PTrace is provided by Stockholm Department AB. PTrace records activities on your device. Account sync and connections to AI services are optional choices.
Information we handle.
The app can store activity details such as time, distance, pace, heart rate, route coordinates, notes and how an activity felt. If you enable blood-glucose sync, readings and their source-app information are handled separately. Account services also handle Sign in with Apple identifiers, a Sign in with Apple token that is stored encrypted and used only to revoke PTrace’s access when you delete your account, email when Apple provides it, connection permissions, access records, sync metadata and operational request logs.
To show elevation, the app downloads terrain tiles covering roughly five-kilometre squares around where you are, whether or not you have an account. Those requests appear in operational request logs and are not tied to an account.
When you import activity files, the service processes the files and adds the resulting activities to your account. Feedback contains the fields you choose to send, plus limited service metadata described on the Security page.
How we use information.
We use information to record and display activities, sync them across your devices, provide features you request, authenticate your account, enforce the permissions you grant to connected AI services, prevent abuse, diagnose failures and improve PTrace.
PTrace does not host an AI model. A connected AI receives only information allowed by the permission attached to that connection and needed for the tool call it makes.
What a connected AI can receive.
Each AI connection gets only the permissions you select on the consent screen, and can change them on Connections. These are the kinds of information each permission lets PTrace return to that AI:
- Summaries: your list of activities with their type, start time and source; totals such as distance, duration, pace or speed, elevation gain and average heart rate; activity notes and feelings; and the achievements your history has earned.
- More detail: per-kilometre splits, time in heart-rate zones, pacing and grade-adjusted pace; smoothed pace and relative elevation series without coordinates; which activities share a route, without coordinates; your training profile (maximum and resting heart rate, zones, threshold pace, functional threshold power) and training analytics such as training load, fitness and fatigue.
- Routes: route coordinates and altitude.
- Full samples: the recorded samples with coordinates, time offsets, speed, GPS accuracy, heart rate, cadence and power.
- Blood glucose, a separate permission: glucose readings with their times, around an activity or for a period you ask about, with summary counts.
- Charts and workouts, a separate permission: the charts and workouts the AI created, and its achievement and training-profile suggestions, which you approve or reject in the app.
- Imports, a separate permission: a single-use link for uploading activity files, and the outcome of each uploaded file.
- Feedback, any connection: the report the AI sends for you.
Retention and deletion.
Synced activities remain in your account until a deletion reaches the service. A small deletion record remains so other devices can apply the change. Turning off blood-glucose sync queues removal of the account copy when the request reaches the service. Feedback reports expire after 90 days. An AI connection’s refresh token stops working after 30 days without use and 90 days after you approved it, so the AI must ask you to reconnect. Connection records and their access history stay with your account, including after you revoke a connection, until you delete your account. You can delete your account in the app under Settings, Account. That erases the account, its synced activities and glucose readings, its AI connections and their access log from the service; activities already on your device stay there, and feedback reports you sent still expire on their own schedule. Operational logs and backups may be retained as needed to run, secure and recover the service.
Your choices.
You can use local activity recording without an account, leave sync or glucose sync off, choose the access granted to each AI connection, change those permissions and revoke a connection. Revoking stops future access; it does not recall information already sent to another provider.
Security.
The hosted service uses HTTPS in transit. Activity payloads, synced glucose values and feedback payloads are encrypted at rest with a server-held key. This is not end-to-end encryption: the server can decrypt records to provide sync and permitted AI access. See Security and your data for the product’s current safeguards and boundaries.
Children.
PTrace is not directed to children under 13, and we do not knowingly collect their personal information.
Changes to this policy.
We may update this policy as PTrace changes. We will update the effective date on this page when we do.
Who we are, and contact.
PTrace is provided by Stockholm Department AB, a company registered in Sweden, which is the controller of the personal data described in this policy.
Questions or privacy requests can be sent to studio@department.se or through PTrace support. Do not include route coordinates, health readings or passwords in a report.