable steps to delete it.

11. International Data Transfers

If you contact us or visit our websites, information you provide may be processed or stored in countries other than your country of residence, including Canada. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for such transfers.

12. Cookies and Website Tracking

This Privacy Policy applies to the TraceCheck app and related services. If you visit Kacci Lab websites, those websites may use cookies or similar technologies for essential functionality, analytics, security, or consent management. You can manage cookies through your browser settings or the website’s cookie tools where available. Website tracking does not apply to on-device TraceCheck scans.

13. California Privacy Rights

If you are a California resident, you may have additional rights under California privacy laws, including the right to know, access, delete, correct, and opt out of certain sharing or sale of personal information. We do not sell personal information and do not share personal information for cross-context behavioral advertising.

14. European, UK, and Other International Users

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar privacy laws, you may have additional rights, including rights of access, rectification, erasure, restriction, objection, portability, and the right to lodge a complaint with a supervisory authority.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date above. For material changes, we may provide additional notice in the app, on our website, or by email if you have provided one.

Your continued use of TraceCheck after changes become effective means you acknowledge the updated Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Kacci Lab Inc.
Toronto, Ontario, Canada
Email: contact.us@kaccilab.com
Website: https://kaccilab.com

17. Governing Law

This Privacy Policy is governed by the laws of Ontario, Canada and the applicable federal laws of Canada, without regard to conflict of law principles.

---

By using TraceCheck, you acknowledge that you have read and understood this Privacy Policy.

© 2026 Kacci Lab Inc. All rights reserved.
Developer: Kacci Lab Inc. — Canadian Federal Corporation
Product: TraceCheck