Data we collect我们收集的数据

We do not operate an account, analytics, advertising, tracking, or cloud relay service for TraceFence Sentinel. We do not receive your agent prompts, conversations, project paths, pairing tokens, biometric data, device identifiers, or usage history.

TraceFence Sentinel 不提供账号、分析、广告、追踪或云端中转服务。我们不会接收你的 Agent 提示词、会话内容、项目路径、配对令牌、生物识别数据、设备标识符或使用历史。

Website analytics (not app analytics)网站访问统计（不涉及 App）

The public tracefence.com website uses our self-hosted Umami analytics to count page views and understand aggregate traffic. The tracker is served through aiaiai.help and hosted on our Tencent Cloud server. It does not send search parameters or URL fragments, and it is not loaded when Do Not Track or Global Privacy Control is enabled. This does not change the local-first data boundary of the TraceFence apps. Website analytics do not receive agent prompts, conversations, project paths, or pairing tokens.

tracefence.com 公共网站使用自托管 Umami 统计页面浏览并了解汇总流量。采集脚本经 aiaiai.help 提供，服务托管在我们的腾讯云服务器。统计不发送网址查询参数或锚点；开启“请勿追踪”或全局隐私控制时不会加载。此项网站统计不改变 TraceFence App 的本地优先数据边界，也不接收 Agent 提示词、对话、项目路径或配对令牌。

Direct device connection设备直连

The iPhone app connects directly to the Mac endpoint you pair. Requests may travel over your local network, Tailscale tailnet, or another VPN that you configure. Those network providers have their own privacy terms.

iPhone App 只会连接你配对的 Mac 地址。连接可能经过你的局域网、Tailscale Tailnet 或你自行配置的其他 VPN；这些网络服务适用其各自的隐私条款。

Information stored on device设备本地保存的信息

• paired Mac name, addresses, and encrypted access token已配对 Mac 的名称、地址和加密访问令牌
• language, notification, connection, and security preferences语言、通知、连接和安全偏好
• short-lived session summaries needed to render the control interface用于展示控制界面的短期会话摘要

Removing a paired Mac in Settings deletes its saved connection data from the iPhone.在设置中移除已配对 Mac，会从 iPhone 删除该连接资料。

Permissions系统权限

• Camera: scan the pairing QR code shown on your Mac.相机：扫描 Mac 显示的配对二维码。
• Local Network: discover and connect to your Mac.本地网络：发现并连接你的 Mac。
• Face ID, Touch ID, or passcode: protect pairing and remote controls. Apple performs authentication; TraceFence never receives biometric data.面容 ID、触控 ID 或设备密码：保护配对和远程控制。认证由 Apple 完成，TraceFence 不会获得生物识别数据。
• Notifications: alert you to approvals, agent replies, and task completion while the app can refresh.通知：在 App 可以刷新时提醒权限审批、Agent 回复和任务完成。

Security and retention安全与保留期限

Pairing tokens are stored in the iOS Keychain and sensitive actions require device authentication. Session data remains on your devices and is retained only as needed for local history and monitoring. You control deletion by removing the pairing, clearing app data, or uninstalling the app.

配对令牌保存在 iOS 钥匙串中，敏感操作需要设备认证。会话数据保留在你的设备上，仅按本地历史和监控需要保存。你可以通过移除配对、清除 App 数据或卸载 App 完成删除。

Children, changes, and contact儿童、政策变更与联系

TraceFence is a developer productivity tool and is not directed to children under 13. Material policy changes will be published on this page with a new effective date.

TraceFence 是开发者生产力工具，不面向 13 岁以下儿童。重要政策变更会在本页面发布，并更新生效日期。

Contact privacy support联系隐私支持