Privacy Policy

The short version

We collect the least data we can. We use it to take your payment, send you what you bought, and improve the game. We don’t sell your data. You can ask us to delete everything at any time.

Who we are

truths Ltd is the data controller for information collected through truths.app. Contact us at privacy@truths.app.

What we collect

• Your email address: when you purchase or subscribe to the Sunday drop.
• Payment details: handled by Stripe. We never see or store full card numbers.
• Country, approximate location, language: derived from your IP address at page load so we can show the right currency. We don’t store your IP alongside account data.
• Gameplay events: which cards were drawn and saved, for delivering the “Year in truths” recap and improving the deck. We never store the content of answers. Those are spoken, not typed.
• Analytics: aggregate, cookieless page and interaction metrics.

Why we’re allowed to use it

• Contract: to deliver what you’ve purchased.
• Legitimate interest: to improve the product and prevent fraud.
• Consent: for the Sunday drop email list.

Who we share it with

Only the processors we need to run the service: Stripe (payments), our email service provider (transactional and marketing email), our analytics provider, and our hosting provider. Each is contractually bound to process your data only for the purposes we specify.

We never sell your data and we don’t share it for advertising.

How long we keep it

• Purchase records: 7 years, for tax and legal compliance.
• Email list: until you unsubscribe.
• Gameplay events: rolling 24 months.

Your rights

Under UK GDPR, you can ask us to:

• See what data we hold about you.
• Correct it.
• Delete it.
• Restrict how we use it.
• Give you a portable copy.
• Stop processing it for marketing.

Email privacy@truths.app and we’ll handle it within 30 days. You can also complain to the ICO (ico.org.uk) if you’re unhappy with how we’ve handled your data.

International transfers

Some of our processors (e.g. Stripe, analytics, email) operate outside the UK. Where data leaves the UK, we rely on the UK’s International Data Transfer Agreement or an equivalent safeguard.

Children

truths is for adults. The service is not directed at anyone under 18, and we don’t knowingly collect data from minors.

Changes

We’ll update this policy when our practices change. Material changes are notified by email to active customers.