Privacy Policy for TREVOO

1. Introduction

TREVOO is operated by the TREVOO development team ("TREVOO," "we," "our," or "us"). The app is currently managed by its creator and development contributors.

If you have questions, requests, or complaints, contact:
📩 support@trevoo.app

2. Personal Data You Provide

We collect information you provide directly, including:

• Contact Information: Name and email address (for account creation, verification, and support).
• Account Details: Username, profile photo, bio, and birthdate (for age verification). Passwords are encrypted and never visible to us.
• Payment Information: Processed securely by Apple App Store (iOS) or Google Play Store (Android); TREVOO never sees or stores your payment card details.
• Interactions: Posts, messages, comments, reels, audio spaces, and hubs you create or join.

3. Sensitive Data

TREVOO does not intentionally collect sensitive data (e.g., health information, political views, religion, biometric identifiers, precise geolocation).

If you voluntarily share such information in posts or messages, you do so at your own discretion.

4. Automatically Collected Information

When you use TREVOO, we automatically collect:

Device Information:

• Device type and model
• Operating system and version
• App version
• Device identifiers (for crash reporting and analytics only)
• Advertising ID (can be reset in device settings)

Usage Data:

• Feature interactions
• Crash logs and performance metrics
• Session duration and frequency

Network Information:

• Local network access (only for real-time audio/video via Agora SDK)
• No IP address collection for advertising or tracking purposes

Live Audio/Video (Agora SDK):

TREVOO uses the Agora SDK to enable live audio and video features. Agora may temporarily access your local network to optimize performance between nearby users. Agora does not store your audio/video data permanently. You can deny or revoke permission anytime in your device settings.

5. How We Use Your Information

We use your information only to:

• Operate and maintain your account
• Provide features like messaging, audio spaces, reels, and content creation
• Process subscriptions and in-app purchases (via Apple or Google)
• Improve app stability, security, and user experience
• Communicate essential updates or optional marketing (opt-in only)
• Comply with legal obligations or resolve disputes

We never use your personal data for targeted advertising.

6. Lawful Bases for Processing (GDPR)

For EU/EEA/UK users, processing may rely on:

• Consent (explicit permission for certain features)
• Performance of contract (providing the app and services)
• Legitimate interests (e.g., security, troubleshooting, fraud prevention)
• Legal obligations (compliance with laws)

7. Data Sharing and Disclosure

We do not sell your data.

We may share limited information with:

Service Providers:

• Agora (live audio/video streaming)
• Firebase (authentication, cloud storage, push notifications, analytics)
• RevenueCat (subscription management)
• OpenAI (AI chat feature - user consent required, see Section 16 for full details)
• Apple App Store / Google Play Store (payment processing)
• Google AdMob (non-personalized ads)
• Google Play Services (authentication, notifications, app updates, device verification)

All partners operate under GDPR-compliant or equivalent data-protection agreements and are contractually prohibited from using your data for their own purposes.

Legal Requirements:

We may disclose information if required by law, court order, or to:

• Protect safety and prevent harm
• Investigate fraud or abuse
• Comply with government requests

8. International Data Transfers

Your data may be transferred to countries where TREVOO or our partners operate, including the United States.

We rely on:

• EU Standard Contractual Clauses (SCCs) for EU/EEA transfers
• UK International Data Transfer Agreement (IDTA) for UK transfers
• Equivalent safeguards for other regions

9. Advertising and Analytics

Advertising:

TREVOO uses Google AdMob to display non-personalized ads. AdMob may collect:

• Device type and OS version
• Advertising ID (resettable identifier)
• General region (country/state, not precise location)
• Ad interaction events

No sensitive personal info (names, emails, messages) is ever shared with advertisers.

Opt-Out of Personalized Ads:

For iOS:

Settings > Privacy & Security > Tracking > TREVOO (toggle off)

For Android:

Settings > Google > Ads > Opt out of Ads Personalization (toggle on)

Reset Your Advertising ID:

iOS:

Settings > Privacy & Security > Apple Advertising > Reset Advertising Identifier

Android:

Settings > Google > Ads > Reset Advertising ID

App Tracking Transparency (iOS):

TREVOO requests permission through Apple's App Tracking Transparency (ATT) framework. You can:

• Allow tracking for personalized ads and analytics
• Deny tracking (ads will still appear but won't be personalized)

To manage: Settings > Privacy & Security > Tracking > TREVOO

Analytics:

We use Firebase Analytics to understand app usage patterns (e.g., which features are most popular, crash rates). All analytics data is aggregated and anonymized.

10. Device Permissions

TREVOO requests the following permissions:

iOS Permissions:

• Camera: Capture photos and videos for posts, reels, and video chat (Optional)
• Microphone: Record audio for voice messages, reels, and audio spaces (Optional)
• Photo Library: Select and upload photos/videos from your gallery (Optional)
• Photo Library (Save): Save media from the app to your device (Optional)
• Local Network: Optimize real-time audio/video performance via Agora (Optional)
• Notifications: Receive push notifications for messages, likes, and updates (Optional)
• Tracking (ATT): Provide personalized ads and analytics (Optional)

Manage in: iOS Settings > TREVOO or iOS Settings > Privacy & Security

Android Permissions:

• Camera: Capture photos and videos for posts, reels, and video chat (Optional)
• Microphone: Record audio for voice messages, reels, and audio spaces (Optional)
• Storage/Photos: Select and upload photos/videos, save media (Optional)
• Notifications: Receive push notifications for messages, likes, and updates (Optional)
• Internet: Connect to TREVOO servers (Required)

Manage in: Android Settings > Apps > TREVOO > Permissions

Google Play Services:

TREVOO for Android uses Google Play Services to provide:

• Firebase authentication and cloud messaging
• Push notifications
• App updates and security patches
• Device integrity verification
• Google Sign-In (optional)

Google Play Services operates under Google's privacy policy: https://policies.google.com/privacy

11. Data Security

We use industry-standard security measures:

• Encryption in transit (TLS/SSL)
• Encrypted password storage (hashed, never plain text)
• Secure cloud infrastructure (Firebase, AWS)
• Access controls and authentication

No system is 100% secure. Data transmission over the internet is at your own risk.

12. Data Retention

We retain your data only as long as necessary to:

• Provide the service
• Comply with legal obligations
• Resolve disputes
• Maintain security and prevent abuse

Retention Periods:

• Active accounts: Data retained indefinitely while account is active
• Deleted accounts: Personal data deleted within 30 days (except where legally required to retain)
• Messages and content: Retained while your account is active or until you delete them
• Crash logs and analytics: Retained for 90 days
• Subscription records: Retained for 7 years (tax and legal compliance)

After retention periods expire, data is permanently deleted or anonymized.

13. Your Rights

Depending on your region, you may:

• Access: Request a copy of your personal data
• Correction: Fix inaccurate or incomplete data
• Deletion: Request deletion of your account and data (subject to legal exceptions)
• Withdraw Consent: Revoke consent for optional features (e.g., notifications, AI chat)
• Object to Processing: Object to certain data uses (e.g., direct marketing)
• Data Portability: Request your data in a machine-readable format
• Lodge a Complaint: File a complaint with your local data protection authority

To submit a request: support@trevoo.app

Identity verification may be required for security purposes.

14. Account Deletion

IMPORTANT: Deleting your account will permanently remove all your data, including posts, messages, profile information, and content. This action cannot be undone.

Method 1: In-App (Recommended)

1. Open TREVOO app
2. Go to Settings > scroll down
3. Tap "Delete Account"
4. Confirm deletion

Method 2: Email Request

Send an email to support@trevoo.app with:

• Subject: "Account Deletion Request"
• Your registered email or username
• Confirmation that you want to permanently delete your account

We will process deletion requests within 30 days. Once deleted, your data cannot be recovered.

Note: Account deletion is provided in compliance with Google Play's data deletion requirements and GDPR/CCPA rights.

15. Cookies and Tracking

TREVOO does not use cookies or third-party trackers inside the mobile app.

16. AI Processing & Third-Party AI Services (OpenAI)

TREVOO includes an optional AI chat feature powered by OpenAI. When you use this feature:

Data Sent to OpenAI:

• The text you enter in the AI chat
• Minimal context (e.g., selected mood or topic)

Data NOT Sent:

• Your name, email, phone number
• Password or payment information
• Private messages with other users
• Account identifiers

OpenAI's Use:

OpenAI processes this data solely to generate responses and does not use it to train public models. OpenAI's data practices are governed by their own privacy policy: https://openai.com/policies/privacy-policy

Your Choice:

By using the AI chat feature, you consent to this specific data sharing. If you do not want data sent to OpenAI, simply do not use the AI chat feature.

Consent Management:

• First-time users see a consent dialog before accessing AI chat
• You can revoke consent anytime in Settings > Privacy > AI Chat Data Sharing
• Revoking consent disables AI chat features but does not affect other app functionality

17. Children's Privacy (COPPA & GDPR-K)

TREVOO is designed for users aged 13 and older.

We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided personal data, we will:

• Delete the account immediately
• Delete all associated personal data
• Notify the account creator (if possible)

Parental Rights:

If you believe your child under 13 has created an account, contact us immediately at support@trevoo.app and we will delete it.

Age-Restricted Content:

Content marked as age-restricted (17+) is automatically hidden from users under 17 based on their declared birthdate.

18. Child Safety & Abuse Prevention

TREVOO strictly prohibits child sexual abuse material (CSAM) and exploitation.

Zero Tolerance:

Violations result in:

• Immediate account termination
• Content removal
• Report to the National Center for Missing & Exploited Children (NCMEC)
• Cooperation with law enforcement

Reporting:

To report CSAM or child exploitation:

• Use in-app reporting tools
• Email: support@trevoo.app
• NCMEC CyberTipline: https://report.cybertip.org

We also have moderators in the app to moderate content, and to make sure policies are not being violated.

19. Changes to This Policy

We may update this policy periodically. The updated version will always include a "Last updated" date at the top.

Notification:

For material changes, we will notify you via:

• In-app notification
• Email (if you provided one)

Continued use of TREVOO after changes means you accept the revised Policy.

20. Regional Compliance

• GDPR (EU/EEA): Full compliance with General Data Protection Regulation
• UK GDPR: Full compliance with UK Data Protection Act 2018
• CCPA (California): Compliance with California Consumer Privacy Act
  • Right to know what data is collected
  • Right to delete data
  • Right to opt-out of data "sales" (we don't sell data)
• Other Regions: Users worldwide receive equivalent protections based on local privacy laws.

21. Contact & Data Protection Officer

For privacy questions, data requests, or complaints:

📩 Email: support@trevoo.app (response time: 1-3 business days)

EU/EEA/UK Users:

You have the right to lodge a complaint with your local supervisory authority if you believe your data rights have been violated.

Response Time:

We aim to respond to all inquiries within 30 days.