Privacy Policy

1. Who we are

The data controller is Troth, contactable at hello@troth.one. Our full identifying details are on the Legal Notice page.

Our business entity is in the process of being registered, so no company number is published yet. The Legal Notice explains what that does and does not change, and hello@troth.one reaches the person responsible for your data in the meantime.

2. The app collects nothing

The Troth app runs on your computer. What it learns and stores stays on your machine. It has no analytics or telemetry and does not send your content or usage to us. Your AI conversations, files, and memory never reach our servers.

Two limited exceptions send a request to our servers, and neither carries your content: the update check, where the app asks whether a newer version exists; and license activation and periodic validation, where the app confirms your license is genuine, registers the device against your device limit, and checks the license has not been revoked. These requests carry technical information such as your IP address and a device identifier, never your files, conversations, or memory.

3. What we process, and why

Account data: your email address, your name if you provide it, and your sign-in method (for example email, Apple, or Google), so you can sign in, manage your license, and move it between your devices. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).

License and device data: your license status and a device identifier for each device you activate, so we can enforce your device limit and honour refunds and revocations. Legal basis: contract and our legitimate interest in preventing license abuse (Art. 6(1)(b) and (f)).

Purchase data: your order details and receipts, so we can deliver your license and provide support. Legal basis: contract, and our legal obligations for invoicing.

Payment data: handled by our payment processor (Stripe). We do not store your full card details. Legal basis: contract, and our and the processor's legal obligations.

Server logs: IP address, timestamps, and request data from visits to our website and from the app's update check, kept to keep the service secure and to prevent abuse. Legal basis: our legitimate interest in security (Art. 6(1)(f)).

Website measurement: aggregate page views and page-load performance for troth.one, collected without cookies by Vercel Web Analytics and Speed Insights, and aggregate page views and traffic sources by Google Analytics. Google Analytics runs with its consent signals set to denied and we never grant them, so it writes no cookie and reads nothing from your device; it does receive your IP address and browser details in order to deliver the request and derive an approximate country. No identifier is stored on your device, no profile is built, and nothing follows you to other sites. Legal basis: our legitimate interest in understanding which parts of the site are unclear and where readers come from (Art. 6(1)(f)). This is the website only — the app has no analytics or telemetry.

Support correspondence: what you send us when you ask for help. Legal basis: contract and legitimate interest.

4. Who we share it with

We use a small number of processors to run the store and accounts: our payment processor (Stripe), our authentication and database provider (Supabase), the sign-in providers you choose to use (Apple, Google), our email/delivery provider, Vercel, which hosts this website and provides the cookieless traffic and performance measurement described above, and Google, which provides the cookieless Google Analytics measurement described above. They process data only on our instructions. We do not sell your data.

5. International transfers

Troth is available worldwide. Some of our processors operate outside your country, including outside the EU/EEA. Where that happens we rely on appropriate safeguards, such as the European Commission's standard contractual clauses.

6. How long we keep it

We keep purchase and invoice records for as long as required by tax and accounting law. Other data is kept only as long as needed for the purpose it was collected for, then deleted.

7. Your rights

Under the GDPR and similar laws you may request access to your data, correction, deletion, restriction, portability, and you may object to certain processing. To exercise any right, email hello@troth.one. You also have the right to complain to your local data-protection authority.

8. Cookies

Our website sets only the cookies it strictly needs: what makes the site work, and what keeps you signed in to your account. It sets no advertising or cross-site tracking cookies, and all of its traffic measurement — including Google Analytics, which is configured never to be granted consent — is cookieless, which is why you are not asked to dismiss a consent banner. If we ever add a tool that stores or reads something on your device for a non-essential purpose, we will ask for your consent before it loads. The Cookie Notice has the detail.

9. Changes

We may update this policy. The current version is always at this page, with its last-updated date.