1. Information We Collect

We may collect the following categories of information:

A. Account Information

When you create an account or sign in, we may collect information such as your name (if you provide it), email address, authentication identifiers (for example, account IDs and tokens issued by our authentication provider), OAuth-related identifiers if you sign in with a social provider supported in the Apps, and account or app settings you configure.

B. Subscription Information

If you purchase a subscription, we may receive information about your subscription status, plan, entitlement, renewal status, and transaction-related metadata from our payment or subscription providers. We do not store full payment card details when purchases are processed by Apple or other third-party payment providers.

C. User Content

We may collect content and settings you choose to provide or generate through the Service, such as:

• Prompts and text you submit for enhancement, Ask AI, or related features

• Written context you save (for example, long-form “context” you upload for personalisation)

• Saved templates (including custom templates you create)

• custom context or personalisation settings

• Preferences and workspace-style settings (for example, tone, goals, constraints, output style, and similar fields stored with your profile)

• AI-generated outputs returned to you (for example, enhanced prompts or structured results)

• Derived “memory” items created from your saved context (for example, summarised or extracted memory entries used to personalise responses), which may include vector embeddings used to retrieve relevant memories

  
  

D. Device, Diagnostics, and Usage Information

We may collect technical information such as:

• Device type and operating system version

• App version

• Approximate timestamps of requests or app activity as reflected in our server logs

  
  

E. Support Communications

If you contact us, we may collect your name, email address, and the contents of your message (and attachments you choose to send).

2. How We Use Information

We use information to:

• Provide, operate, maintain, and improve the Service

• Authenticate users and manage accounts

• Deliver writing assistance and AI-powered features (including enhancement, Ask AI, and template workflows)

• Save and sync templates, context, personalisation preferences, and (where enabled) history across sessions and devices

• Manage subscriptions and access to paid features

• Improve reliability and user experience based on usage and performance data

• Respond to support requests

• Monitor for abuse, fraud, security incidents, or misuse

• Comply with legal obligations

  
  

3. How User Content Is Processed

TruPilot is designed to process text and related content that you choose to submit so we can provide writing assistance and related features.

Depending on the feature you use, your content may be:

• Processed on your device (for example, state or text you are editing before it is sent to us), and/or

• Transmitted to our servers, and/or

• Transmitted to third-party providers that help us deliver AI, hosting, authentication, subscriptions, or related functionality.

  
  

We store certain user content and outputs so you can use the Service across sessions and devices, including saved context, templates, personalisation settings, derived memory, and - where the feature is enabled - records of prompt runs (which may include your submitted text and resulting outputs). You may have in-app controls affecting whether certain history is saved (for example, settings stored with your account profile); if history saving is turned off, we attempt not to persist new prompt history as configured, subject to limited exceptions such as security, abuse prevention, or troubleshooting.

We do not rely on a “no storage” model for the core product: persistent features require storing the content you save and, when enabled, history of runs.

4. AI and Third-Party Processing

To provide certain features, we may use third-party infrastructure and service providers, such as providers for:

• Cloud hosting and databases

• Authentication

• Subscriptions and purchase validation

• AI or language model processing

  
  

If your content is sent to a third-party AI or infrastructure provider, that provider may process the content on our behalf and also under its own terms and privacy policy.

Model training: We do not use your content to train our own AI models. Our Service uses third-party model APIs; whether and how those providers use API data is governed by their policies and our agreements with them - please review those providers’ documentation for details.

Instructions to processors: Where we engage service providers as processors, we require them to use personal information only as needed to provide the Service and for security, abuse monitoring, and legal compliance, consistent with our agreements.

5. Sharing of Information

We may share information:

• With vendors and service providers that help us operate the Service (including those listed above)

• With payment, subscription, and purchase validation partners (including Apple ) to process purchases and manage entitlements

• If required by law, regulation, legal process, or governmental request

• To protect the rights, safety, security, or integrity of the Service, our users, or others

• In connection with a merger, acquisition, financing, or sale of assets (where permitted by law)

  
  

We do not sell your personal information (including as “sale” is defined under applicable privacy laws).

6. Data Retention

We retain information for different periods depending on the type of data and why it is collected.

Example retention approach for TruPilot:

• Account information: retained while your account is active and for up to 30 days after deletion request, unless longer retention is required by law or for security reasons

• Saved templates, saved context, personalization settings, and derived memory: Retained until you delete them or delete your account (subject to technical limitations and backups).

• Prompt run history: Retained while your account is active and while the feature/settings allow retention; removed when you delete history, disable saving (for new runs, as supported), or delete your account, subject to [backup / replication] delays.

• Subscription and transaction records: Retained as needed for accounting, tax, fraud prevention, chargebacks, and legal compliance.

• Diagnostics and crash logs: retained for up to [30/90/180/365] days

• Server and security logs: Retained for up to [7 / 30 / 60 / 90] days (adjust to match your logging configuration).

• Support communications: Retained for up to 12 months, or longer if needed to resolve an issue or meet legal obligations.

  
  

When retention is no longer necessary, we delete or de-identify information where reasonably practicable.

7. Your Choices and Rights

Depending on your location, you may have the right to:

• Access certain personal information we hold about you

• Correct inaccurate information

• Request deletion of your account or personal information

• Object to or restrict certain processing

• Withdraw consent where processing is based on consent

  
  

You may also be able to:

• Update account settings within the app

• Delete saved content within the app

• Request account deletion by contacting us at [support@trupilot.co]

  
  

If you are in the EEA, UK, or certain U.S. states, you may have additional rights (including lodging a complaint with a supervisory authority). We will respond consistent with applicable law.

8. Security

We use reasonable technical, administrative, and organisational safeguards designed to protect personal information against unauthorised access, loss, misuse, or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children’s Privacy

TruPilot is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can review and delete it where appropriate.

10. International Data Transfers

We may process and store information in countries other than where you live, including countries where our service providers operate (for example, the United States and regions where database providers, LLM providers, or other vendors host data). Where required by law, we take appropriate steps to protect personal information transferred across borders (for example, Standard Contractual Clauses or other approved mechanisms).

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and may provide additional notice within the Apps or by other appropriate means.

12. Contact Us

If you have questions or requests relating to this Privacy Policy or our data practices, contact us at:

Email: support@trupilot.co