Privacy Policy

1. Who we are

The data controller is Troth, contactable at hello@troth.one.

2. The app collects nothing

The Troth app runs on your computer. What it learns and stores stays on your machine. It has no analytics or telemetry and does not send your content or usage to us. Your AI conversations, files, and memory never reach our servers.

Two limited exceptions send a request to our servers, and neither carries your content: the update check, where the app asks whether a newer version exists; and license activation and periodic validation, where the app confirms your license is genuine, registers the device against your device limit, and checks the license has not been revoked. These requests carry technical information such as your IP address and a device identifier, never your files, conversations, or memory.

3. What we process, and why

Account data: your email address, your name if you provide it, and your sign-in method (for example email, Apple, or Google), so you can sign in, manage your license, and move it between your devices. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).

License and device data: your license status and a device identifier for each device you activate, so we can enforce your device limit and honour refunds and revocations. Legal basis: contract and our legitimate interest in preventing license abuse (Art. 6(1)(b) and (f)).

Purchase data: your order details and receipts, so we can deliver your license and provide support. Legal basis: contract, and our legal obligations for invoicing.

Payment data: handled by our payment processor (Stripe). We do not store your full card details. Legal basis: contract, and our and the processor's legal obligations.

Server logs: IP address, timestamps, and request data from visits to our website and from the app's update check, kept to keep the service secure and to prevent abuse. Legal basis: our legitimate interest in security (Art. 6(1)(f)).

Support correspondence: what you send us when you ask for help. Legal basis: contract and legitimate interest.

4. Who we share it with

We use a small number of processors to run the store and accounts: our payment processor (Stripe), our authentication and database provider (Supabase), the sign-in providers you choose to use (Apple, Google), our email/delivery provider, and our hosting provider. They process data only on our instructions. We do not sell your data.

5. International transfers

Troth is available worldwide. Some of our processors operate outside your country, including outside the EU/EEA. Where that happens we rely on appropriate safeguards, such as the European Commission's standard contractual clauses.

6. How long we keep it

We keep purchase and invoice records for as long as required by tax and accounting law. Other data is kept only as long as needed for the purpose it was collected for, then deleted.

7. Your rights

Under the GDPR and similar laws you may request access to your data, correction, deletion, restriction, portability, and you may object to certain processing. To exercise any right, email hello@troth.one. You also have the right to complain to your local data-protection authority.

8. Cookies

Our website uses only what is strictly necessary to function. If we ever add analytics or non-essential cookies, we will ask for your consent first and describe them in a cookie notice.

9. Changes

We may update this policy. The current version is always at this page, with its last-updated date.