Last updated: July 13, 2026
Thank you for using TraceFence ("we", "our", or "the App"). This Privacy Policy explains how TraceFence handles information in the macOS and iOS applications, including optional website subscriptions.
Key Principle: Agent activity and conversation data stay on devices you control. TraceFence does not operate an analytics, advertising, agent-data, or remote-control backend.
TraceFence is designed as a local-first application. We do not upload your agent conversations, project files, command history, approval content, or monitoring records to a TraceFence server. Network requests occur only for the user-selected services described below.
The following data is processed exclusively on your device:
| Data Type | Purpose | Stored On | Transmitted |
|---|---|---|---|
| Process information (PID, name, arguments) | Monitor AI agent activities | Your Mac only | No |
| File operation logs (create, modify, delete, read) | Audit agent file access | Your Mac only | No |
| Hardware sensor data (CPU, memory, disk, network) | System resource monitoring | Your Mac only | No |
| Process lifecycle events (launch, exit) | Track agent uptime and behavior | Your Mac only | No |
| Command rules and blacklists/whitelists | Security policy enforcement | Your Mac only | No |
| Protected directory configurations | File guard settings | Your Mac only | No |
| Storage scan results | Disk usage analysis | Your Mac only | No |
| Pairing endpoint and token | Connect TraceFence Sentinel to your Mac | Your Mac and paired iPhone | Directly between your devices |
| Website license key, device name, business, product and customer metadata | Activate and validate a website subscription | macOS Keychain/local settings and Dodo Payments | Yes, to Dodo Payments |
TraceFence offers an optional AI-powered analysis feature that requires you to provide:
This information is:
Important: We do not operate any AI servers. All AI requests go directly from your Mac to the LLM provider you configure. We have no access to your API keys or the data sent to LLM providers.
TraceFence does not require a TraceFence account. Website subscribers provide billing details directly to Dodo Payments, and App Store subscribers provide purchase details to Apple under those providers' terms.
App data is stored in the applicable TraceFence Application Support directory or App Store container on your device. Website license secrets are stored in macOS Keychain.
TraceFence uses network access only for the following product functions:
| Feature | Destination | Data Sent |
|---|---|---|
| AI Analysis (optional) | Your configured LLM API endpoint | App/storage analysis text + your API key |
| Agent Center hooks (optional) | Localhost / local Unix socket on your Mac | AI agent events and approval requests generated locally |
| iOS remote control (optional) | Your paired Mac over LAN, private VPN, or a user-configured tunnel | Status, sessions, commands, approvals, alerts, and pairing authentication |
| App Store updates | Apple Mac App Store | Standard App Store update check |
| Website checkout and license validation | Dodo Payments checkout and public license APIs | Billing details entered at checkout; license key, Mac name, activation instance, product and limited customer metadata |
| Website app and Agent Core updates | Official TraceFence GitHub releases | Version and download requests |
TraceFence does not include analytics SDKs, advertising trackers, or cross-app tracking. Optional user-configured AI providers, network tunnels, and VPNs operate under their own privacy terms.
TraceFence does not integrate with third-party analytics or advertising services. External services used for specific functions are:
TraceFence monitors file system activity in user-authorized directories (Desktop, Documents, Downloads, project folders, etc.) to track AI agent operations. This access is:
TraceFence is not directed to children and does not knowingly collect information from children under 13.
You have full control over your data:
TraceFence is available globally. Dodo Payments, Apple, GitHub, your chosen AI provider, and any user-selected VPN or tunnel may process data across borders under their respective privacy terms.
We do not operate a server that receives your agent or project data. Billing providers may independently process customer and transaction data as described above.
We do not sell, share, or disclose personal information as defined by CCPA, as we do not collect such information.
We comply with Apple's App Store Review Guidelines and privacy requirements, including the App Privacy Declaration.
No data is collected from this app by us or by third-party analytics, advertising, or tracking services. Local process records, file operation records, token statistics, and approval history remain on your device and are used only to provide App functionality. If you choose to configure an external AI provider, selected analysis content is sent directly from your Mac to the provider you choose, under that provider's terms and privacy policy.
We may update this Privacy Policy from time to time. Material changes will be made available on this page, in release notes, or within the app as appropriate.
If you have questions or concerns about this Privacy Policy or TraceFence's data practices, please contact us: