TrifoylPrivacy Policy
Last updated：
Trifoyl (the "Service") is operated by admin ("we", "us"). This policy explains how we collect, process and use your personal data.
Summary
- Messages, files and calls are end-to-end encrypted. We cannot read them.
- We do not ask for a phone number or email, and we do not sell your data or use it for advertising.
- You can delete your account at any time in the app or on the web.
Operator and contact
- Operator: admin
- Email: support@trifoyl.com
Purposes
To provide the communication service, including creating and managing accounts, delivering messages and files, calls and notifications, and keeping the Service secure and free of abuse.
Categories of personal data
| Category | What it includes |
|---|---|
| Account data | Account identifier, sign-in method identifiers, username (if you sign in with a password) |
| Device data | Push notification identifier (Android only) |
| Usage data | Group and contact relationships, time and size of messages, service logs |
| Connection data | IP address, device model and operating system version during calls |
| Encrypted content | Messages, files, display name, avatar, device names and similar content, stored end-to-end encrypted so that we cannot read it |
Retention, location, recipients and handling
Retention
| Data | Kept for |
|---|---|
| Account, devices, groups and contacts | Until you delete your account, remove the device or leave the group |
| Encrypted messages and files | Up to 730 days; files are deleted within 30 days once no longer used; files in use, such as avatars, are kept while in use |
| Service logs | 14 days |
| Backups | 7 days |
Location
Where we and the service providers we engage to process personal data are located.
Recipients
We do not sell your personal data or share it with advertisers. Only the following types of service providers process some data, to the extent needed to provide the Service, and protect it to the same standard as this policy:
- Cloud hosting providers: hosting and storage.
- Push notification providers (Android only): new-message notifications, which never contain message content.
When you paste a URL into a message, your device connects to that website directly to create a preview. That website handles the connection under its own policies.
Handling
All data is encrypted in transit. Messages, files and calls are also end-to-end encrypted, so only the devices in the conversation can decrypt them.
Your rights
You may ask to inquire about or review your personal data, obtain a copy, supplement or correct it, have us stop collecting, processing or using it, or delete it. You can view, change or delete most data directly in the app. For anything else, email support@trifoyl.com. Because content is end-to-end encrypted, we cannot view or restore message content for you.
Deleting your account
You can delete your account in the app under Settings → Account → Delete account, or sign in and delete it on the web: https://trifoyl.com/en/delete-account.
When you delete your account, we immediately delete your sign-in methods, devices, profile, settings and private message history. Files you uploaded are deleted within 30 days, and backups rotate out within 7 days. The following remain:
- Messages you sent in groups stay in those groups, still encrypted.
- Your account identifier and the identifiers of your sign-in methods and devices are marked as deleted and kept, so they cannot be reused.
If you do not provide data
Account data is required to create an account and sign in. Without it you cannot use the Service. You may decline notification, camera and microphone permissions, but you will not get notifications or be able to make calls or scan QR codes.
Changes
When we change this policy, we update this page and the date at the top. We announce significant changes on this page before they take effect.