AuditTract ("the App") is designed as a privacy-first, local-storage compliance and audit workspace. We do not operate central user accounts, cloud databases, or third-party advertising and analytics trackers.
All compliance evaluations, auditor notes, evidence file references, asset inventory records, employee custodian entries, and scan results you create in AuditTract are stored locally on your device using Apple's SwiftData framework and hardware-protected sandbox storage.
To provide live vulnerability lookups and threat intelligence feeds, the App makes direct, read-only network requests from your device to:
services.nvd.nist.gov) for public CVE data.cisa.gov) and NIST NVD (nvd.nist.gov) public RSS feeds for security advisories.HEAD request directly from your device to the domain or IP address you entered to inspect public transport security headers (such as HSTS and CSP).These requests do not include personal identifiers, device advertising IDs, or your internal audit records.
Subscriptions and lifetime licenses are processed securely by Apple through StoreKit and the App Store. We do not receive or store your credit card or billing details.
Because your data resides strictly on your device, you remain in full control of it at all times. You can delete individual items inside the App or permanently remove all stored data by deleting the App from your device.
AuditTract is a professional compliance tool not directed at children under 13, and we do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. Any updates will be posted at this URL with a revised effective date.
If you have questions about this Privacy Policy, please contact us at support@audittract.com.