1. Scope
This Policy applies to the Truvyo public website, the Truvyo Android app (com.truvy.app), Truvyo's iOS app where available, and related authentication, database, storage, cloud-function, notification, moderation, verification, analytics, support, and account-deletion services.
It is the canonical Policy for Truvyo services. Existing app-policy routes point here.
2. Information you provide
Depending on the features you use, Truvyo may collect:
- name, username, phone number, email address, account identifiers, date of birth, gender, biography, profession, skills, profile links, and other profile details;
- reviews, ratings, experience descriptions, comments, replies, reactions, reports, disputes, removal requests, and support requests;
- private messages and conversation metadata needed to deliver and manage conversations;
- Vibes, reels, photos, videos, profile and cover images, files, and other media you upload;
- privacy, discovery, notification, language, consent, and account settings;
- identity, selfie, document, proof, business, or other verification material you choose or are required to submit; and
- purchase, subscription, product, transaction, entitlement, and purchase-token status where paid features are used.
3. Public contact and support requests
When you use Contact Us on the public website, Truvyo receives your name, email address, selected topic, message, submission timing field, and an empty anti-spam honeypot field. The contact identity is stored separately from the main support ticket and is available only through authorized support workflows.
Truvyo also processes limited request, origin, security, duplicate-prevention, and rate-limit metadata needed to validate the submission and prevent abuse. The browser does not create the ticket identifier, write directly to the database, or receive Truvyo's destination email address. Temporary rate-limit records carry an expiry time.
Contact and support information is used to review, manage, secure, and respond to the request. Submitting the form does not itself send an email or create a promise about response time.
4. Information collected automatically
Truvyo may collect the following automatically or when a related feature is used:
- app interactions, feature use, search events, and product analytics;
- device model, operating-system and app version, crash logs, diagnostics, error reports, and device or service identifiers;
- notification tokens used to deliver notifications;
- approximate or precise location when you grant permission and use a location-based feature;
- network, request, authentication, App Check, security, abuse-prevention, rate-limit, and moderation signals; and
- timestamps and technical metadata needed to operate content, accounts, communications, purchases, and audit trails.
The public marketing homepage does not intentionally add advertising trackers or a third-party form service.
5. How we use information
We use information to:
- provide authentication, accounts, profiles, reputation, reviews, Vibes, reels, messaging, notifications, search, uploads, subscriptions, support, and account deletion;
- display public profile and user-generated content according to service behavior and user controls;
- verify identity or account ownership and reduce impersonation, fraud, manipulation, and abuse;
- moderate content, investigate reports and disputes, enforce policies, protect safety, and comply with law;
- process and confirm purchase entitlements without receiving full payment-card data;
- measure use, diagnose faults, improve reliability and performance, and personalize supported experiences; and
- communicate about account, safety, support, privacy, or service matters.
6. Public profiles, content, and private areas
Profile details, reviews, Vibes, comments, replies, and other content may be visible to other users or the public according to Truvyo's functionality, your choices, and applicable privacy or visibility controls. Information you publish can be copied or reshared by others outside Truvyo.
Private messages are delivered to the intended conversation participants and are not public profile content. Truvyo may access or preserve communications where reasonably necessary for delivery, support, safety, abuse investigation, policy enforcement, or legal compliance.
Where anonymous review posting is available, public viewers do not see the author's public account identity for that review. Truvyo retains the real account relationship for moderation, abuse prevention, disputes, investigations, and legal compliance.
7. Sharing and disclosure
Truvyo does not sell personal information. We may disclose information:
- to service providers that operate, secure, analyze, or support Truvyo;
- to conversation participants or the public when needed for features you choose to use;
- to app stores and payment processors for purchases and entitlement management;
- when required by applicable law, court order, or valid legal process;
- to protect users, Truvyo, or others; investigate fraud, abuse, or security incidents; resolve disputes; or enforce policies; and
- in connection with a merger, acquisition, financing, restructuring, or transfer of assets, subject to applicable safeguards.
The current production implementation does not show advertising-data sharing.
8. Service providers
Current service providers and platform operators may include:
- Google Firebase and Google Cloud for authentication, databases, storage, Cloud Functions, App Check, notifications, analytics, crash reporting, security, and hosting;
- Google Maps Platform for supported map and location features;
- Google Gemini for supported automated content-moderation processing;
- Google ML Kit for supported on-device translation and language features;
- WATI for WhatsApp notifications only where that channel is enabled and the user has opted in; and
- Google Play and Apple App Store for app distribution and supported in-app purchases or subscriptions.
These providers process information under their own terms and privacy notices and, depending on the service, as processors for Truvyo or independent controllers. Truvyo does not claim that every provider or feature is active for every user or platform.
9. Location
Truvyo may process approximate or precise location when you grant device permission and use profile, map, nearby discovery, or location-based search features. You can control location permission in device settings. Some related features may not function when permission is denied or removed.
10. Identity and business verification
Some users, actions, or features may require phone, email, manual KYC, identity, or business verification. Truvyo may process submitted documents and selfie or supporting images to verify identity, reduce fraud and impersonation, enforce safety rules, and maintain necessary audit records.
Access to verification material is restricted to authorized workflows. This Policy does not claim that AuthBridge or any other named external KYC provider is active in production. Verification data may be processed internally and, if a provider is introduced or used, under the disclosures and safeguards applicable to that processing.
11. Automated processing and moderation
Truvyo may use automated systems, including Google Gemini where implemented, to identify harmful or policy-violating content, generate moderation signals, or support summaries and reputation features. Review text or other relevant content may be processed for these purposes.
Automated output may be incomplete or wrong and is not a verified fact or professional judgment. Content may be approved, limited, flagged for human review, or rejected under Truvyo's moderation process. Users may use available reporting, dispute, or support routes to raise concerns.
12. Retention
We retain information while needed to provide Truvyo and for legitimate purposes such as security, fraud and abuse prevention, moderation, support, dispute resolution, legal compliance, enforcement, audit trails, transaction records, and backup recovery cycles. We do not state a universal fixed retention period where none has been approved.
After account or content deletion, some records may be deleted, anonymized, de-identified, or retained where permitted or required for those purposes. Shared records may be anonymized rather than removed when deletion would affect another user's history, conversation, safety record, dispute evidence, or required audit trail. Temporary anti-abuse records with expiry fields are eligible for automated deletion.
13. Security
Truvyo uses reasonable technical and organizational measures such as encryption in transit, authentication, access controls, server-side validation, Firebase App Check where applicable, rate limits, isolated identity records, moderation, and audit logging.
No transmission, storage, or processing method is completely secure. Truvyo cannot guarantee absolute security.
14. Your controls and rights
Depending on applicable law and the features you use, you may be able to access or correct profile details, manage privacy and discovery settings, control notifications and device permissions, manage or delete supported content, withdraw consent where processing relies on consent, object to or restrict certain processing, or request access, correction, or deletion of personal information.
Requests may require identity or account-ownership verification. Some rights are subject to lawful exceptions, including security, fraud prevention, legal obligations, disputes, the rights of others, and service integrity.
15. Account deletion
You can start account deletion in the Truvyo app through the available account and privacy settings. You can also submit a request at truvyo.app/delete-account. Truvyo verifies account ownership before processing a web request.
See the deletion page for current submission methods and the categories of data normally deleted, anonymized, or retained for limited lawful purposes.
16. International processing
Truvyo and its service providers may process or store information in countries other than the one where you live. Where required by applicable law, Truvyo takes appropriate steps intended to protect international transfers and processing.
17. Children's privacy
Truvyo is intended for users aged 18 and older and is not directed to children. If Truvyo learns that a child has provided personal information in violation of this Policy, it may delete the information and disable the account as appropriate. See the Child Safety Standards for safety reporting.
18. Updates to this Policy
We may update this Policy as Truvyo, its providers, or legal requirements change. The current version and effective date will be posted here. Where required, we may provide additional notice through the service or another appropriate channel.
19. Contact
For privacy questions, data requests, legal notices, or complaints, contact Truvyo at hello@truvyo.app. This is a legal and compliance disclosure; the marketing homepage continues to use Contact Us without exposing the address.
