Privacy Policy

Who we are and what this policy covers

Trueye is operated by Trueye Team, described in this policy as we or us. This policy explains what we collect when you use trueye.app and our applications, why we use it, who we share it with, how long we keep it, and the choices you have. It does not cover the practices of third-party services you may reach from Trueye.

Information we collect

We collect the information needed to run Trueye, and nothing more than that.

• Account details: your email address, display name, a hashed password, the identifier your sign-in provider gives us if you use Google, Facebook, or Apple, and an avatar if you upload one.
• Content: the photos you upload, their titles and descriptions, and your comments, likes, follows, and blocks.
• Photo metadata: capture time, GPS coordinates when the file contains them or you supply them, and camera fields such as make, model, lens, ISO, exposure time, aperture, focal length, exposure bias, colour temperature, white balance, and flash.
• Technical records: your IP address for security and rate limiting, and request records containing the method, route, status code, a request ID, and duration. We never keep query strings, tokens, cookies, email addresses, or storage keys in those records.

How we use information

We use this information to create and protect your account, verify your email address, publish and deliver your photos in the feed, on the map, and on photo pages, place photos where they were taken, work out a nearby place name, enforce upload quotas, moderate content, keep Trueye reliable and secure, answer your questions, and meet our legal obligations. We do not sell your personal information, and Trueye carries no advertising.

Legal bases for processing

Where the GDPR or a similar law applies, we rely on the following bases.

• Performance of our contract with you, to provide the service you ask for.
• Our legitimate interests in securing Trueye, preventing abuse, moderating content, and improving the service.
• Your consent, for optional features and for publishing location.
• Legal obligation, where we must keep or disclose information.

Location and photo metadata

Location is what makes Trueye useful, and you decide what becomes public. When a photo with coordinates is published, its capture location is published with it. Before we look up a nearby place, coordinates are snapped to a grid of about 30 metres, and the place snapshot we store keeps only country, region, city, district, locality, and road, never a house number or postcode. Resolved places are attributed to OpenStreetMap contributors. Your original uploads stay in private storage that only you and our administrators can reach, while other people see processed image variants.

When we share information

We share information with the providers that run Trueye, and with nobody else except as described below. We do not sell personal information.

• Service providers: Cloudflare for computing, storage, and image delivery; Resend for verification email; Google, Facebook, or Apple when you choose to sign in with them.
• Place lookup: Photon or Nominatim turn coordinates into a place name. A lookup receives only snapped coordinates, never your account identity.
• Legal and safety: where the law requires it, or to protect the rights and safety of our users and the public.
• Within Trueye Team, for the operation, support, and moderation of the service.

How long we keep information

We keep account and content records while your account exists. When you delete a photo, we remove it from the public service and delete the stored files. When you ask us to close your account, we delete the account and its content, keeping only what the law requires or what we need to resolve disputes, prevent abuse, or preserve audit records. Upload sessions, place lookups, and request logs are kept for limited operational periods and then removed.

Deleting your data

You can ask us to delete all of your data at any time. Write to support@trueye.app from the address linked to your account, and we act on the request as soon as it reaches us: once we have confirmed that the request comes from you, your account and its content, including your account details, avatar, photos, comments, likes, follows, and blocks, are removed from the live service without undue delay, and we confirm to you when the deletion is complete. We keep only what the law requires, or what we need for an ongoing dispute, abuse prevention, or an audit record, and we delete that as soon as the reason no longer applies. Any copies that remain in encrypted backups are purged as those backups expire. Deletion cannot be undone, and links you shared to deleted photos stop working.

Your choices and rights

You can edit your profile, change who can see your photos, and delete photos at any time in the app. Depending on where you live, you may also have the following rights.

• Access, correct, export, or delete your personal information.
• Restrict or object to some processing, and withdraw consent you have given.
• Complain to your local data protection authority.

How we protect information

Passwords are stored in hashed form, traffic is encrypted in transit, photos live in private object storage reached through short-lived signed upload links, images are delivered through a controlled route, and administrative actions are restricted to verified administrators and written to an audit log. No service can promise perfect security, so please use a strong, unique password and tell us if you notice anything unusual.

Children

Trueye is not intended for children under 13, or under the minimum age set by the law where they live. If you are below the age of majority, please use Trueye only with the consent of a parent or guardian. If we learn that a child has given us personal information without the required consent, we will delete the account and its content.

International transfers

Trueye runs on a global network, so your information may be processed in countries other than the one you live in. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses, and we apply the commitments in this policy wherever information is processed.

Cookies and local storage

We use a session cookie to keep you signed in and a locale cookie to remember your language, together with browser storage that caches your discovery view and the offline parts of the app. We do not use advertising or cross-site tracking cookies, and Trueye does not currently include third-party analytics. You can clear cookies and site data in your browser at any time, though some parts of Trueye will then stop working.

Changes to this policy

We will update this policy when our practices change, and the effective date above always tells you which version applies. If a change is material, we will give notice in the app or by email before it takes effect. Continuing to use Trueye after a change means you accept the updated policy.

Contact us

Questions, requests, and complaints about privacy can be sent to Trueye Team at support@trueye.app. If you live in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to complain to your local supervisory authority.