Legal
Privacy policy
Last updated 2026-10-07
What we collect
We collect the email address you sign in with, your user ID, the species and runs you save, your purchase history, and the days on which you open the app. If you turn on alerts, we also keep a push token for your device and the alert choices you make.
We record each day you open the app, as the date only, to count how many people come back. If you have not created an account, the app makes a guest account for you, and we keep the days on it. If you then create an account, the days stay with it. If you do not, they are deleted with the guest account. We do not record the time, the screens you open or what you tap.
A push token is an address that Apple gives your device so that we can send it alerts. We keep it on your account only while alerts are on for that device. We delete it when you sign out, when Apple tells us it no longer works, when that device has not opened Trophik for 30 days, or when you delete your account. An alert holds the name of your species and what it did, and Apple delivers it.
We also count how often the Field Pass page opens, how often a usage limit is reached, and for which limit, and how often a purchase or a restore starts and ends, as daily totals with no account, device or location attached. We keep these totals in our own database. Our hosting provider's ordinary access logs are separate. These totals are separate from the days you open the app, which are kept on your account.
When the app or our server fails, we send an error report to Sentry, with your account removed. A crash report from the app may include a random identifier created at install, and a code that cannot be reversed, derived from your device's app-vendor identifier, not linked to your account.
User content
User content is the text you write to describe a strategy, the name you give a species, and any page you choose to share. A shared page carries a report link, described in the terms of use.
Anthropic, through OpenRouter, processes the text you type into the builder, to compile it into rules. We do not keep that text as training data.
Who processes it
| Processor | What it does with your data |
|---|---|
| Anthropic | Reads the text you write to describe a strategy, to turn it into rules. |
| OpenRouter | Routes the text you write to describe a strategy to Anthropic, to compile it into rules. |
| Supabase | Stores your account, your saved species and runs, and enforces who can see them. |
| Cloudflare Turnstile | Checks that a sign-in to the web app at app.trophik.ai comes from a person. It is served from challenges.cloudflare.com and its subdomains, and loads only when a check is needed. Your browser connects to Cloudflare directly, so Cloudflare receives your IP address and the usual request details. Cloudflare's Turnstile privacy addendum describes what Turnstile collects. |
| RevenueCat | Tracks which store sold your subscription. A pass you buy will unlock Field Pass on every platform where you sign in. That cross-platform unlock is not open yet. |
| Stripe | Processes a subscription you buy on the web, and gives you a portal to manage it. |
| Netlify | Hosts trophik.ai and app.trophik.ai, and runs the web app's functions. Netlify receives your IP address and the usual request details, such as your browser or app version, with each request, and keeps them in its own logs. |
| Apple Push Notification service | Delivers the alerts you turn on. It receives your device's push token and the text of each alert. |
| Sentry | Receives an error report when the app or the web app's functions fail. A report holds the error and where in the code it happened, the app version, and details of the device and system, such as the model, the system version, the language and the time zone. A crash report from the app may also include a random identifier created when the app was installed, and a code that cannot be reversed, derived from your device's app-vendor identifier. Neither is linked to your account. Before a report leaves the app or our server, we remove your account, the contents of requests, and text you typed. |
How long we keep it
Draft. We will update this text before launch.
We keep your account data, meaning your email, your alias, your species, your runs and your shares, until you delete your account.
Your account and data are deleted right away. Backups age out within 30 days.
We keep server logs for 30 days.
We keep the days you open the app and your alert choices until you delete your account. We keep a push token until you sign out of that device, until Apple tells us it no longer works, until that device has not opened Trophik for 30 days, or until you delete your account. We keep a record of each alert we sent for 90 days.
The text you write to describe a strategy is sent to the model provider to compile it. We do not keep it as training data.
Your rights
To ask for a copy of every row you own, email support@trophik.ai from your account's own address. You can delete your account at any time. In the app, open Account and choose Delete account. The web page at /delete-account explains what deletion does and does not cover.
A copy of your data includes your visit days, your alert choices and the alerts we sent. It does not include push tokens, which work only as an address for Apple.
Contact
Write to support@trophik.ai with a privacy question.
Paper simulation only.