1. Who We Are

Trenaly ("we", "us") is the party responsible for processing your personal data (the data controller) for the website and apps. The Service is intended for users aged 18 or older, and we do not knowingly collect data from children.

2. Data We Collect

Username and email (for registration and sign-in)
Password (stored hashed — we never see it in plain text)
Device type and OS (app only)
IP address and sign-in data (for security and abuse prevention)
Push token (FCM) to deliver app notifications
Your analysis history and results, and your alerts
Subscription info from the store (plan type and expiry)

3. App Permissions

📷 Camera: To capture chart images (optional)
📂 Storage: To read images from the gallery (optional)
🌐 Internet: To connect to our servers (required)

4. AI Image Processing

Chart images are processed by an AI model we built and host on our own servers
We do not send your images to any third party or external AI provider
The full-resolution original image is deleted immediately after analysis
A thumbnail and the result are kept in your Analysis History until you delete them or close your account, and are auto-deleted after 90 days at most

5. How We Use Data & Legal Bases

We use your data to:

Provide the analysis service and manage your account (basis: performance of a contract)
Protect the site and app from unauthorized use (basis: legitimate interest)
Meet legal obligations (basis: legal obligation)
Access camera/gallery when you grant permission (basis: consent)

6. Your Rights

You have the right to access, rectify, erase, and port your data, to restrict or object to processing, and to withdraw consent at any time. You can delete your account yourself from within the app or the account-deletion page. You also have the right to lodge a complaint with your data-protection authority.

To exercise your rights, contact us via our support page. We aim to respond within 30 days.

7. Data Retention

Original image: deleted immediately after analysis
Thumbnail and result: until you delete them or close your account, up to 90 days
Account data: for the life of the account
Security logs (IP): for a limited period for security purposes
Login sessions: purged 30 days after they expire

8. Security

🔐 Data encryption in transit (SSL/TLS)
🔒 Passwords stored hashed (one-way, not reversible)
🗑️ Original image deleted immediately after analysis

9. Cookies

We use one strictly-necessary first-party cookie (Trenaly_Session) to keep you signed in, and a security (CSRF) token. We do not use advertising or third-party tracking cookies. You can clear these in your browser, but you will be signed out.

10. Service Providers & International Transfers

We share limited data with providers acting on our behalf, solely to run the Service:

Google (Google Play billing, Firebase push notifications)
Apple (App Store billing)
Brevo (sending transactional email)

They may process data outside your country (including the EU and the US) under appropriate safeguards. Your analysis images stay on our servers and are not sent to them. We do not sell your data.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced in-app or by email, and the "Last Updated" date is always shown at the top of this page.

12. Contact

For questions or complaints, use our support page

Privacy Policy